$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa File: 7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa (raw, json) Hash identifier: OjlPxguBp3+MkWSz3HslNFd/eDs7iiryApOzbECtXYA= Subject key identifier: 70:17:DB:DF:17:0C:25:CF:E0:22:4D:64:C8:ED:E1:44:C4:AA:50:FB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02A4084DA55355B4C0F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2a:40:84:da:55:35:5b:4c:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bc2922f1-8f8c-49e4-81a3-8a4b65675f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:64:42:46:c9:82:35:95:63:96:28:2b:e9:eb: 21:d5:42:60:42:a7:dd:ec:d8:43:b6:a3:30:62:c1: c9:b6:5c:09:f6:ef:f4:66:95:3b:be:1c:59:71:04: 03:9c:dd:76:37:65:f2:d6:c6:16:2a:7e:c0:79:c1: 01:e0:3d:52:68:be:cb:5c:22:80:45:8a:42:ce:75: 46:ea:9c:dc:01:10:30:42:05:cb:0f:8f:56:df:f1: fc:ec:3d:ff:e5:4c:76:e0:8c:f1:27:82:be:1c:07: 2f:03:e4:47:cb:9f:d4:95:64:0f:9a:d1:f4:28:cd: 2e:71:c8:e5:40:08:3e:3c:e6:76:47:fd:65:c6:d8: bb:7c:28:15:09:86:a6:66:0d:8c:fc:b8:be:6d:9f: 6e:37:00:aa:d4:bb:4e:d6:26:c2:4e:ad:30:81:0c: 51:6b:90:50:16:d2:16:98:c2:89:66:8f:49:0b:c2: 23:31:0f:d5:6a:65:0b:e9:1d:d1:35:39:7b:df:dd: 65:c9:d0:0d:e0:61:ae:d9:37:fc:a5:9c:e4:6a:50: a8:19:ae:f4:97:0a:c9:31:a4:de:4c:03:35:d0:4f: 57:05:9a:ee:8a:49:3a:c3:02:55:a6:12:46:80:65: 92:41:76:71:cf:02:10:17:80:2e:ad:a0:d1:8f:e8: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:DB:DF:17:0C:25:CF:E0:22:4D:64:C8:ED:E1:44:C4:AA:50:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:74:b8:49:16:d0:e9:b6:33:da:56:0d:86:35:a1:c6:df:26: 27:01:64:d5:0d:13:9f:d2:95:89:66:ba:e2:dc:0c:67:e9:cd: 5e:14:72:a2:01:ac:f3:ee:d2:0c:21:68:92:f9:ae:bf:fb:a9: 4a:7d:b1:5b:86:0c:53:5f:52:2a:74:38:bc:f9:9a:fc:26:db: 0e:a1:a8:66:ed:d3:a3:ba:d7:0f:f6:53:96:03:16:da:3f:ed: ea:b7:bd:d0:18:1e:da:18:c9:7a:c3:37:26:d4:73:2d:f0:43: 7f:53:fc:90:99:f1:18:23:a7:e0:9b:a6:b8:e1:76:c6:fa:ce: 1c:81:9b:52:45:ce:78:c5:31:c1:49:fb:dd:1c:18:38:51:43: df:fc:32:b6:9c:3d:03:87:f7:12:59:67:52:37:d1:2b:a5:37: 67:fe:37:4e:ff:a4:6a:42:86:95:17:6e:2d:5f:76:c6:cd:92: b8:6b:8c:20:77:15:66:cd:c6:3b:de:02:b9:80:75:da:ea:e1: cf:4b:f2:fc:81:36:e2:fe:a6:58:c8:c2:92:f5:6c:fa:72:fb: 0b:ac:7a:f4:65:a5:36:20:de:df:85:79:4a:26:a6:2d:cf:ce: 48:21:61:94:28:72:06:08:72:8f:92:5d:28:88:2b:70:29:bc: 2b:79:5a:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CpAhNpVNVtMD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmMyOTIyZjEtOGY4Yy00OWU0LTgxYTMtOGE0YjY1Njc1ZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmRCRsmCNZVjligr6esh1UJgQqfd7NhDtqMw YsHJtlwJ9u/0ZpU7vhxZcQQDnN12N2Xy1sYWKn7AecEB4D1SaL7LXCKARYpCznVG 6pzcARAwQgXLD49W3/H87D3/5Ux24IzxJ4K+HAcvA+RHy5/UlWQPmtH0KM0uccjl QAg+POZ2R/1lxti7fCgVCYamZg2M/Li+bZ9uNwCq1LtO1ibCTq0wgQxRa5BQFtIW mMKJZo9JC8IjMQ/VamUL6R3RNTl7391lydAN4GGu2Tf8pZzkalCoGa70lwrJMaTe TAM10E9XBZruikk6wwJVphJGgGWSQXZxzwIQF4AuraDRj+jGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAX298XDCXP4CJNZMjt4UTEqlD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E0NzNkNzEtMThmZi0z NDRmLTliYjktODVjZTJjMWEyNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB0uEkW0Om2M9pWDYY1ocbfJicBZNUNE5/SlYlmuuLcDGfpzV4UcqIB rPPu0gwhaJL5rr/7qUp9sVuGDFNfUip0OLz5mvwm2w6hqGbt06O61w/2U5YDFto/ 7eq3vdAYHtoYyXrDNybUcy3wQ39T/JCZ8Rgjp+Cbprjhdsb6zhyBm1JFznjFMcFJ +90cGDhRQ9/8MracPQOH9xJZZ1I30SulN2f+N07/pGpChpUXbi1fdsbNkrhrjCB3 FWbNxjveArmAddrq4c9L8vyBNuL+pljIwpL1bPpy+wusevRlpTYg3t+FeUompi3P zkghYZQocgYIco+SXSiIK3ApvCt5Who= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:52 2026 by rpki-client