$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa File: 0aac0a89-c692-33ad-b439-320e12b19fad.roa (raw, json) Hash identifier: KgdRjnnJRR+qngqqtyRnVSN69r37+FC2VCE6cMA74nw= Subject key identifier: 43:D9:B7:7D:65:C2:7A:D6:9E:80:AE:4B:38:8A:31:DA:22:C2:76:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E8AF24C9F2202F602A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e8:af:24:c9:f2:20:2f:60:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d79d0b5a-933a-4308-a408-25c0f1c3a92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3d:84:95:28:cc:07:24:7a:1b:63:08:d4:6e: c9:db:67:d2:42:4a:54:a6:2b:99:4a:37:0f:85:fc: de:f8:a4:ca:05:38:c4:8f:f0:cc:ed:06:7c:2f:33: ea:b6:8c:c3:82:9c:d5:32:48:b7:ef:99:d7:f1:83: e1:3f:ee:7f:28:f2:d0:9a:c7:94:80:09:65:fa:85: 28:df:9c:14:90:ac:31:32:c1:33:59:d8:fd:94:a2: 57:27:97:4c:ba:ea:63:8f:26:e6:9a:ab:dd:60:34: ce:f5:82:4a:9a:59:13:76:45:f8:d8:11:9a:1e:41: 5d:7f:49:5a:67:6c:9e:4f:0d:d3:e7:e9:3f:b9:56: df:d2:99:5f:3b:44:ef:ff:6b:1a:e6:5d:5b:af:d0: 48:a1:b6:cb:9a:d0:6b:88:c1:4e:00:4d:6a:f9:69: 3f:c0:22:3d:8a:a5:aa:1e:72:f2:73:10:2b:c4:1e: 2e:e2:5e:a0:ca:d7:e4:56:c7:e1:52:bd:86:ee:6e: e8:bc:45:93:7b:c6:28:57:7b:8e:91:52:72:79:c3: a7:ab:05:a5:ea:cd:06:aa:fb:8f:48:ba:b6:b7:c2: c9:44:68:90:39:a7:68:82:bc:ad:78:ef:79:39:24: ec:6e:5b:c7:b2:2f:4d:65:fa:c5:26:63:d0:16:a2: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:B7:7D:65:C2:7A:D6:9E:80:AE:4B:38:8A:31:DA:22:C2:76:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0aac0a89-c692-33ad-b439-320e12b19fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:52:c0:05:fa:89:af:a2:36:8a:ca:a9:b8:02:c0:29:fe:52: 19:e7:66:b7:75:eb:44:84:d5:5e:54:68:ca:5b:82:ae:7a:48: 7e:4b:36:e2:0a:a7:53:63:f8:4b:51:6f:6d:a7:91:a7:f9:d2: 0e:c4:55:3d:3f:77:72:a0:bb:47:9f:98:f8:3f:b6:40:7c:0a: ad:4d:c2:9d:61:b9:cc:20:b0:1e:dd:4f:7d:10:62:4d:06:9f: a3:93:83:ee:02:4e:63:03:da:a0:7b:d3:5c:b5:7c:b1:96:4c: d2:ed:cc:66:62:6a:5b:48:95:26:08:f5:37:f2:7b:b9:e8:e9: 1f:2b:2f:a0:fd:a5:86:d3:97:ea:19:71:6a:68:10:a3:46:e0: 38:8d:18:3e:48:f5:97:a2:83:5c:f8:a7:ad:b0:1a:da:c0:c6: e1:7d:5e:e3:cf:99:66:aa:3b:68:c1:48:29:a3:ea:c5:3e:bb: ed:cb:e0:3f:36:22:b9:c8:3d:a7:53:a0:85:2a:e2:b6:20:ca: 78:45:1e:da:be:61:ac:15:65:8f:b1:61:a7:88:8e:41:41:ae: 4c:68:59:b9:87:09:ea:8e:7e:05:2a:e0:4d:71:7f:b3:33:30: c6:9c:ca:fb:7d:eb:dc:16:30:d4:09:b2:6e:a6:25:5a:45:2a: 54:fe:dd:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OivJMnyIC9gKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDc5ZDBiNWEtOTMzYS00MzA4LWE0MDgtMjVjMGYxYzNhOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z2ElSjMByR6G2MI1G7J22fSQkpUpiuZSjcP hfze+KTKBTjEj/DM7QZ8LzPqtozDgpzVMki375nX8YPhP+5/KPLQmseUgAll+oUo 35wUkKwxMsEzWdj9lKJXJ5dMuupjjybmmqvdYDTO9YJKmlkTdkX42BGaHkFdf0la Z2yeTw3T5+k/uVbf0plfO0Tv/2sa5l1br9BIobbLmtBriMFOAE1q+Wk/wCI9iqWq HnLycxArxB4u4l6gytfkVsfhUr2G7m7ovEWTe8YoV3uOkVJyecOnqwWl6s0GqvuP SLq2t8LJRGiQOadogryteO95OSTsblvHsi9NZfrFJmPQFqKt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPZt31lwnrWnoCuSziKMdoiwnZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFhYzBhODktYzY5Mi0z M2FkLWI0MzktMzIwZTEyYjE5ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxSwAX6ia+iNorKqbgCwCn+UhnnZrd160SE1V5UaMpbgq56SH5LNuIK p1Nj+EtRb22nkaf50g7EVT0/d3Kgu0efmPg/tkB8Cq1Nwp1hucwgsB7dT30QYk0G n6OTg+4CTmMD2qB701y1fLGWTNLtzGZialtIlSYI9Tfye7no6R8rL6D9pYbTl+oZ cWpoEKNG4DiNGD5I9Zeig1z4p62wGtrAxuF9XuPPmWaqO2jBSCmj6sU+u+3L4D82 IrnIPadToIUq4rYgynhFHtq+YawVZY+xYaeIjkFBrkxoWbmHCeqOfgUq4E1xf7Mz MMacyvt969wWMNQJsm6mJVpFKlT+3cM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:12 2026 by rpki-client