$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa File: 0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa (raw, json) Hash identifier: xb1rPomOBFx4yKXJs4DE6xQeV6bvNr86BuztLc4VcSg= Subject key identifier: 1F:66:DC:71:64:F2:ED:BC:E0:BB:02:B9:22:5A:73:BE:78:38:CC:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E034838AA4AC42CD626780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:34:83:8a:a4:ac:42:cd:62:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=986bb831-df97-4bba-af9e-c63602ea7222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:24:a9:18:c9:8d:c9:5b:d7:57:d8:c2:d9: 53:ec:14:bd:85:45:56:c8:9b:8d:25:ee:ca:24:0b: f0:85:59:36:ae:c9:01:24:3c:70:bf:b0:dd:1d:99: ca:8a:99:b0:25:3a:9a:4f:5a:56:a8:7c:0b:ae:d3: 94:3f:55:af:59:ee:ac:d0:0f:85:4c:b7:6c:67:9d: 04:c6:83:9a:6e:56:e5:4c:8c:6b:22:0b:92:c6:e6: 62:61:73:76:e3:5a:6f:91:16:f3:9c:8d:cb:8f:70: c3:f6:e8:59:d9:87:32:01:5b:c1:04:07:1e:0b:14: 72:8e:c0:e9:1f:30:12:71:90:29:6c:39:84:5e:7c: 2c:ff:05:0c:28:6b:0e:56:59:72:ef:63:42:f6:d3: 8d:50:12:8f:bc:24:db:94:b0:c2:05:5b:7a:71:d0: a2:47:f5:c3:8d:da:ee:dd:47:17:c0:4d:3b:5b:cf: 77:58:d4:5d:c7:ab:b6:e7:7b:da:d8:99:38:c5:8f: fe:7a:93:2e:d6:94:0f:94:98:71:a6:95:4a:10:d2: 0d:2b:55:a0:16:b9:0a:ef:15:bc:0e:43:54:bc:52: be:59:9e:c4:b4:cd:a4:aa:60:68:21:bf:a7:0d:49: 50:f6:32:f3:5e:a9:a9:ed:1a:bc:c8:2a:9f:c6:b9: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:66:DC:71:64:F2:ED:BC:E0:BB:02:B9:22:5A:73:BE:78:38:CC:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:74:05:3b:7b:2d:cb:9b:1a:0b:04:3f:21:77:b6:d2:0c:91: 43:e7:af:bb:ed:f3:c7:be:99:94:54:c1:81:e0:8e:70:46:41: 0f:d4:b1:ee:14:53:d7:84:9f:d6:6c:8c:b9:fe:43:5b:bd:1f: 0f:a7:7c:36:69:16:74:f6:65:fb:1d:43:3b:9e:33:6d:a4:da: de:be:3c:ea:8b:00:15:d4:60:48:a9:d8:b9:eb:39:1b:6a:59: bd:f1:32:ea:45:ba:d8:7c:82:ab:dd:61:e0:4f:6c:b0:3e:c0: bc:cd:7a:94:36:f6:cd:1f:73:d5:95:81:5a:ab:d0:19:61:a1: d2:7b:7d:5f:7d:5c:f2:bd:3c:87:f6:1f:43:08:4d:0f:74:9c: 19:b8:0e:0c:d5:51:82:9d:23:38:4f:04:ea:9b:70:d3:53:45: ad:87:14:ad:df:fb:a6:a4:b2:7a:64:70:ea:f2:d1:f1:3e:0e: 28:5a:b5:95:16:c1:ce:ad:e2:da:db:70:68:53:aa:bf:7d:08: f7:c8:b2:1c:79:bd:95:33:3e:02:87:fe:e8:9c:d5:c0:d5:3e: 52:a2:b4:e3:ff:13:0c:37:41:f3:75:a5:4b:14:88:b0:db:2e: bc:8b:bf:32:80:c0:a8:22:ab:81:e0:38:35:a9:ff:26:91:dd: b2:55:e0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DSDiqSsQs1iZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTg2YmI4MzEtZGY5Ny00YmJhLWFmOWUtYzYzNjAyZWE3MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2QkqRjJjclb11fYwtlT7BS9hUVWyJuNJe7K JAvwhVk2rskBJDxwv7DdHZnKipmwJTqaT1pWqHwLrtOUP1WvWe6s0A+FTLdsZ50E xoOablblTIxrIguSxuZiYXN241pvkRbznI3Lj3DD9uhZ2YcyAVvBBAceCxRyjsDp HzAScZApbDmEXnws/wUMKGsOVlly72NC9tONUBKPvCTblLDCBVt6cdCiR/XDjdru 3UcXwE07W893WNRdx6u253va2Jk4xY/+epMu1pQPlJhxppVKENINK1WgFrkK7xW8 DkNUvFK+WZ7EtM2kqmBoIb+nDUlQ9jLzXqmp7Rq8yCqfxrlpowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9m3HFk8u284LsCuSJac754OMxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGY0YjcyNGItM2M4My0z NzdlLWEzZmEtNDljMTM0ZjkzZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF0BTt7LcubGgsEPyF3ttIMkUPnr7vt88e+mZRUwYHgjnBGQQ/Use4U U9eEn9ZsjLn+Q1u9Hw+nfDZpFnT2ZfsdQzueM22k2t6+POqLABXUYEip2LnrORtq Wb3xMupFuth8gqvdYeBPbLA+wLzNepQ29s0fc9WVgVqr0BlhodJ7fV99XPK9PIf2 H0MITQ90nBm4DgzVUYKdIzhPBOqbcNNTRa2HFK3f+6aksnpkcOry0fE+DihatZUW wc6t4trbcGhTqr99CPfIshx5vZUzPgKH/uic1cDVPlKitOP/Eww3QfN1pUsUiLDb LryLvzKAwKgiq4HgODWp/yaR3bJV4HM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:11 2026 by rpki-client