$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa File: 5fa89d53-c65a-344e-8232-29b9daa5f984.roa (raw, json) Hash identifier: ACLdRSBPUZnjlAHNiXxKJrVdty8+vJCSS/cLmLjjwcI= Subject key identifier: 82:09:A8:89:B2:A7:C8:17:21:16:15:F0:6D:C5:2F:B9:CA:92:07:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D2A74C02C301BE3D6F7D73B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c0:2c:30:1b:e3:d6:f7:d7:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=ffe1ca14-2bff-4ed8-a40c-2bad16e8aa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:a5:34:2a:00:72:11:9e:67:73:ad:cd:49: 6a:df:55:92:35:dd:aa:44:7e:1b:56:88:6e:cb:d8: a4:9a:a5:2b:aa:46:e8:fe:2d:05:f3:ac:c2:cd:3f: 95:fe:b9:92:20:20:9e:87:91:26:9c:2b:59:35:1d: 72:88:6c:9f:0d:1a:ef:ac:8a:db:b3:df:e2:38:43: ac:a5:d1:7b:02:33:34:49:68:32:91:a2:7f:2a:58: 1d:e6:4c:23:39:ee:c5:5e:9c:ec:59:3f:69:69:42: 31:ef:bc:ef:47:4b:6d:97:ca:38:df:38:c3:21:fb: 5e:23:b5:a4:65:eb:9c:bd:05:90:03:1a:73:74:fb: ed:18:53:c7:72:48:d3:4d:ff:ad:88:ee:94:8e:8b: 8b:65:54:b9:12:b6:89:78:dd:fb:66:ab:8f:50:ef: 63:47:4a:b2:80:89:9f:3e:e3:e9:47:76:a4:36:54: 5a:11:24:c5:ac:43:e0:4f:dd:61:25:f5:12:1f:97: 47:23:4b:ec:f1:04:85:f0:52:c8:6f:50:50:b1:7d: 24:5b:ae:3b:a9:03:7a:28:3c:ec:75:ae:17:81:8e: a9:97:bb:f4:01:bc:15:05:e7:ad:cc:e1:d6:f7:1e: 13:65:14:1d:7d:03:bd:05:92:67:52:00:60:45:ff: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:09:A8:89:B2:A7:C8:17:21:16:15:F0:6D:C5:2F:B9:CA:92:07:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5fa89d53-c65a-344e-8232-29b9daa5f984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:29:b0:25:c4:1f:5a:2c:03:a0:e0:a1:43:f1:74:71:12:a7: 51:32:24:20:ea:ff:df:61:27:ab:d9:16:ea:31:3d:0b:b5:af: d3:49:ce:94:9d:ba:b1:cd:3c:f8:ca:c3:48:25:33:8a:27:44: 0b:fe:c8:38:dc:d3:31:24:34:14:b1:a8:05:77:13:20:9e:80: d6:5b:65:bc:56:73:be:11:67:63:93:1c:41:d4:56:3f:73:55: 80:66:b1:6c:03:11:17:98:e5:e7:38:99:1c:2e:e0:59:bf:c1: d9:e1:89:2e:18:3c:80:71:87:8e:ca:c2:73:89:fe:1b:5d:42: 48:d0:36:8d:22:01:86:84:ad:23:96:f2:fd:f2:99:f7:f7:3e: c7:17:ed:0f:a5:79:02:40:b0:8e:8a:5c:0d:f6:80:01:60:49: 72:ab:6e:8d:83:47:4e:80:d8:45:dd:60:38:9b:bd:b4:3c:60: 0d:cc:96:32:21:f9:78:e7:90:75:34:fa:88:75:2a:2a:e7:3e: a0:49:51:66:03:e2:84:63:90:99:13:2d:5f:91:41:3d:4d:3c: bc:12:c9:3e:4d:dc:f4:ef:67:02:a3:65:93:ed:b5:f3:66:84: c3:7e:31:e5:91:57:50:69:7c:62:d9:96:0d:4d:64:43:b7:f1: d3:d5:f8:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMAsMBvj1vfXO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZmZlMWNhMTQtMmJmZi00ZWQ4LWE0MGMtMmJhZDE2ZThhYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiSlNCoAchGeZ3OtzUlq31WSNd2qRH4bVohu y9ikmqUrqkbo/i0F86zCzT+V/rmSICCeh5EmnCtZNR1yiGyfDRrvrIrbs9/iOEOs pdF7AjM0SWgykaJ/Klgd5kwjOe7FXpzsWT9paUIx77zvR0ttl8o43zjDIfteI7Wk ZeucvQWQAxpzdPvtGFPHckjTTf+tiO6UjouLZVS5EraJeN37ZquPUO9jR0qygImf PuPpR3akNlRaESTFrEPgT91hJfUSH5dHI0vs8QSF8FLIb1BQsX0kW647qQN6KDzs da4XgY6pl7v0AbwVBeetzOHW9x4TZRQdfQO9BZJnUgBgRf/6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIJqImyp8gXIRYV8G3FL7nKkgdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZhODlkNTMtYzY1YS0z NDRlLTgyMzItMjliOWRhYTVmOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEpsCXEH1osA6DgoUPxdHESp1EyJCDq/99hJ6vZFuoxPQu1r9NJzpSd urHNPPjKw0glM4onRAv+yDjc0zEkNBSxqAV3EyCegNZbZbxWc74RZ2OTHEHUVj9z VYBmsWwDEReY5ec4mRwu4Fm/wdnhiS4YPIBxh47KwnOJ/htdQkjQNo0iAYaErSOW 8v3ymff3PscX7Q+leQJAsI6KXA32gAFgSXKrbo2DR06A2EXdYDibvbQ8YA3MljIh +XjnkHU0+oh1KirnPqBJUWYD4oRjkJkTLV+RQT1NPLwSyT5N3PTvZwKjZZPttfNm hMN+MeWRV1BpfGLZlg1NZEO38dPV+H8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:26 2026 by rpki-client