$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa File: 311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa (raw, json) Hash identifier: V990bMUBKzeh9jsg5QieeRnhFuR9faWdVdzM/R16Jm0= Subject key identifier: 1A:DA:81:D2:0C:7F:94:7E:FB:4F:F9:3B:27:97:9C:2F:25:CC:20:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E736EAE05917088D9280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e7:36:ea:e0:59:17:08:8d:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=78afca0c-8d1e-4edf-9115-0d097d2e58b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:d5:09:bd:5b:75:9c:02:58:71:4e:18:48: 4b:02:a9:0d:f0:37:34:d5:65:3f:08:ec:e5:e8:64: 1d:75:93:95:57:1f:5c:29:f0:14:04:90:9a:c0:06: a2:cd:d4:a1:74:97:01:37:6a:a4:c6:0e:21:72:f8: 53:58:4b:d3:21:1e:14:b4:f6:8b:20:4c:47:be:df: b2:94:5a:f8:47:fd:21:4a:0f:cd:c0:e2:63:2f:b8: dd:4e:9f:0f:a9:aa:5d:fe:1b:82:81:93:6e:85:49: 92:81:ba:d6:1d:c6:5a:16:ea:f4:ff:3b:80:f4:a1: cf:39:a8:82:4a:92:04:3b:62:cb:f2:a2:22:3a:db: 82:cb:4f:6c:34:1f:ad:5b:f7:f1:79:f3:0f:89:06: 67:d2:d3:a1:8c:2c:4c:95:79:0b:d3:31:01:0a:f4: ff:f7:9e:bf:30:cc:f6:21:66:d0:7c:51:57:94:82: 7a:52:76:05:aa:75:39:fd:fe:9d:53:07:38:3e:2e: 15:57:94:06:30:db:bd:9b:5e:b4:ea:19:96:c9:e9: e2:1f:97:0a:3b:97:2f:41:e7:e2:b6:54:02:f1:88: 79:7a:7c:66:73:37:93:67:6d:1d:b9:dd:bf:5f:52: 25:73:c3:04:29:69:d9:88:97:8c:8b:b5:9f:de:cf: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DA:81:D2:0C:7F:94:7E:FB:4F:F9:3B:27:97:9C:2F:25:CC:20:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/311edd34-c21e-36a7-a6cb-2fe4cb63d41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c3:dc:9e:b2:3d:7c:ec:52:0d:16:cf:37:db:1c:d1:4c:27: 03:e0:a8:96:52:52:04:c4:ae:96:9e:69:1b:af:09:2b:3f:ea: f9:f5:d1:81:c9:62:1a:3d:8d:41:5f:c9:24:1c:48:e4:f1:ed: 63:2c:08:b3:b2:01:dc:cd:54:45:00:0c:c4:64:9d:b7:b3:b1: f3:88:20:ca:32:dd:54:81:65:53:04:62:63:4a:30:cd:e1:47: 27:e1:b1:66:a0:93:ac:2e:49:59:85:bf:25:1d:ea:e2:c1:a6: 77:9d:1f:70:7e:a8:b4:d6:60:c4:9a:b0:9c:4a:20:55:c1:20: 79:2c:77:91:0b:80:50:81:b9:a5:5e:89:8a:96:ac:f8:12:ed: ec:d3:76:cb:a8:69:17:35:5c:32:3a:bc:41:be:7d:5c:22:66: 60:23:8d:3c:c7:b1:c3:66:7c:74:0a:32:d8:9d:3e:b9:13:f7: 03:9f:e8:10:ae:49:64:f1:83:80:c4:0b:49:2a:f7:55:d6:f9: e5:4b:aa:09:3c:3c:8d:e2:e1:1a:7c:45:39:8c:77:c7:15:74: a8:d5:3b:78:6a:54:f3:14:52:66:53:4a:c7:40:e5:1e:f8:35: c1:ff:9c:ee:b9:1c:e5:9c:5b:11:51:cf:2a:9d:11:39:7b:4a: 86:64:27:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Oc26uBZFwiNkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzhhZmNhMGMtOGQxZS00ZWRmLTkxMTUtMGQwOTdkMmU1OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim/VCb1bdZwCWHFOGEhLAqkN8Dc01WU/COzl 6GQddZOVVx9cKfAUBJCawAaizdShdJcBN2qkxg4hcvhTWEvTIR4UtPaLIExHvt+y lFr4R/0hSg/NwOJjL7jdTp8Pqapd/huCgZNuhUmSgbrWHcZaFur0/zuA9KHPOaiC SpIEO2LL8qIiOtuCy09sNB+tW/fxefMPiQZn0tOhjCxMlXkL0zEBCvT/956/MMz2 IWbQfFFXlIJ6UnYFqnU5/f6dUwc4Pi4VV5QGMNu9m1606hmWyeniH5cKO5cvQefi tlQC8Yh5enxmczeTZ20dud2/X1Ilc8MEKWnZiJeMi7Wf3s+eCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBragdIMf5R++0/5OyeXnC8lzCD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzExZWRkMzQtYzIxZS0z NmE3LWE2Y2ItMmZlNGNiNjNkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7D3J6yPXzsUg0WzzfbHNFMJwPgqJZSUgTErpaeaRuvCSs/6vn10YHJ Yho9jUFfySQcSOTx7WMsCLOyAdzNVEUADMRknbezsfOIIMoy3VSBZVMEYmNKMM3h RyfhsWagk6wuSVmFvyUd6uLBpnedH3B+qLTWYMSasJxKIFXBIHksd5ELgFCBuaVe iYqWrPgS7ezTdsuoaRc1XDI6vEG+fVwiZmAjjTzHscNmfHQKMtidPrkT9wOf6BCu SWTxg4DEC0kq91XW+eVLqgk8PI3i4Rp8RTmMd8cVdKjVO3hqVPMUUmZTSsdA5R74 NcH/nO65HOWcWxFRzyqdETl7SoZkJyI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:40 2026 by rpki-client