$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa File: 00c8ed4f-37f4-323f-8afb-55168be0c0df.roa (raw, json) Hash identifier: OvD3iBCqbXljCo4l5v1lpuDJBoT35KHTclsSkD0MLrY= Subject key identifier: FC:94:19:B8:28:AD:E1:AB:98:43:8E:C2:8B:5E:34:AB:1D:AC:C8:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04B8B72C4B328F8EF1E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4b:8b:72:c4:b3:28:f8:ef:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c1d0bd3b-463e-4fbb-a052-07745f0d246e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:5e:5f:e2:2a:e3:99:94:72:5c:3a:31:e6: a1:c6:2c:45:59:eb:37:92:5e:6b:d0:0b:a8:95:b0: 75:06:a0:e0:1e:30:7b:c0:09:19:da:45:d0:4b:33: f6:cd:d9:73:6b:5a:ea:be:54:72:f1:84:e3:bb:34: 2c:52:a3:98:83:83:2f:3d:92:09:d2:d3:0c:b1:3a: 41:67:65:b2:4f:19:17:7e:59:93:53:94:ee:fc:f7: 5c:87:34:77:7f:bd:58:32:59:f1:08:c4:05:73:c6: 1a:6e:4c:27:15:28:bf:3b:45:15:07:a6:6c:62:2c: ec:5f:2e:60:85:f8:e7:54:b0:10:55:fb:73:bd:75: 7f:f1:61:01:c9:5b:07:55:00:33:11:19:a2:71:5a: 22:88:eb:06:a6:e9:34:34:6f:18:45:23:26:d5:db: 05:8c:12:aa:d3:72:19:42:8f:59:e7:32:0e:73:71: 92:56:23:3c:d0:85:19:c5:f3:ba:0d:b8:0a:a1:28: 16:3b:2f:ae:4c:99:50:8e:2b:1b:69:b0:60:5d:54: c4:8b:bd:b1:66:75:2b:c9:54:dc:51:6c:68:38:9f: c9:69:91:77:9d:8d:5c:96:2c:f0:4f:72:ce:5a:84: f0:98:b3:49:cf:07:b1:85:e1:0c:03:d5:6a:94:ec: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:19:B8:28:AD:E1:AB:98:43:8E:C2:8B:5E:34:AB:1D:AC:C8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6e:81:95:43:f4:89:3b:43:27:3e:87:69:2f:61:f3:49:29: 15:b6:c2:87:2a:b9:ab:66:5e:56:8a:d3:47:ef:e5:9f:6d:a6: ff:23:83:d7:18:01:60:fc:01:f3:f8:39:74:86:4e:36:e9:c4: 43:47:3c:f4:c4:89:f9:aa:11:45:24:9b:07:4c:e1:61:3d:da: 3b:44:a3:6c:84:c3:3d:11:22:2a:f3:d1:57:98:4e:63:76:13: 55:86:27:6b:03:97:df:cb:17:f6:45:c0:5c:98:a2:f6:92:9f: 20:11:ef:37:19:47:4d:c9:96:ae:ce:5e:57:e9:17:b0:90:32: 10:a9:1e:0d:e0:c2:e6:8c:db:86:16:1b:f0:81:97:1c:98:78: 25:b1:14:bb:1c:52:e8:17:17:e2:32:fa:e8:60:00:2e:7e:cb: 94:0c:36:c4:74:15:95:51:21:8e:87:c9:99:f9:4d:b3:b3:21: 54:60:4f:fb:75:ac:24:e9:27:9c:c0:ee:f5:10:56:24:3d:ce: 51:4e:be:1a:29:61:73:94:af:e2:8d:9b:87:0a:c8:b7:ab:80: 9a:e0:72:30:ae:0b:11:eb:3c:19:c5:5b:ab:b8:12:6e:7f:74: 10:fe:30:17:ae:3c:75:5c:a8:09:e8:f4:33:6a:2f:d3:49:8e: 13:92:bb:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EuLcsSzKPjvHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzFkMGJkM2ItNDYzZS00ZmJiLWEwNTItMDc3NDVmMGQyNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdxeX+Iq45mUclw6MeahxixFWes3kl5r0Auo lbB1BqDgHjB7wAkZ2kXQSzP2zdlza1rqvlRy8YTjuzQsUqOYg4MvPZIJ0tMMsTpB Z2WyTxkXflmTU5Tu/PdchzR3f71YMlnxCMQFc8YabkwnFSi/O0UVB6ZsYizsXy5g hfjnVLAQVftzvXV/8WEByVsHVQAzERmicVoiiOsGpuk0NG8YRSMm1dsFjBKq03IZ Qo9Z5zIOc3GSViM80IUZxfO6DbgKoSgWOy+uTJlQjisbabBgXVTEi72xZnUryVTc UWxoOJ/JaZF3nY1clizwT3LOWoTwmLNJzwexheEMA9VqlOwJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyUGbgoreGrmEOOwoteNKsdrMh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDBjOGVkNGYtMzdmNC0z MjNmLThhZmItNTUxNjhiZTBjMGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRugZVD9Ik7Qyc+h2kvYfNJKRW2wocquatmXlaK00fv5Z9tpv8jg9cY AWD8AfP4OXSGTjbpxENHPPTEifmqEUUkmwdM4WE92jtEo2yEwz0RIirz0VeYTmN2 E1WGJ2sDl9/LF/ZFwFyYovaSnyAR7zcZR03Jlq7OXlfpF7CQMhCpHg3gwuaM24YW G/CBlxyYeCWxFLscUugXF+Iy+uhgAC5+y5QMNsR0FZVRIY6HyZn5TbOzIVRgT/t1 rCTpJ5zA7vUQViQ9zlFOvhopYXOUr+KNm4cKyLergJrgcjCuCxHrPBnFW6u4Em5/ dBD+MBeuPHVcqAno9DNqL9NJjhOSu9c= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:39 2026 by rpki-client