$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa File: 0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa (raw, json) Hash identifier: l5eWuYL8Yi73xUmdbMkJBGSgyTQf55c/6AtLpuIFEeI= Subject key identifier: 81:AB:EB:3D:B8:BD:BA:FE:5F:9C:3E:D5:3B:5C:04:02:D3:AB:92:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F5F0A92074F2D9A4B890 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f5:f0:a9:20:74:f2:d9:a4:b8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1c4f730a-a861-4598-944d-834b64828319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:ff:22:90:7b:c8:c5:fb:9d:47:ee:9e:42: 22:17:60:e0:de:a7:81:b6:46:d1:21:19:70:a2:7f: 10:f0:65:54:d7:da:41:d3:c8:39:72:98:3b:4a:99: f4:f4:64:84:26:c6:29:07:98:fc:5a:3c:8a:5a:4f: 4b:5b:86:fd:58:ac:14:fe:e8:fd:84:f9:75:2c:6c: 85:76:11:4c:1f:fa:45:fe:31:fa:4e:0f:20:09:43: ca:0c:ba:00:ab:53:93:29:f5:9e:dc:10:7d:9b:67: 71:66:6b:f9:7e:a4:ed:04:74:bb:57:9b:eb:1c:ce: 3c:42:8a:89:a0:c8:69:df:cd:59:5e:d7:84:57:b2: 56:ad:3d:2d:97:9d:dc:70:d5:71:39:7c:66:6f:20: 21:29:e9:8c:b8:80:0e:e8:a1:2f:e5:63:78:dd:b9: e0:5f:be:cd:c9:71:f5:d9:63:d5:07:3c:fc:1d:3a: 22:f4:9b:a8:5b:64:16:a2:54:6e:e1:b3:17:19:2c: 66:e9:41:8e:fa:8c:ca:63:c9:c2:b8:09:4e:24:d7: e2:17:95:62:20:0c:f4:8d:da:79:ca:cc:9a:a9:76: 36:e1:38:14:28:6a:af:e1:e1:5a:3d:e4:04:07:42: 0c:f5:58:3d:b3:c2:0b:cb:bd:3d:89:b5:a2:8e:a5: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:EB:3D:B8:BD:BA:FE:5F:9C:3E:D5:3B:5C:04:02:D3:AB:92:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0746cd43-8cf8-3bac-a347-c85fe78e4cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ac:45:15:bb:77:48:aa:da:9d:07:d7:e3:17:2d:4e:76:11: b2:cc:b4:ac:a8:06:80:12:34:c2:3f:e8:bd:4f:58:43:e6:23: ee:09:98:4f:b5:ab:3a:40:54:0c:e6:a2:19:76:81:6a:c8:3e: 28:23:17:1b:38:21:98:4c:4c:6f:0b:1d:13:4a:07:ab:ce:44: 28:20:a5:fc:c0:3c:ea:ff:ca:9a:66:4a:83:6a:dd:a6:43:ed: ef:48:fa:e5:22:8e:65:f3:11:ab:eb:ec:29:71:4a:62:18:13: a9:21:2b:71:31:ad:26:46:be:03:a1:b1:05:d7:3c:9e:5d:01: b0:4b:c6:62:48:e3:68:04:d9:95:dc:53:98:c9:3d:ee:bd:c1: 5a:d1:7a:d3:d9:82:47:ab:b0:49:60:08:96:ad:4d:74:90:97: 16:f0:ab:4a:3a:cf:b7:4f:8f:55:7e:76:fb:9f:b3:a1:f8:43: 60:34:6e:80:44:77:3f:08:ec:98:a4:65:27:ca:78:2b:72:aa: 52:0a:79:82:d4:cb:74:6a:ae:4a:c1:40:08:32:9f:de:8c:4f: dd:f2:f3:8e:a5:da:c3:36:58:b6:af:b3:ec:27:9a:17:bd:35: 07:18:7b:00:e8:32:30:81:63:57:80:09:a4:d6:a8:e7:5e:ac: 5c:18:0f:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PXwqSB08tmkuJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWM0ZjczMGEtYTg2MS00NTk4LTk0NGQtODM0YjY0ODI4MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rv/IpB7yMX7nUfunkIiF2Dg3qeBtkbRIRlw on8Q8GVU19pB08g5cpg7Spn09GSEJsYpB5j8WjyKWk9LW4b9WKwU/uj9hPl1LGyF dhFMH/pF/jH6Tg8gCUPKDLoAq1OTKfWe3BB9m2dxZmv5fqTtBHS7V5vrHM48QoqJ oMhp381ZXteEV7JWrT0tl53ccNVxOXxmbyAhKemMuIAO6KEv5WN43bngX77NyXH1 2WPVBzz8HToi9JuoW2QWolRu4bMXGSxm6UGO+ozKY8nCuAlOJNfiF5ViIAz0jdp5 ysyaqXY24TgUKGqv4eFaPeQEB0IM9Vg9s8ILy709ibWijqWgIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGr6z24vbr+X5w+1TtcBALTq5JJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc0NmNkNDMtOGNmOC0z YmFjLWEzNDctYzg1ZmU3OGU0Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOsRRW7d0iq2p0H1+MXLU52EbLMtKyoBoASNMI/6L1PWEPmI+4JmE+1 qzpAVAzmohl2gWrIPigjFxs4IZhMTG8LHRNKB6vORCggpfzAPOr/yppmSoNq3aZD 7e9I+uUijmXzEavr7ClxSmIYE6khK3ExrSZGvgOhsQXXPJ5dAbBLxmJI42gE2ZXc U5jJPe69wVrRetPZgkersElgCJatTXSQlxbwq0o6z7dPj1V+dvufs6H4Q2A0boBE dz8I7JikZSfKeCtyqlIKeYLUy3RqrkrBQAgyn96MT93y846l2sM2WLavs+wnmhe9 NQcYewDoMjCBY1eACaTWqOderFwYD/4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:30 2026 by rpki-client