$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa File: 1cd548a2-3f0a-3bae-b690-0b2164300b26.roa (raw, json) Hash identifier: OELne1pHdq1/DMPCAp4zPhJNiX6/1SSEqV3wVgtUvT0= Subject key identifier: 82:EF:41:E5:F2:4C:F4:1C:79:A8:63:A3:AF:92:7E:C5:51:86:CC:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E3F4A0D818176D28D880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 209.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e3:f4:a0:d8:18:17:6d:28:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=396f084a-3c2d-4bd0-92f5-646b722558c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:34:f0:26:ec:82:6e:47:88:32:4c:52:9e: e4:21:b6:67:10:91:f9:44:16:5f:bd:54:bf:57:50: 32:27:16:63:74:72:53:21:25:30:50:9a:aa:67:e1: 50:79:d1:32:45:f2:29:5c:cb:01:26:71:b3:89:9c: be:c8:d4:50:6d:03:43:3d:24:a1:a7:8e:69:9f:73: 74:a0:0b:de:f4:a7:1e:9c:b9:c1:5a:a6:44:b3:ea: 5d:4b:54:d3:75:5b:d7:74:69:fa:48:7e:83:8e:93: 18:63:3e:f7:19:b9:42:bb:7d:bd:d7:8a:a7:44:f2: 30:89:71:2b:d3:6f:3a:eb:fb:ba:8a:55:3d:24:41: 37:f2:ec:76:97:57:50:a3:99:7d:c6:b8:c0:c9:90: 5a:3e:d6:a0:79:e3:36:05:5e:bd:f9:91:12:40:dd: ec:4c:00:d9:bf:20:db:7d:81:08:e7:8f:4c:5b:7a: 1d:b1:76:3a:de:1f:ee:48:ed:51:49:16:e5:1c:20: bd:83:41:fc:29:11:70:ee:c4:4b:86:24:3f:ef:36: 75:6b:5c:4a:43:64:a1:ae:cd:95:2f:96:0a:6d:dc: 04:17:e5:85:0f:80:15:03:33:c7:9f:a6:de:4f:a4: bb:a3:7d:81:63:90:85:e5:72:8d:1c:fc:ba:e1:8d: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:41:E5:F2:4C:F4:1C:79:A8:63:A3:AF:92:7E:C5:51:86:CC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1cd548a2-3f0a-3bae-b690-0b2164300b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:44:92:67:34:0e:5c:b7:b0:92:ae:81:4c:9d:92:f6:95:16: 57:e6:91:db:c1:09:7a:6c:a0:7b:b5:de:2a:a3:e4:e2:9e:01: 3e:7c:1f:62:86:f9:ab:97:bb:ae:05:19:96:ab:b4:3b:ce:44: 1e:1a:43:fd:d5:f0:1e:03:f5:95:62:77:3b:d4:71:7f:71:45: 92:9f:da:1d:a8:38:54:35:a6:8c:11:fa:38:10:51:5b:11:83: 16:8a:93:d2:a7:3f:46:6e:99:e6:0c:db:c9:fb:79:52:03:5b: 25:90:5d:a8:76:45:83:04:5e:36:7f:5a:9b:b9:54:98:74:0a: 8c:bf:c9:e1:4f:63:99:cd:37:a2:b5:77:9b:c7:79:9f:c9:60: 43:2b:90:cc:32:67:f9:59:32:ee:c0:7e:af:48:5b:ec:45:1b: 28:78:b3:07:f1:63:5f:29:ab:06:12:98:09:7d:3e:2d:86:13: c3:4a:5e:c8:e9:99:56:fb:66:6c:cc:7b:94:f1:3f:c1:b4:f0: b2:b0:85:7b:b7:41:de:68:51:fe:46:c2:96:75:7d:91:62:54: 36:52:0d:8a:fc:0c:98:a1:81:e5:ce:33:8d:e2:b7:75:72:68: 9b:22:15:cc:71:fb:b8:02:ef:ab:96:87:8d:89:22:d5:af:50: 4e:e3:aa:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OP0oNgYF20o2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Mzk2ZjA4NGEtM2MyZC00YmQwLTkyZjUtNjQ2YjcyMjU1OGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9I08Cbsgm5HiDJMUp7kIbZnEJH5RBZfvVS/ V1AyJxZjdHJTISUwUJqqZ+FQedEyRfIpXMsBJnGziZy+yNRQbQNDPSShp45pn3N0 oAve9KcenLnBWqZEs+pdS1TTdVvXdGn6SH6DjpMYYz73GblCu32914qnRPIwiXEr 02866/u6ilU9JEE38ux2l1dQo5l9xrjAyZBaPtageeM2BV69+ZESQN3sTADZvyDb fYEI549MW3odsXY63h/uSO1RSRblHCC9g0H8KRFw7sRLhiQ/7zZ1a1xKQ2Shrs2V L5YKbdwEF+WFD4AVAzPHn6beT6S7o32BY5CF5XKNHPy64Y2L7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILvQeXyTPQceahjo6+SfsVRhszUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWNkNTQ4YTItM2YwYS0z YmFlLWI2OTAtMGIyMTY0MzAwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0VWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJEkmc0Dly3sJKugUydkvaVFlfmkdvBCXpsoHu13iqj5OKeAT58H2KG +auXu64FGZartDvORB4aQ/3V8B4D9ZVidzvUcX9xRZKf2h2oOFQ1powR+jgQUVsR gxaKk9KnP0ZumeYM28n7eVIDWyWQXah2RYMEXjZ/Wpu5VJh0Coy/yeFPY5nNN6K1 d5vHeZ/JYEMrkMwyZ/lZMu7Afq9IW+xFGyh4swfxY18pqwYSmAl9Pi2GE8NKXsjp mVb7ZmzMe5TxP8G08LKwhXu3Qd5oUf5GwpZ1fZFiVDZSDYr8DJihgeXOM43it3Vy aJsiFcxx+7gC76uWh42JItWvUE7jqvE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:53 2026 by rpki-client