$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa File: 538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa (raw, json) Hash identifier: itrT/QkS8hIP0fGXTR0CjJkURJ1gInt0bLM9Q0pCHHA= Subject key identifier: 86:CE:09:61:E4:0F:2C:5F:28:8C:32:02:CA:1A:34:33:8C:9B:77:E0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0394B95441A455C01F888 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:39:4b:95:44:1a:45:5c:01:f8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2d7cecac-2ede-4b84-a870-40240ac24502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:c2:e2:0a:16:fa:72:0a:05:34:a2:c2:fe: 5c:63:ec:4b:f8:39:0b:c7:ef:3a:5a:7d:bc:7e:5d: eb:5c:92:4b:67:6e:1c:b1:19:2a:1f:41:26:16:7a: a3:10:dd:d9:9d:04:58:fd:2a:c6:af:25:0b:c4:8f: c1:db:aa:70:2d:5f:37:8d:8b:a2:79:4e:24:41:f3: 38:a5:2a:9b:3b:fc:b0:67:ac:be:1c:f4:25:b1:81: 04:68:74:06:6a:b2:4b:64:38:1b:68:db:61:59:08: b2:6b:b1:61:33:3b:c6:af:bb:cd:55:d7:18:39:94: 64:9e:76:1a:a1:4b:fd:50:a2:e6:13:e2:39:8c:88: 34:1e:80:e6:35:52:4e:28:42:57:03:ce:1c:9a:9c: b0:88:ec:83:b5:e5:48:47:46:27:e3:dd:e6:59:0e: d3:06:f2:3a:18:b5:68:43:ef:15:e0:9f:eb:dd:7f: 10:68:aa:28:1b:ea:c4:91:f0:e4:88:31:da:c1:24: fe:f3:02:a1:bc:5b:b9:94:ce:0d:e9:f6:04:6e:33: 11:8c:c6:57:26:38:36:9d:0b:24:e8:4b:c3:7c:18: 5f:bf:36:13:d8:35:29:81:6e:ae:63:3a:ee:7a:cd: 49:91:30:b5:2d:3b:63:35:e7:45:6d:49:3b:e3:0f: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:09:61:E4:0F:2C:5F:28:8C:32:02:CA:1A:34:33:8C:9B:77:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/538610f1-1d41-39f8-aa9c-c5db1d1dbec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0e:0c:ea:77:20:27:58:c9:a6:f3:11:3f:02:bc:33:8c:55: af:ea:0e:ac:ef:7e:6e:00:66:f6:ae:e1:a0:af:35:ee:fc:27: 56:7b:be:e1:33:d0:08:b5:c0:28:d1:18:3e:85:1a:f7:53:5a: e0:26:71:11:fb:89:4e:6f:b0:4c:61:14:b8:aa:5a:8b:2b:78: 2d:53:96:16:8e:a8:4b:e5:fc:fc:a1:53:64:38:eb:b1:12:5f: 6a:c9:c6:de:6b:31:42:28:ae:1d:cf:b9:dc:e6:a6:dd:43:f5: 1c:b8:d3:ce:8b:0d:b4:91:53:b2:10:30:e8:13:13:2b:b0:06: 81:4c:f5:e9:8c:74:61:79:19:18:69:7e:78:9c:64:28:79:26: 2b:54:dc:58:88:95:90:73:d2:90:20:e7:db:26:e7:6e:89:db: 34:e6:97:e7:64:40:34:24:f6:59:86:c6:c6:1f:2d:90:57:2f: 06:71:d4:36:5a:a8:07:3b:7c:e9:c2:02:7b:1b:89:c6:c1:2c: e0:f7:43:39:6b:3e:d5:9a:5c:96:7d:bf:b3:b9:ec:d7:54:cd: 1b:29:72:b4:de:bb:f8:57:0d:63:c5:54:79:d2:ec:ea:2e:d1: 98:c5:07:43:2b:2b:3f:6b:54:c2:3f:36:f8:02:e1:75:6e:77: 2a:68:30:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DlLlUQaRVwB+IgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmQ3Y2VjYWMtMmVkZS00Yjg0LWE4NzAtNDAyNDBhYzI0NTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjC4goW+nIKBTSiwv5cY+xL+DkLx+86Wn28 fl3rXJJLZ24csRkqH0EmFnqjEN3ZnQRY/SrGryULxI/B26pwLV83jYuieU4kQfM4 pSqbO/ywZ6y+HPQlsYEEaHQGarJLZDgbaNthWQiya7FhMzvGr7vNVdcYOZRknnYa oUv9UKLmE+I5jIg0HoDmNVJOKEJXA84cmpywiOyDteVIR0Yn493mWQ7TBvI6GLVo Q+8V4J/r3X8QaKooG+rEkfDkiDHawST+8wKhvFu5lM4N6fYEbjMRjMZXJjg2nQsk 6EvDfBhfvzYT2DUpgW6uYzrues1JkTC1LTtjNedFbUk74w9SSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbOCWHkDyxfKIwyAsoaNDOMm3fgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTM4NjEwZjEtMWQ0MS0z OWY4LWFhOWMtYzVkYjFkMWRiZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQODOp3ICdYyabzET8CvDOMVa/qDqzvfm4AZvau4aCvNe78J1Z7vuEz 0Ai1wCjRGD6FGvdTWuAmcRH7iU5vsExhFLiqWosreC1TlhaOqEvl/PyhU2Q467ES X2rJxt5rMUIorh3Pudzmpt1D9Ry4086LDbSRU7IQMOgTEyuwBoFM9emMdGF5GRhp fnicZCh5JitU3FiIlZBz0pAg59sm526J2zTml+dkQDQk9lmGxsYfLZBXLwZx1DZa qAc7fOnCAnsbicbBLOD3QzlrPtWaXJZ9v7O57NdUzRspcrTeu/hXDWPFVHnS7Oou 0ZjFB0MrKz9rVMI/NvgC4XVudypoMCI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:50 2026 by rpki-client