$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647bcd14-660a-3d2d-bb7e-597cc9960a94.roa File: 647bcd14-660a-3d2d-bb7e-597cc9960a94.roa (raw, json) Hash identifier: w2lzd5z+rHCjMUA5dHRshNKXm5OBzBXMrdf4HUNpCBc= Subject key identifier: 83:7C:91:01:C6:11:32:EA:3D:43:41:83:16:64:4D:13:41:BA:01:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E039A95E3AEA4FB4BD3800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647bcd14-660a-3d2d-bb7e-597cc9960a94.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:39:a9:5e:3a:ea:4f:b4:bd:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cb90786f-d138-4454-ad3e-7a61251b3b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:b8:59:33:20:1e:ce:1b:93:be:49:47:9e: 7a:fb:62:50:41:44:b1:5e:b8:11:b9:07:0e:fd:f2: ff:5a:71:3e:15:57:b4:c9:b0:23:04:54:59:95:79: 52:24:7b:aa:1b:ea:ee:2f:b1:74:13:2b:fe:ab:9f: 21:1e:48:e9:ba:79:22:04:da:ac:92:87:e2:96:25: ea:1a:95:ec:6c:08:08:2f:c3:25:f0:27:a3:d6:ae: f0:6d:94:83:a9:e8:3a:98:95:0e:e5:6d:04:77:27: 5d:5d:e7:0f:20:5c:c6:72:fd:b9:dc:92:ec:61:c2: 7f:3a:b6:cf:2f:29:79:f5:29:c3:f7:e7:13:a6:07: 8e:69:d4:28:f5:35:74:14:7e:79:70:af:80:0b:e5: 2f:3a:ee:fb:50:a1:a5:61:f4:1b:5f:91:cb:7f:6e: 4b:7c:e3:65:54:28:83:f5:8b:00:e5:a1:17:6e:0b: 86:82:42:40:b6:6b:91:7b:c1:d5:34:17:a3:2f:45: e1:36:b5:3f:53:a0:22:80:df:42:5c:9e:c5:30:19: f5:00:12:c6:3a:c6:19:a2:2d:7f:4d:c5:04:44:4c: 1a:fa:2d:de:fb:b5:0a:91:05:60:dc:51:b0:b4:af: 3c:f7:fe:70:e5:b9:28:5e:65:3e:f9:ab:3b:74:47: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7C:91:01:C6:11:32:EA:3D:43:41:83:16:64:4D:13:41:BA:01:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647bcd14-660a-3d2d-bb7e-597cc9960a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7e:a0:c6:c0:f0:8d:81:3d:47:e9:8f:41:e5:5c:ad:6c:9b: e5:d6:44:c1:07:57:02:8b:78:73:b3:3d:b2:e6:6c:f9:e7:6f: 82:61:26:d1:d9:1a:19:4d:fc:c7:5d:98:22:48:c9:5f:51:fe: ac:e8:f6:91:35:97:b8:22:8c:98:fc:d8:ff:98:d0:2e:c6:c8: 52:f8:43:2c:e5:00:b4:ad:8b:f4:f7:ed:f7:13:53:ad:1c:02: 0e:e7:ec:0d:96:19:7f:da:19:f9:c0:8d:41:65:c4:f9:c7:1d: d1:9c:8a:24:4e:89:f8:cc:fb:ce:bd:48:37:f3:a9:ba:34:7a: e3:91:a7:f4:d3:b4:40:ed:44:f9:c2:d4:7f:6a:84:88:fd:24: 2b:44:a2:98:0a:0c:bd:19:0f:7d:f2:83:48:a9:40:d6:7e:29: 69:24:70:0c:7d:f5:6e:ce:8c:b2:3c:79:74:5a:b9:7f:78:75: e0:38:38:e5:0a:3c:46:af:d5:d8:6c:f5:03:16:77:20:f4:f7: 6e:88:1c:40:4d:55:64:4a:5a:35:cf:9e:6c:02:95:f6:06:d2: 22:b7:11:35:41:03:bb:57:3c:08:5e:09:a7:c3:64:1f:7b:e1: b6:46:1b:39:fd:af:f6:90:fb:f1:97:e9:74:fd:bf:25:2c:4a: d2:92:91:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DmpXjrqT7S9OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2I5MDc4NmYtZDEzOC00NDU0LWFkM2UtN2E2MTI1MWIzYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYC4WTMgHs4bk75JR556+2JQQUSxXrgRuQcO /fL/WnE+FVe0ybAjBFRZlXlSJHuqG+ruL7F0Eyv+q58hHkjpunkiBNqskofiliXq GpXsbAgIL8Ml8Cej1q7wbZSDqeg6mJUO5W0EdyddXecPIFzGcv253JLsYcJ/OrbP Lyl59SnD9+cTpgeOadQo9TV0FH55cK+AC+UvOu77UKGlYfQbX5HLf25LfONlVCiD 9YsA5aEXbguGgkJAtmuRe8HVNBejL0XhNrU/U6AigN9CXJ7FMBn1ABLGOsYZoi1/ TcUEREwa+i3e+7UKkQVg3FGwtK889/5w5bkoXmU++as7dEe5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN8kQHGETLqPUNBgxZkTRNBugEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQ3YmNkMTQtNjYwYS0z ZDJkLWJiN2UtNTk3Y2M5OTYwYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1+oMbA8I2BPUfpj0HlXK1sm+XWRMEHVwKLeHOzPbLmbPnnb4JhJtHZ GhlN/MddmCJIyV9R/qzo9pE1l7gijJj82P+Y0C7GyFL4QyzlALSti/T37fcTU60c Ag7n7A2WGX/aGfnAjUFlxPnHHdGciiROifjM+869SDfzqbo0euORp/TTtEDtRPnC 1H9qhIj9JCtEopgKDL0ZD33yg0ipQNZ+KWkkcAx99W7OjLI8eXRauX94deA4OOUK PEav1dhs9QMWdyD0926IHEBNVWRKWjXPnmwClfYG0iK3ETVBA7tXPAheCafDZB97 4bZGGzn9r/aQ+/GX6XT9vyUsStKSkVk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:27 2026 by rpki-client