$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa File: 1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa (raw, json) Hash identifier: YprycfVB9qas9HL16B9ki1QL1HLZF7jJXSKEwDZvHzc= Subject key identifier: C4:E1:53:F5:11:A9:C3:CD:E8:D9:FC:50:55:6C:B8:40:E5:0E:FE:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E046D05CC932A4587E77E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:46:d0:5c:c9:32:a4:58:7e:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=478b4ecb-416c-4177-bc80-0ba54e2fe633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:a5:cd:ff:be:bb:56:22:00:6d:92:8d:24: c1:60:81:71:09:b4:d1:a6:6b:c4:1e:81:04:11:fe: b4:e9:87:29:8b:c9:21:a1:0f:ea:25:4a:d6:b6:21: c0:9a:4e:5b:a7:e8:f0:90:c3:fb:1a:8c:b2:3d:c7: c4:42:74:82:e7:ee:0f:f3:3a:6d:ea:ba:9b:8a:7c: 34:7b:b8:9f:6d:5f:e0:f2:bb:d1:ff:c3:8b:cd:d8: 8e:a3:d3:83:cf:8f:b8:5f:2d:bb:ad:d5:72:36:e4: b0:8f:2b:ee:5c:e1:04:cf:fb:44:86:bc:b3:1a:9a: a3:d9:c6:64:c1:69:18:fe:89:a3:90:6c:03:6d:7c: ed:7c:7c:12:f0:b3:47:06:9d:88:89:58:d7:02:ad: 56:75:01:95:bb:74:91:bf:ab:c2:97:e8:1c:45:2f: c4:ef:8a:40:af:27:4c:ca:6b:9c:34:30:46:88:13: b4:36:70:1c:55:db:55:36:2b:54:b4:2b:54:11:d1: 36:fe:14:3a:ad:db:b4:91:21:bb:40:13:cb:df:5c: 10:a5:3c:92:eb:09:cb:8c:d6:86:af:a7:20:10:7a: 40:a4:e4:01:c1:ce:fe:e0:0a:bd:f9:1e:d5:92:65: 7c:63:c0:80:07:84:a1:f0:b3:ca:7c:06:ff:73:ec: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:53:F5:11:A9:C3:CD:E8:D9:FC:50:55:6C:B8:40:E5:0E:FE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1095e48e-afa8-33f2-b0e6-fca6df3ac868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:20:e5:a7:94:cb:d1:6f:31:e7:f1:db:79:cf:71:a2:2d:ac: 54:8e:98:bc:c3:f9:71:44:07:95:e9:43:fd:33:b8:5a:15:e1: ef:ee:c5:8e:51:70:38:09:92:1e:fc:17:6e:d0:5b:c7:b7:45: 1c:63:c1:be:b3:34:de:3d:45:6b:ad:d9:4e:51:8c:b5:b9:c1: 37:9f:76:5d:a7:fa:68:1e:d3:54:ad:12:6d:fc:5d:eb:bb:91: 1c:38:0e:00:8f:27:a2:1a:5b:ee:82:96:ef:03:d8:6e:74:01: 0e:db:d1:0d:4d:c4:ca:ee:75:e7:db:04:49:2a:d6:82:71:3c: fd:c7:ec:df:80:04:67:3e:7c:18:5c:44:d6:ad:30:fd:26:3d: 5b:b8:c5:05:30:2b:45:fd:19:b6:ae:85:55:0e:d2:ac:e8:90: 3b:96:da:c7:65:f3:47:2d:a0:9b:c8:76:fc:f6:19:93:52:27: d4:55:ec:e0:5a:a4:c9:9e:e5:4b:15:06:91:88:77:1f:29:6d: 0f:30:ae:b0:be:aa:4d:cf:20:e5:ac:6c:77:62:16:57:32:ca: bb:9d:c7:da:d2:77:8c:53:36:23:9d:52:df:27:4e:1a:25:50: 59:eb:a4:42:72:2a:01:bf:aa:e5:65:f7:f4:8e:9e:72:b5:3a: fe:19:7a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EbQXMkypFh+d+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDc4YjRlY2ItNDE2Yy00MTc3LWJjODAtMGJhNTRlMmZlNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydulzf++u1YiAG2SjSTBYIFxCbTRpmvEHoEE Ef606Ycpi8khoQ/qJUrWtiHAmk5bp+jwkMP7GoyyPcfEQnSC5+4P8zpt6rqbinw0 e7ifbV/g8rvR/8OLzdiOo9ODz4+4Xy27rdVyNuSwjyvuXOEEz/tEhryzGpqj2cZk wWkY/omjkGwDbXztfHwS8LNHBp2IiVjXAq1WdQGVu3SRv6vCl+gcRS/E74pArydM ymucNDBGiBO0NnAcVdtVNitUtCtUEdE2/hQ6rdu0kSG7QBPL31wQpTyS6wnLjNaG r6cgEHpApOQBwc7+4Aq9+R7VkmV8Y8CAB4Sh8LPKfAb/c+wqAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMThU/URqcPN6Nn8UFVsuEDlDv6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTA5NWU0OGUtYWZhOC0z M2YyLWIwZTYtZmNhNmRmM2FjODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgg5aeUy9FvMefx23nPcaItrFSOmLzD+XFEB5XpQ/0zuFoV4e/uxY5R cDgJkh78F27QW8e3RRxjwb6zNN49RWut2U5RjLW5wTefdl2n+mge01StEm38Xeu7 kRw4DgCPJ6IaW+6Clu8D2G50AQ7b0Q1NxMrudefbBEkq1oJxPP3H7N+ABGc+fBhc RNatMP0mPVu4xQUwK0X9GbauhVUO0qzokDuW2sdl80ctoJvIdvz2GZNSJ9RV7OBa pMme5UsVBpGIdx8pbQ8wrrC+qk3PIOWsbHdiFlcyyrudx9rSd4xTNiOdUt8nThol UFnrpEJyKgG/quVl9/SOnnK1Ov4Zet0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:14 2026 by rpki-client