$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa File: 71ae16c5-d31e-3798-a172-6d1d107c2749.roa (raw, json) Hash identifier: OSuUW9M8uD9yJ/RJ4vu6QPKLUgOKMVmGHynlv7MtxCI= Subject key identifier: 3A:7A:BB:C9:15:74:7A:BC:37:3D:B8:9C:12:A4:9B:06:43:39:03:9F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04A1E9A98BABD43D3E580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4a:1e:9a:98:ba:bd:43:d3:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f8491b60-c7da-43b7-9c4d-31b7c13c2f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:e8:5f:b3:2b:0a:33:24:85:bd:db:fe:ea: a4:6a:e8:87:4c:f6:92:04:6d:7f:86:0e:87:e3:55: 68:d9:8f:5e:5f:d9:9e:78:e0:77:03:8b:a4:a0:11: af:84:5c:1e:c0:c2:6c:67:0f:3e:09:5a:5d:1d:ad: 8b:48:02:91:4d:b9:4d:fd:46:2e:a6:4e:a4:bd:92: c7:12:2a:d6:8d:92:15:e8:09:15:dc:24:02:63:8e: 22:60:82:27:37:71:56:f2:5d:57:81:93:07:33:81: 95:d7:9e:46:67:30:46:43:8a:aa:07:e4:0f:ff:49: 56:4f:58:9a:8b:0f:ed:50:8f:93:5e:1f:fd:c8:cd: 3b:9b:54:11:72:62:d1:c1:ed:8a:b4:f0:ae:0a:51: a8:21:79:ff:8e:16:67:6b:cb:c0:89:3a:41:c6:21: 7a:37:90:9c:48:22:24:3a:e6:6d:0b:29:29:48:55: 62:ea:75:6d:21:5c:de:4b:50:6d:a2:05:74:69:1a: 86:e2:4b:b5:7a:54:ba:09:78:01:d4:c8:65:df:00: 7d:4c:33:3e:fd:2f:a8:00:58:f9:46:c2:9a:0b:57: 40:0d:01:bc:78:a2:f5:26:17:a0:d2:06:3f:8e:5f: cc:13:58:62:96:2f:47:dd:53:3f:15:d2:2e:ef:cd: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:BB:C9:15:74:7A:BC:37:3D:B8:9C:12:A4:9B:06:43:39:03:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:51:c3:94:30:ea:40:8d:fa:1c:06:6f:db:ee:47:ed:5c:5b: 26:0b:43:9d:3e:49:ad:f8:40:5d:02:3e:02:85:1b:bf:f5:e7: 83:f4:c9:db:e2:1b:15:76:46:32:1c:90:95:4f:74:38:c1:53: 20:89:15:f5:27:b8:54:c6:9a:56:89:a3:fe:12:74:56:e9:8b: 79:9e:48:ec:37:07:61:74:57:4f:c7:59:22:5a:55:96:7d:92: d7:f7:ef:42:ab:f5:e2:59:dc:a6:90:e3:f8:79:86:74:8c:de: 59:0d:02:d3:e3:8a:86:f9:6e:c2:8f:b0:a0:4d:96:95:1a:94: 4c:20:78:55:4c:4c:0a:7c:ec:15:bd:b6:69:c6:09:4f:a8:ef: a0:b9:d7:12:40:bd:01:51:30:20:01:cc:09:af:5d:65:1b:b8: 61:aa:01:89:6c:a4:15:69:fb:d8:08:7e:a2:aa:81:ed:de:28: b6:46:cf:28:96:dc:4d:fa:ec:68:ed:9e:10:aa:c0:37:c3:39: 53:6a:04:5a:90:c8:a4:dc:d7:6f:2f:8c:26:5f:66:47:5d:e1: 59:9f:d7:5c:b4:61:22:13:4b:66:00:c1:13:7b:44:17:cd:0c: 83:4e:4d:28:27:c0:ec:09:84:82:95:0e:87:9e:6a:ab:14:dc: c6:f2:45:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Eoempi6vUPT5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Zjg0OTFiNjAtYzdkYS00M2I3LTljNGQtMzFiN2MxM2MyZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh83oX7MrCjMkhb3b/uqkauiHTPaSBG1/hg6H 41Vo2Y9eX9meeOB3A4ukoBGvhFwewMJsZw8+CVpdHa2LSAKRTblN/UYupk6kvZLH EirWjZIV6AkV3CQCY44iYIInN3FW8l1XgZMHM4GV155GZzBGQ4qqB+QP/0lWT1ia iw/tUI+TXh/9yM07m1QRcmLRwe2KtPCuClGoIXn/jhZna8vAiTpBxiF6N5CcSCIk OuZtCykpSFVi6nVtIVzeS1BtogV0aRqG4ku1elS6CXgB1Mhl3wB9TDM+/S+oAFj5 RsKaC1dADQG8eKL1Jheg0gY/jl/ME1hili9H3VM/FdIu7816SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp6u8kVdHq8Nz24nBKkmwZDOQOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzFhZTE2YzUtZDMxZS0z Nzk4LWExNzItNmQxZDEwN2MyNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdRw5Qw6kCN+hwGb9vuR+1cWyYLQ50+Sa34QF0CPgKFG7/154P0ydvi GxV2RjIckJVPdDjBUyCJFfUnuFTGmlaJo/4SdFbpi3meSOw3B2F0V0/HWSJaVZZ9 ktf370Kr9eJZ3KaQ4/h5hnSM3lkNAtPjiob5bsKPsKBNlpUalEwgeFVMTAp87BW9 tmnGCU+o76C51xJAvQFRMCABzAmvXWUbuGGqAYlspBVp+9gIfqKqge3eKLZGzyiW 3E367GjtnhCqwDfDOVNqBFqQyKTc128vjCZfZkdd4Vmf11y0YSITS2YAwRN7RBfN DINOTSgnwOwJhIKVDoeeaqsU3MbyRW8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:56 2026 by rpki-client