$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa File: 5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa (raw, json) Hash identifier: 8Btki0bGwigixWlHVRcmpszpVPEef/o2X3FzhXJgN1w= Subject key identifier: C6:77:08:86:0B:86:31:63:B9:88:1C:61:E9:40:37:C0:2A:40:81:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0FF978EA4346428272B10 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ff:97:8e:a4:34:64:28:27:2b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8bf1afe1-0032-4d0a-b5ac-d4254e593d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:fc:30:04:c6:96:62:99:73:b6:b0:99:3b: 32:22:b8:ba:b4:17:dc:97:aa:4a:ac:c8:75:42:8a: bd:33:91:57:dd:80:bc:e6:54:92:40:40:d2:7d:60: ac:eb:49:37:ed:92:ab:d3:97:f5:c8:a5:aa:c2:8a: 39:49:24:b7:26:9c:bd:d0:bc:c6:ff:16:5b:f0:dd: 34:3c:e4:b0:bf:09:26:7d:cc:a1:b3:35:d9:58:e0: 59:4a:52:14:e4:e9:3a:8f:ad:2d:47:99:3f:3b:ba: de:eb:72:4d:3f:c9:f8:a1:c1:6d:8e:ea:79:b5:5d: 71:dd:15:88:19:2e:58:ff:54:0c:5b:1b:2b:e1:79: fd:0a:40:a2:4c:34:46:48:ca:4a:a7:e7:9e:3c:fa: db:37:6e:c0:bc:c5:99:81:36:ff:0c:ff:fc:9d:96: 86:f7:d5:c2:1c:34:a6:0b:65:95:4a:e5:c8:47:cd: 7d:52:15:17:f2:bf:2a:f8:a4:2a:b7:38:a0:bb:da: 60:e6:52:66:3d:71:4d:12:a9:f3:88:04:bb:38:b6: 0b:8a:2a:77:6e:b7:40:57:81:3f:f2:d3:2f:b7:2a: bb:7f:f6:3b:3f:5a:cc:9e:dc:2d:d6:1e:c0:ee:4f: e0:10:fe:78:b3:4f:17:2e:9c:10:a6:42:97:67:91: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:77:08:86:0B:86:31:63:B9:88:1C:61:E9:40:37:C0:2A:40:81:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:57:41:2b:36:5b:2a:13:86:d7:b3:f2:d4:c1:4f:57:d0:56: 35:41:25:53:a5:e4:39:c2:08:78:de:d5:64:74:97:78:4c:ad: 63:62:2b:cc:e1:c1:9a:c0:9d:d5:7c:71:8a:15:18:f1:10:8f: 2c:61:dc:60:7b:ba:7b:4b:e4:38:42:ec:3e:22:53:5c:eb:55: bf:72:a3:ba:a6:e8:d9:0e:16:81:44:2f:2b:1c:ff:83:46:99: 4a:39:ce:cc:67:f0:47:e0:38:4e:99:86:d7:6e:7a:a3:26:b9: 16:a9:c6:b1:09:9b:49:8e:00:23:06:e0:27:39:bf:70:d0:61: 77:b8:3f:f9:43:01:76:cf:99:3d:c5:de:41:4a:65:b9:ef:67: a1:70:5f:68:26:67:a5:7b:34:59:07:e4:85:0b:f6:40:31:3a: 01:27:d2:d8:40:48:a9:5a:07:5c:05:3f:0d:b5:79:99:aa:ad: 4b:11:bd:97:bb:34:fc:ca:ee:97:c5:b5:7c:84:8b:7b:7d:ab: 0e:2c:89:12:a1:7b:8a:ca:ad:0b:81:bd:36:f4:41:3a:cd:b1: 76:f2:97:cb:18:90:13:88:26:33:88:bb:cb:1b:55:fc:27:a3: e1:c0:f0:8e:1c:58:fd:05:08:9d:89:3c:82:66:4f:8c:42:1e: c3:1c:f4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4P+XjqQ0ZCgnKxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGJmMWFmZTEtMDAzMi00ZDBhLWI1YWMtZDQyNTRlNTkzZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPn8MATGlmKZc7awmTsyIri6tBfcl6pKrMh1 Qoq9M5FX3YC85lSSQEDSfWCs60k37ZKr05f1yKWqwoo5SSS3Jpy90LzG/xZb8N00 POSwvwkmfcyhszXZWOBZSlIU5Ok6j60tR5k/O7re63JNP8n4ocFtjup5tV1x3RWI GS5Y/1QMWxsr4Xn9CkCiTDRGSMpKp+eePPrbN27AvMWZgTb/DP/8nZaG99XCHDSm C2WVSuXIR819UhUX8r8q+KQqtzigu9pg5lJmPXFNEqnziAS7OLYLiip3brdAV4E/ 8tMvtyq7f/Y7P1rMntwt1h7A7k/gEP54s08XLpwQpkKXZ5F/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ3CIYLhjFjuYgcYelAN8AqQIGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQ5YjVhNzctMjBhNC0z NWEyLTk1ZDgtNDM4MGRkNzRhMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1XQSs2WyoThtez8tTBT1fQVjVBJVOl5DnCCHje1WR0l3hMrWNiK8zh wZrAndV8cYoVGPEQjyxh3GB7untL5DhC7D4iU1zrVb9yo7qm6NkOFoFELysc/4NG mUo5zsxn8EfgOE6ZhtdueqMmuRapxrEJm0mOACMG4Cc5v3DQYXe4P/lDAXbPmT3F 3kFKZbnvZ6FwX2gmZ6V7NFkH5IUL9kAxOgEn0thASKlaB1wFPw21eZmqrUsRvZe7 NPzK7pfFtXyEi3t9qw4siRKhe4rKrQuBvTb0QTrNsXbyl8sYkBOIJjOIu8sbVfwn o+HA8I4cWP0FCJ2JPIJmT4xCHsMc9JI= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:33 2026 by rpki-client