$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa File: 77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa (raw, json) Hash identifier: l2MLpFWPg5/NkeGZHZ370JZ/ibG4jGKz58U2tS0e2Pk= Subject key identifier: 29:8D:83:FE:91:00:21:C5:A5:80:6B:BF:93:7A:EA:C7:70:B6:B3:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03FF623B7C44F16332D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3f:f6:23:b7:c4:4f:16:33:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=794e1f3e-4f0d-4ee0-8f3f-2b8905904213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:72:e4:a7:7b:e7:0f:3f:dc:42:b6:3a:2d: 40:00:21:65:63:c4:1a:f5:f7:ef:3e:e7:c9:fa:ee: 8d:9b:7d:14:65:56:02:d9:bb:0e:c3:ec:ac:0a:b0: 5c:56:a7:be:dc:5f:c5:d8:03:b3:be:82:01:c6:b9: 2f:c8:f6:9a:5e:9e:cc:54:d4:d4:01:fb:2d:f8:3f: a2:13:60:e4:22:bc:43:91:1a:1c:1c:04:b1:50:c5: 71:de:19:5f:28:04:2b:b1:1c:7e:1e:7f:d8:39:67: bf:b5:2f:97:a2:ca:74:1c:f1:7d:6d:e8:8d:77:a4: 24:12:31:10:03:bb:e2:a1:9b:2d:74:09:32:69:5b: ba:05:19:84:1e:f4:71:25:cb:0d:34:29:01:77:11: ff:63:23:b2:0e:a4:94:b6:df:64:ed:f4:bb:63:18: e7:94:ef:76:5b:81:5b:d3:04:68:8e:d2:5c:6f:90: 0d:32:ce:01:48:ba:12:86:cc:c8:4b:3e:9b:e3:48: 12:a1:ce:4e:82:88:4e:6b:2a:6a:4b:34:e3:67:00: 86:d3:1c:ba:c4:10:f8:fe:f8:b4:42:b8:a8:d1:ea: 84:6b:02:7e:2c:f8:79:a7:b1:f3:ec:12:f6:f2:f2: 90:1d:39:db:71:5c:d5:aa:77:39:a3:6d:37:1c:c8: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8D:83:FE:91:00:21:C5:A5:80:6B:BF:93:7A:EA:C7:70:B6:B3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:27:c6:36:6e:7b:c7:31:9e:d8:f1:f6:14:ce:71:e3:de:70: bd:c4:34:c2:18:17:f7:2d:d2:c5:76:31:7c:e1:f5:43:b4:c1: 7a:72:cf:4e:af:5f:b6:f5:4b:6e:c3:8f:3f:9b:20:b5:15:e7: f2:f5:cf:f6:1c:cf:b9:f9:ef:ad:44:ea:e0:2c:98:02:c2:15: aa:8e:83:ff:cb:86:a7:8e:af:0b:63:64:a5:a9:f7:f3:58:ea: 6f:9c:fd:3c:d6:31:f1:94:97:4a:02:c0:84:1f:82:79:3f:44: e3:39:6f:aa:04:8d:b7:2c:43:7e:e7:9d:b6:e1:9d:45:cd:39: 26:40:d9:06:f5:7d:94:a1:7f:12:23:05:ed:77:c3:e8:fa:25: d1:1c:0f:a9:36:55:6a:ed:ba:54:26:c6:5f:cc:5c:c5:54:3d: 9d:1f:d6:47:86:9f:4f:4c:ab:a1:b3:c3:e8:6e:49:e8:25:d0: f5:65:42:0d:7c:0e:3c:84:88:0c:ae:f9:bf:4f:21:9b:7d:f6: 73:e0:74:fd:54:61:79:8c:2e:f5:d3:02:2e:e3:67:7b:34:39: 92:5b:dc:2b:c6:0b:b0:14:00:31:ba:b4:2c:fa:65:2b:28:0c: 9d:89:59:89:77:d1:22:3a:6c:a5:6e:c4:d3:b9:4f:34:cf:ca: 3a:f8:e6:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D/2I7fETxYzLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Nzk0ZTFmM2UtNGYwZC00ZWUwLThmM2YtMmI4OTA1OTA0MjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Jy5Kd75w8/3EK2Oi1AACFlY8Qa9ffvPufJ +u6Nm30UZVYC2bsOw+ysCrBcVqe+3F/F2AOzvoIBxrkvyPaaXp7MVNTUAfst+D+i E2DkIrxDkRocHASxUMVx3hlfKAQrsRx+Hn/YOWe/tS+Xosp0HPF9beiNd6QkEjEQ A7vioZstdAkyaVu6BRmEHvRxJcsNNCkBdxH/YyOyDqSUtt9k7fS7YxjnlO92W4Fb 0wRojtJcb5ANMs4BSLoShszISz6b40gSoc5OgohOaypqSzTjZwCG0xy6xBD4/vi0 Qrio0eqEawJ+LPh5p7Hz7BL28vKQHTnbcVzVqnc5o203HMjzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmNg/6RACHFpYBrv5N66sdwtrOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzdiYjdiYjItMDAyZi0z M2E0LTlkYTEtOTYzZWM0ZDdmZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJInxjZue8cxntjx9hTOcePecL3ENMIYF/ct0sV2MXzh9UO0wXpyz06v X7b1S27Djz+bILUV5/L1z/Ycz7n5761E6uAsmALCFaqOg//LhqeOrwtjZKWp9/NY 6m+c/TzWMfGUl0oCwIQfgnk/ROM5b6oEjbcsQ37nnbbhnUXNOSZA2Qb1fZShfxIj Be13w+j6JdEcD6k2VWrtulQmxl/MXMVUPZ0f1keGn09Mq6Gzw+huSegl0PVlQg18 DjyEiAyu+b9PIZt99nPgdP1UYXmMLvXTAi7jZ3s0OZJb3CvGC7AUADG6tCz6ZSso DJ2JWYl30SI6bKVuxNO5TzTPyjr45i8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:55 2026 by rpki-client