$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa File: 29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa (raw, json) Hash identifier: slwDqd5n/LH6rgU3BGkX/ntIdDv193IO5WL1daov8iY= Subject key identifier: 46:3B:CE:67:35:EC:13:45:28:FB:DF:35:85:7A:A8:7E:23:AA:B2:89 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EE430A11C40F6CD78A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ee:43:0a:11:c4:0f:6c:d7:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0191c766-ffdf-4e70-b3bc-976316ec9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:c4:03:14:81:a3:a7:99:2c:f6:eb:74:a4: 20:39:17:a8:b8:4e:16:22:85:cf:0c:fc:a4:a2:2a: 31:85:6b:0d:d7:dc:3b:94:e4:5a:e5:0d:24:7f:ad: 99:b2:16:af:1e:2d:c6:a9:c6:a4:fa:18:ca:38:75: 28:92:a3:b1:08:24:2f:71:6e:17:0a:7c:fb:b9:2e: 16:0d:aa:50:a1:9d:5c:3d:fe:d3:88:96:05:b0:af: 85:26:4d:bb:c5:7b:c5:9f:bf:07:32:af:33:a0:27: b4:02:20:17:81:fa:83:3d:2c:20:50:08:d4:c4:bb: e0:91:3f:53:12:c2:70:f2:58:e3:a3:2e:46:34:90: 07:f3:d7:0c:4e:2b:65:57:36:fe:db:3f:41:b6:0f: 6d:12:8e:75:27:a3:4e:61:81:d6:1c:59:36:63:54: a8:66:31:b0:c2:d8:2e:b6:49:bb:57:84:c7:71:58: a1:2d:2c:0c:6d:92:05:07:36:f0:38:23:d0:fe:34: da:5c:d0:88:cb:03:e6:29:45:b2:e8:2a:61:df:fd: 13:4d:65:b6:82:92:e8:cc:a8:2f:1d:3d:0c:94:81: d0:9c:60:51:ab:b7:d2:96:c8:93:59:35:f2:6a:23: 59:94:e5:b4:be:ea:da:96:90:c9:1f:13:77:e7:d1: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3B:CE:67:35:EC:13:45:28:FB:DF:35:85:7A:A8:7E:23:AA:B2:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/29be5754-63c5-3c1e-97ff-7f2fe78b02e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:aa:5c:7e:5b:0c:87:d2:16:b4:62:95:73:32:0b:37:e7:ae: c8:8c:f4:40:ab:de:30:3a:7c:bb:74:65:a0:b3:05:bf:61:5e: eb:d3:ff:c6:65:2d:95:10:5e:6a:a8:cc:84:4b:57:86:a2:69: 08:28:24:e9:a9:06:8d:4e:c4:d8:f3:8e:a9:08:b1:cb:c4:5f: 53:a3:7d:fb:6a:91:57:80:46:65:68:d7:2f:ce:e6:b8:34:1f: 6c:c3:0c:18:8d:39:04:b4:d6:8f:c8:36:74:69:1f:61:82:73: 18:d9:d7:e3:0d:8c:3a:20:db:4d:ad:ca:0c:41:0c:bd:91:5c: 3b:18:27:3e:ce:e0:a1:d3:58:e0:a5:12:6a:d5:ea:37:16:67: a6:66:67:7e:a5:78:cf:a8:54:5b:61:e2:a2:f4:a8:02:b1:49: 71:e4:86:72:77:d8:b8:74:ef:f6:9e:ed:dd:ef:c1:83:42:b6: b2:24:be:e6:91:b6:71:4d:bf:10:a4:6a:33:bb:7a:66:28:90: e0:58:84:32:20:27:0c:bb:23:b9:0e:95:21:c9:09:0f:30:61: e4:c7:39:61:b2:81:21:10:53:26:61:98:f7:fa:d8:fb:79:82: 4c:00:04:d7:83:66:6c:24:ef:0c:ed:f0:1f:65:e5:c0:ce:81: d1:82:dd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O5DChHED2zXioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDE5MWM3NjYtZmZkZi00ZTcwLWIzYmMtOTc2MzE2ZWM5NDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn3EAxSBo6eZLPbrdKQgOReouE4WIoXPDPyk oioxhWsN19w7lORa5Q0kf62ZshavHi3Gqcak+hjKOHUokqOxCCQvcW4XCnz7uS4W DapQoZ1cPf7TiJYFsK+FJk27xXvFn78HMq8zoCe0AiAXgfqDPSwgUAjUxLvgkT9T EsJw8ljjoy5GNJAH89cMTitlVzb+2z9Btg9tEo51J6NOYYHWHFk2Y1SoZjGwwtgu tkm7V4THcVihLSwMbZIFBzbwOCPQ/jTaXNCIywPmKUWy6Cph3/0TTWW2gpLozKgv HT0MlIHQnGBRq7fSlsiTWTXyaiNZlOW0vuralpDJHxN359H6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY7zmc17BNFKPvfNYV6qH4jqrKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjliZTU3NTQtNjNjNS0z YzFlLTk3ZmYtN2YyZmU3OGIwMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyqXH5bDIfSFrRilXMyCzfnrsiM9ECr3jA6fLt0ZaCzBb9hXuvT/8Zl LZUQXmqozIRLV4aiaQgoJOmpBo1OxNjzjqkIscvEX1OjfftqkVeARmVo1y/O5rg0 H2zDDBiNOQS01o/INnRpH2GCcxjZ1+MNjDog202tygxBDL2RXDsYJz7O4KHTWOCl EmrV6jcWZ6ZmZ36leM+oVFth4qL0qAKxSXHkhnJ32Lh07/ae7d3vwYNCtrIkvuaR tnFNvxCkajO7emYokOBYhDIgJwy7I7kOlSHJCQ8wYeTHOWGygSEQUyZhmPf62Pt5 gkwABNeDZmwk7wzt8B9l5cDOgdGC3Ss= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:29 2026 by rpki-client