$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa File: 1a1b3802-ea48-3d76-a847-7894a6c024c8.roa (raw, json) Hash identifier: m1oPKNWqha9Iykc/UXytaIf6NTkssW4twL9E/pVgvMo= Subject key identifier: 6C:98:E5:0C:AC:0D:C8:EE:D3:ED:AA:E9:53:AB:02:01:AF:92:FB:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F4306072FF6AFA11D500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f4:30:60:72:ff:6a:fa:11:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0b1be633-d4d7-4ef6-9e19-b60a1674393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2e:67:69:23:a8:14:eb:6a:ea:0f:cd:01:f7: f4:2a:51:cd:54:e6:13:12:78:d7:8e:b2:c7:e3:eb: a3:61:3c:53:1f:a0:a6:08:42:ff:ef:65:39:d7:b2: e4:6b:9d:95:8e:ab:fc:df:e2:fe:28:e4:01:14:25: 88:99:11:a9:e8:c0:b5:97:df:b8:92:8b:4a:c0:a4: 77:2f:d6:b9:2d:fa:cf:6b:8d:4f:00:a4:2f:0d:64: 0c:68:be:58:d7:06:0c:21:44:d0:d7:5d:9a:dc:3a: f4:0d:23:62:76:37:74:d5:17:95:b3:ae:26:3e:88: c0:a9:fa:27:3e:09:1c:67:6b:26:be:ab:97:75:35: 57:fb:b3:ba:5a:1e:ca:8b:ff:8c:0a:d9:bd:96:58: d5:72:1f:42:34:54:18:32:9a:57:22:0e:6b:94:c7: 7e:1e:71:d9:47:b6:0d:67:5d:83:a4:32:1a:ae:91: 3c:3a:a5:3e:cc:ff:92:85:ea:89:a5:1e:8f:85:51: 27:b7:d4:7c:b6:9e:8e:dd:08:59:6c:56:09:c7:70: 2f:67:f2:32:e7:9e:05:d4:d5:ed:27:b4:57:db:87: 5c:20:bd:ed:52:3c:a2:59:90:88:f6:39:42:7b:7a: cc:9a:d8:af:87:82:0d:1c:f0:da:51:c0:e3:ae:3f: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:98:E5:0C:AC:0D:C8:EE:D3:ED:AA:E9:53:AB:02:01:AF:92:FB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a1b3802-ea48-3d76-a847-7894a6c024c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:74:86:ed:f9:95:84:5e:56:3e:3d:9d:f9:e6:3c:01:5b:3b: 81:75:f7:c4:20:fd:f1:3c:c0:76:8c:8b:27:7e:1b:36:6c:41: 20:b4:63:89:b1:f8:03:05:71:b6:eb:e6:a7:dc:e9:c6:c2:a9: 3d:af:6b:d9:d4:a5:45:47:67:b7:a4:aa:14:5d:89:ff:fd:07: fb:6c:c5:3c:76:d5:99:fa:c2:7a:fd:3e:9e:f4:fc:fa:2c:78: f4:ba:a4:b4:39:0f:93:ed:84:09:bf:ba:28:0b:b0:29:91:e6: 6d:68:ad:f2:6e:e1:99:8a:f8:b2:a3:db:47:29:9a:4a:0f:a9: 4e:34:df:18:57:76:8b:ed:e3:a0:55:66:fa:c4:08:ab:fb:47: bc:e7:5d:4e:b8:2a:d1:44:a9:1e:2e:6f:e9:d2:c1:9d:de:cc: 94:cb:4e:b1:c2:4a:9b:5e:1c:8d:9c:d1:66:8d:5e:c4:3a:88: 99:83:b0:0c:61:93:b3:28:cd:8a:4c:d4:76:ca:f2:a6:a9:2c: e3:cd:bb:f1:fb:1d:22:ef:ec:c0:dc:4e:12:cb:a2:b8:dd:9f: 0c:ae:01:1e:d4:28:3a:73:c6:20:1f:33:f5:58:bf:d0:52:15: 60:4b:35:f6:c4:84:65:65:15:d6:8d:81:9e:52:84:c2:62:70: ed:15:3e:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PQwYHL/avoR1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGIxYmU2MzMtZDRkNy00ZWY2LTllMTktYjYwYTE2NzQzOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C5naSOoFOtq6g/NAff0KlHNVOYTEnjXjrLH 4+ujYTxTH6CmCEL/72U517Lka52Vjqv83+L+KOQBFCWImRGp6MC1l9+4kotKwKR3 L9a5LfrPa41PAKQvDWQMaL5Y1wYMIUTQ112a3Dr0DSNidjd01ReVs64mPojAqfon PgkcZ2smvquXdTVX+7O6Wh7Ki/+MCtm9lljVch9CNFQYMppXIg5rlMd+HnHZR7YN Z12DpDIarpE8OqU+zP+SheqJpR6PhVEnt9R8tp6O3QhZbFYJx3AvZ/Iy554F1NXt J7RX24dcIL3tUjyiWZCI9jlCe3rMmtivh4INHPDaUcDjrj8ozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyY5QysDcju0+2q6VOrAgGvkvvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWExYjM4MDItZWE0OC0z ZDc2LWE4NDctNzg5NGE2YzAyNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ0hu35lYReVj49nfnmPAFbO4F198Qg/fE8wHaMiyd+GzZsQSC0Y4mx +AMFcbbr5qfc6cbCqT2va9nUpUVHZ7ekqhRdif/9B/tsxTx21Zn6wnr9Pp70/Pos ePS6pLQ5D5PthAm/uigLsCmR5m1orfJu4ZmK+LKj20cpmkoPqU403xhXdovt46BV ZvrECKv7R7znXU64KtFEqR4ub+nSwZ3ezJTLTrHCSpteHI2c0WaNXsQ6iJmDsAxh k7MozYpM1HbK8qapLOPNu/H7HSLv7MDcThLLorjdnwyuAR7UKDpzxiAfM/VYv9BS FWBLNfbEhGVlFdaNgZ5ShMJicO0VPhE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:08 2026 by rpki-client