$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa File: 20b50217-08d6-3245-abc2-d3c9c7b445a1.roa (raw, json) Hash identifier: 5qBUiBJyIt2/DTq1KPo4M79rYYF8KptOqmj30ZjGVWA= Subject key identifier: DE:40:10:9C:76:9C:83:B4:E7:BD:E0:A9:2F:52:AF:92:83:1A:EC:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02A880F526F73A4E66D20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2a:88:0f:52:6f:73:a4:e6:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c6c21661-ff84-4cc6-ba12-6bc12b219005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:16:d5:ca:ed:04:80:26:05:90:6c:92:88: 4b:89:a2:3c:0b:7d:88:c8:a8:6d:1e:e6:b6:a6:e0: a4:17:ab:74:4a:12:3c:6a:2d:67:5a:ec:a5:dc:91: f5:dc:7d:a1:26:37:60:70:b6:0a:f5:6b:84:db:11: bb:07:59:1b:b6:d6:3e:9b:b4:a7:b5:d7:d0:77:a9: 9c:bc:0f:5a:3b:3d:43:97:e8:eb:90:3e:40:76:f6: 7c:87:5e:5f:67:09:55:00:f4:4e:3e:c6:d0:60:f6: 0f:b9:f9:15:b7:f6:2b:91:d8:87:13:10:da:70:d6: 6f:44:01:06:95:ec:34:b0:7b:06:8c:40:0b:e6:b6: e6:5d:17:47:71:a1:1b:82:ef:86:a0:1b:84:59:33: 68:22:c1:cb:8a:49:a6:29:42:e1:12:2f:87:62:b2: f6:6c:32:4e:25:1b:4c:27:f0:6b:c9:69:a8:0b:47: 25:cc:42:54:b0:24:99:e4:c5:5d:f6:03:14:cf:f0: 20:ca:bd:01:22:54:32:0f:9b:2d:89:6b:bf:ac:46: 18:95:4e:9d:01:40:d9:64:34:1d:ec:ac:b1:4c:a4: 30:44:a8:4c:31:75:52:11:b9:e2:5a:8f:8d:02:b0: ad:83:2d:fa:36:98:73:70:55:c2:47:f0:71:5a:1a: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:10:9C:76:9C:83:B4:E7:BD:E0:A9:2F:52:AF:92:83:1A:EC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/20b50217-08d6-3245-abc2-d3c9c7b445a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1a:4d:75:fb:16:48:a9:3e:47:a3:68:ac:da:96:50:b4:40: c8:97:25:52:a6:53:89:62:2d:2b:99:7a:04:09:15:db:c2:66: cb:db:09:11:2e:9c:27:ff:d4:c2:dc:ac:2a:79:1a:e5:d5:ba: 5b:9e:ac:65:1c:cf:0f:04:31:cc:fd:e3:71:e4:3d:4f:12:19: dc:fd:37:1f:77:fb:3e:91:0d:b7:87:99:ab:6b:b3:df:a5:a3: 33:cf:8d:1c:75:19:15:3b:b4:21:a4:cc:8b:ed:3b:04:af:25: ac:e6:d1:6d:33:ff:8b:aa:26:7e:cf:45:91:3e:a2:55:91:4e: 99:a5:ac:59:63:4d:42:c8:ac:84:07:07:cc:24:37:8d:0c:df: 92:46:d0:7b:6c:00:d6:54:df:d5:30:8e:8e:be:e0:f6:df:3a: 99:a5:ec:b6:dc:1f:ab:b3:c8:f6:2a:1f:30:cb:71:f5:77:51: 30:d8:cf:ab:9e:f1:1e:eb:89:79:1b:f1:38:f8:dd:f8:78:3f: 0f:2f:ee:e6:f0:02:d6:40:c0:4b:2e:88:05:69:6a:3c:1a:12: 4f:6c:42:e1:7b:e7:ef:e9:49:f4:7f:3d:31:9a:1f:2f:7f:26: 20:04:55:b2:94:af:2e:14:8e:9e:97:b3:f2:da:a3:93:f2:c7: d7:04:13:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CqID1Jvc6TmbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzZjMjE2NjEtZmY4NC00Y2M2LWJhMTItNmJjMTJiMjE5MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYUW1crtBIAmBZBskohLiaI8C32IyKhtHua2 puCkF6t0ShI8ai1nWuyl3JH13H2hJjdgcLYK9WuE2xG7B1kbttY+m7SntdfQd6mc vA9aOz1Dl+jrkD5AdvZ8h15fZwlVAPROPsbQYPYPufkVt/YrkdiHExDacNZvRAEG lew0sHsGjEAL5rbmXRdHcaEbgu+GoBuEWTNoIsHLikmmKULhEi+HYrL2bDJOJRtM J/BryWmoC0clzEJUsCSZ5MVd9gMUz/Agyr0BIlQyD5stiWu/rEYYlU6dAUDZZDQd 7KyxTKQwRKhMMXVSEbniWo+NArCtgy36NphzcFXCR/BxWhpESwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5AEJx2nIO0573gqS9Sr5KDGuymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjBiNTAyMTctMDhkNi0z MjQ1LWFiYzItZDNjOWM3YjQ0NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcaTXX7FkipPkejaKzallC0QMiXJVKmU4liLSuZegQJFdvCZsvbCREu nCf/1MLcrCp5GuXVuluerGUczw8EMcz943HkPU8SGdz9Nx93+z6RDbeHmatrs9+l ozPPjRx1GRU7tCGkzIvtOwSvJazm0W0z/4uqJn7PRZE+olWRTpmlrFljTULIrIQH B8wkN40M35JG0HtsANZU39Uwjo6+4PbfOpml7LbcH6uzyPYqHzDLcfV3UTDYz6ue 8R7riXkb8Tj43fh4Pw8v7ubwAtZAwEsuiAVpajwaEk9sQuF75+/pSfR/PTGaHy9/ JiAEVbKUry4Ujp6Xs/Lao5Pyx9cEE2M= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:39 2026 by rpki-client