$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa File: 6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa (raw, json) Hash identifier: roWak78aXZrr50yljYRF/+h1rM8iB5MiAqS1eqrFIjA= Subject key identifier: 8F:37:61:82:3D:A8:24:E2:96:BB:70:3E:3F:3F:8B:42:C9:E1:A3:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0ECCE157BD8849E490700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 11344 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ec:ce:15:7b:d8:84:9e:49:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c38ecf68-a1c3-45e7-80f0-26cfb330e01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fb:33:5b:1a:93:d6:d7:1c:df:a1:cb:da:49: 66:d3:9d:4a:8c:02:2b:8a:a3:18:ff:3a:6e:61:c3: c1:ed:dc:0e:8a:d4:e7:98:da:1e:13:9e:bd:58:85: 83:92:a0:9b:aa:48:39:f2:77:c0:96:1f:65:39:86: 6c:7f:94:4b:64:48:95:fd:09:01:32:5c:21:05:29: 89:e1:27:d6:02:ff:09:97:b5:6e:5e:29:ef:4d:89: 5a:ed:ba:55:ff:0b:92:b3:df:2d:5b:45:95:ff:d4: 8e:bb:9d:97:c5:eb:25:c1:5b:ca:2b:9e:40:3d:77: 91:09:17:9f:0a:5b:43:ec:ff:ee:2d:d6:c1:be:4c: fd:f6:dd:9e:a0:a4:cc:81:dc:78:4d:4f:3b:c4:76: 6e:6f:a4:1c:6d:9c:e0:c7:e5:75:79:5b:a7:94:73: 9d:cf:a0:fb:7e:e6:ea:31:6d:fd:86:d7:e8:d4:d9: 6a:7f:ea:e8:1b:6f:28:c6:30:28:81:43:0e:ab:9b: df:66:8a:75:44:ef:ec:25:8e:1c:15:f8:7f:70:a0: c8:84:53:f9:22:6c:72:9d:3d:7f:b0:a7:e7:c0:fc: 77:9d:a9:c2:ba:59:9c:a4:2a:43:be:20:65:5f:a1: fe:8d:bb:ab:58:48:e0:3c:72:2e:3b:79:4c:93:5f: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:61:82:3D:A8:24:E2:96:BB:70:3E:3F:3F:8B:42:C9:E1:A3:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:53:5d:b3:24:88:53:0c:d9:e1:76:81:08:ed:d1:71:61:90: 50:8b:80:df:83:de:be:c8:40:85:19:7e:1e:aa:3b:00:f4:11: 28:6e:e9:0b:e9:7b:b5:8b:db:1c:ce:f7:c9:08:91:49:bd:0e: 3a:6d:34:ce:98:8f:d7:fa:dd:14:f4:16:de:00:7b:c3:b4:93: 1b:89:c5:57:32:8f:ee:b1:82:11:ea:a7:8a:e6:b9:49:92:83: 54:57:93:da:d5:1a:5a:51:6c:60:43:54:cb:85:b7:3b:ca:12: 38:a1:9c:8b:e9:d7:10:fc:ff:a3:a8:20:ca:13:50:84:65:75: 04:88:b7:7e:3b:af:b6:9b:48:9c:73:69:8a:6f:f6:01:bc:81: d5:f5:2a:1c:f0:08:d9:b7:a4:28:55:a1:11:32:6d:14:67:7d: 40:5b:d3:f4:17:e4:b6:5b:6b:7f:16:16:39:a3:3b:6f:a8:75: 79:02:f3:b7:33:42:8a:ff:67:77:33:1b:d2:9b:33:30:90:ff: ce:f3:d7:92:4c:cf:d8:57:e3:c5:19:13:25:cb:3f:8a:ac:1c: d9:cc:42:df:63:3c:e3:bb:78:51:74:4f:3e:e8:c7:15:3a:01: 52:c7:2f:0d:24:ac:a2:d3:c1:b0:b9:39:80:09:3d:d1:1c:95: f9:72:fb:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OzOFXvYhJ5JBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzM4ZWNmNjgtYTFjMy00NWU3LTgwZjAtMjZjZmIzMzBlMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvszWxqT1tcc36HL2klm051KjAIriqMY/zpu YcPB7dwOitTnmNoeE569WIWDkqCbqkg58nfAlh9lOYZsf5RLZEiV/QkBMlwhBSmJ 4SfWAv8Jl7VuXinvTYla7bpV/wuSs98tW0WV/9SOu52XxeslwVvKK55APXeRCRef CltD7P/uLdbBvkz99t2eoKTMgdx4TU87xHZub6QcbZzgx+V1eVunlHOdz6D7fubq MW39htfo1Nlqf+roG28oxjAogUMOq5vfZop1RO/sJY4cFfh/cKDIhFP5ImxynT1/ sKfnwPx3nanCulmcpCpDviBlX6H+jburWEjgPHIuO3lMk1/oRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI83YYI9qCTilrtwPj8/i0LJ4aMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmViMDU4MWQtMTNkYy0z YzlhLTk2OGUtNGU3NWM5MzZiMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdTXbMkiFMM2eF2gQjt0XFhkFCLgN+D3r7IQIUZfh6qOwD0EShu6Qvp e7WL2xzO98kIkUm9DjptNM6Yj9f63RT0Ft4Ae8O0kxuJxVcyj+6xghHqp4rmuUmS g1RXk9rVGlpRbGBDVMuFtzvKEjihnIvp1xD8/6OoIMoTUIRldQSIt347r7abSJxz aYpv9gG8gdX1KhzwCNm3pChVoREybRRnfUBb0/QX5LZba38WFjmjO2+odXkC87cz Qor/Z3czG9KbMzCQ/87z15JMz9hX48UZEyXLP4qsHNnMQt9jPOO7eFF0Tz7oxxU6 AVLHLw0krKLTwbC5OYAJPdEclfly+8c= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:50 2026 by rpki-client