$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa File: 3abee81f-b508-3c4e-9dc5-859969e3d79e.roa (raw, json) Hash identifier: TaIbMajv9hAMXK87jDnxuYcN5rXd+iRCGxCOKCWElPk= Subject key identifier: 1D:A9:0A:9C:04:F7:4D:83:F5:DE:7C:80:AC:47:A5:6B:07:F0:F9:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04A68D978535EBFD45DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4a:68:d9:78:53:5e:bf:d4:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e0da4bef-caa5-46da-ab71-760af2ccab1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:e8:75:ed:67:2e:cc:b0:71:51:42:b5:b2: d0:cd:b3:e8:5c:63:65:aa:60:47:e3:08:a0:f7:66: 79:78:1a:14:c2:10:7e:c4:b8:5e:3c:32:68:27:c9: 9a:de:89:4c:4e:56:0e:a9:b3:ba:e7:fe:cb:fc:7b: ff:95:96:d1:ca:41:a2:ed:72:c3:6e:3a:9f:07:f5: 0a:53:19:ed:2b:24:97:0c:3f:77:e7:ae:c9:79:6c: 8d:f0:2f:de:80:e6:f3:00:b3:42:eb:af:14:11:64: 32:6e:0a:90:15:c0:ad:c4:55:81:fb:d7:9a:46:b6: c5:55:93:b8:b3:55:ae:34:67:a2:17:70:bf:66:c8: f9:0d:a5:65:7e:86:dd:d9:b3:03:5c:af:4f:61:03: 09:be:4a:64:f5:7f:cb:5f:0c:f5:76:6b:e5:4b:a7: 3c:9f:85:c3:60:f2:eb:25:b9:b4:13:52:27:87:b6: b9:31:de:ec:2c:5e:fe:9c:94:f1:32:e7:40:2e:03: d8:8f:33:4e:83:60:c3:ca:45:93:af:df:a4:b9:d0: 3f:12:66:6f:d0:97:99:c6:42:0d:93:04:d1:58:ef: 91:c2:30:84:50:02:c9:90:8c:1c:a3:a6:6c:d2:8c: 7a:ff:79:60:fa:02:39:da:88:18:c6:0b:5c:a3:7a: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A9:0A:9C:04:F7:4D:83:F5:DE:7C:80:AC:47:A5:6B:07:F0:F9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3abee81f-b508-3c4e-9dc5-859969e3d79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:17:84:cc:da:60:b6:71:17:5c:d5:c5:7e:ea:a2:6c:44:bc: ff:d3:df:01:17:46:5c:17:eb:df:0c:39:1f:ef:bb:76:bf:67: 43:27:55:1a:97:a6:d9:b6:4d:58:0b:64:24:47:36:f8:d5:56: e0:12:dd:d5:ca:3c:ce:52:16:b0:82:ca:8a:59:3f:31:ee:64: 61:e3:94:19:86:95:4b:59:77:55:1b:c9:38:e8:bc:cb:e6:64: d8:e4:b4:74:cc:89:0b:a0:7b:e7:a9:db:da:0b:9c:db:15:cc: 69:a4:fa:1d:25:33:9a:8e:c6:cc:8b:f4:8c:d6:dd:9c:90:2f: 99:d9:18:4a:91:81:24:49:9a:c2:c9:9e:1a:84:3b:ae:77:83: 15:76:6c:30:71:a7:0f:49:01:65:d9:1d:e4:dd:c0:33:94:1d: ae:17:2f:3c:7f:56:ce:49:53:87:4b:cc:bb:38:f3:e5:33:60: e1:a8:a8:c7:42:4c:87:9d:40:c0:fb:9d:51:02:3a:25:3a:60: b3:d0:6b:e5:ba:e6:6f:dc:5b:43:08:bd:af:eb:4e:20:96:c2: ae:f9:c0:24:8b:63:0f:a2:2e:57:e6:45:9a:cf:a4:cc:a7:8c: 9a:d9:e2:31:32:15:e0:57:46:68:f4:3c:ac:ae:25:26:a4:18: 5a:0b:94:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Epo2XhTXr/UXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTBkYTRiZWYtY2FhNS00NmRhLWFiNzEtNzYwYWYyY2NhYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutfode1nLsywcVFCtbLQzbPoXGNlqmBH4wig 92Z5eBoUwhB+xLhePDJoJ8ma3olMTlYOqbO65/7L/Hv/lZbRykGi7XLDbjqfB/UK UxntKySXDD93567JeWyN8C/egObzALNC668UEWQybgqQFcCtxFWB+9eaRrbFVZO4 s1WuNGeiF3C/Zsj5DaVlfobd2bMDXK9PYQMJvkpk9X/LXwz1dmvlS6c8n4XDYPLr Jbm0E1Inh7a5Md7sLF7+nJTxMudALgPYjzNOg2DDykWTr9+kudA/EmZv0JeZxkIN kwTRWO+RwjCEUALJkIwco6Zs0ox6/3lg+gI52ogYxgtco3qSUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2pCpwE902D9d58gKxHpWsH8Pl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiZWU4MWYtYjUwOC0z YzRlLTlkYzUtODU5OTY5ZTNkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMXhMzaYLZxF1zVxX7qomxEvP/T3wEXRlwX698MOR/vu3a/Z0MnVRqX ptm2TVgLZCRHNvjVVuAS3dXKPM5SFrCCyopZPzHuZGHjlBmGlUtZd1UbyTjovMvm ZNjktHTMiQuge+ep29oLnNsVzGmk+h0lM5qOxsyL9IzW3ZyQL5nZGEqRgSRJmsLJ nhqEO653gxV2bDBxpw9JAWXZHeTdwDOUHa4XLzx/Vs5JU4dLzLs48+UzYOGoqMdC TIedQMD7nVECOiU6YLPQa+W65m/cW0MIva/rTiCWwq75wCSLYw+iLlfmRZrPpMyn jJrZ4jEyFeBXRmj0PKyuJSakGFoLlLA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:03 2026 by rpki-client