$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa File: 7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa (raw, json) Hash identifier: TWTFs9IkRAkQvYRKTKGQf622BlFCw+K0uawBIgYk8m0= Subject key identifier: B1:C2:92:5D:E9:3B:53:C1:23:93:1E:3A:0F:78:A8:FA:C3:67:73:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02AA3B9C426016B141B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2a:a3:b9:c4:26:01:6b:14:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5dce4eb8-92b6-46dd-aa9f-f0af8bd78767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:90:3b:ac:9d:95:31:fe:84:76:1b:20:29: 59:64:aa:04:cd:68:bc:3d:ad:07:81:7d:16:3d:87: c8:d6:28:46:04:93:40:8b:6b:5d:05:e4:9c:28:87: aa:c5:0b:5b:4c:38:04:4a:d9:11:95:0c:e6:26:61: d8:64:b6:5a:d5:64:e2:e8:0f:53:53:8d:55:6a:0f: ca:ed:80:ce:f5:0b:27:45:f1:02:0f:d5:bb:62:86: 56:8c:97:db:1f:61:80:6d:31:82:5c:83:d7:02:cb: 46:39:57:8b:57:cd:c7:87:0e:4f:31:5d:a8:96:a0: 43:a8:32:17:80:3c:80:8d:84:ee:0b:0d:cf:d2:35: 93:23:83:1a:6d:9f:1a:57:e7:32:15:05:60:22:b5: 59:96:cc:9f:be:44:73:f4:84:38:c6:f6:01:a5:02: d9:2a:b1:59:36:a0:28:35:dd:f7:7b:40:2b:57:87: e4:ad:ba:4c:89:58:8f:e9:4e:1a:d6:ac:11:a3:7f: b1:bd:d8:07:fb:e2:14:f9:62:84:88:e8:ec:e4:e2: 45:9a:9a:83:9e:0d:d6:91:4f:28:1d:59:6a:9c:30: 53:d3:8e:82:e5:16:ab:d0:e7:8e:45:e3:8f:4d:64: dd:09:3d:b5:64:6f:c9:5b:27:d8:96:fc:c0:b9:ac: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:92:5D:E9:3B:53:C1:23:93:1E:3A:0F:78:A8:FA:C3:67:73:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8ce43c-a1ef-3e62-9931-bb94a0ba63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6a:cc:3e:96:e9:50:57:70:08:f9:96:6a:ab:20:90:88:df: af:52:b7:13:cc:a8:bf:cc:a7:22:97:0f:65:20:7b:46:db:21: da:0d:73:b4:12:ff:9a:25:71:c4:d9:d0:13:82:19:f7:0e:8d: 45:34:96:d1:aa:41:da:6f:dd:ff:68:c4:d2:14:1d:4f:88:3c: 86:95:ca:8f:a7:3e:f8:ac:8e:63:d4:df:93:67:ab:05:88:85: ef:f1:64:ef:ff:fb:05:a6:4d:06:e8:06:14:f8:07:b2:5b:6a: 4e:df:83:0c:4a:63:08:92:b6:37:87:d7:63:72:76:69:c4:d0: 2a:aa:a3:d7:e4:56:56:c3:a6:64:88:ea:a7:d2:84:45:00:8f: e3:c9:41:36:0b:41:46:2a:9d:9f:e1:15:07:8a:21:17:dd:df: 73:73:a1:95:5b:66:c3:13:8d:95:d3:f7:c3:f0:1f:66:37:ed: 35:92:53:ae:7a:bc:73:e0:e9:c1:39:2d:c5:55:70:48:b0:33: 04:08:d9:5d:cc:67:82:fa:e6:be:f3:61:00:9b:65:83:dd:46: c5:82:ce:73:1a:0b:a8:16:79:3f:0c:18:c8:c8:b8:d0:67:77: 07:c8:23:74:41:1d:b4:ef:5d:46:48:6f:b8:32:02:01:a8:78: e0:83:87:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CqjucQmAWsUGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWRjZTRlYjgtOTJiNi00NmRkLWFhOWYtZjBhZjhiZDc4NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHGQO6ydlTH+hHYbIClZZKoEzWi8Pa0HgX0W PYfI1ihGBJNAi2tdBeScKIeqxQtbTDgEStkRlQzmJmHYZLZa1WTi6A9TU41Vag/K 7YDO9QsnRfECD9W7YoZWjJfbH2GAbTGCXIPXAstGOVeLV83Hhw5PMV2olqBDqDIX gDyAjYTuCw3P0jWTI4MabZ8aV+cyFQVgIrVZlsyfvkRz9IQ4xvYBpQLZKrFZNqAo Nd33e0ArV4fkrbpMiViP6U4a1qwRo3+xvdgH++IU+WKEiOjs5OJFmpqDng3WkU8o HVlqnDBT046C5Rar0OeOReOPTWTdCT21ZG/JWyfYlvzAuazvnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHCkl3pO1PBI5MeOg94qPrDZ3OTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E4Y2U0M2MtYTFlZi0z ZTYyLTk5MzEtYmI5NGEwYmE2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlqzD6W6VBXcAj5lmqrIJCI369StxPMqL/MpyKXD2Uge0bbIdoNc7QS /5olccTZ0BOCGfcOjUU0ltGqQdpv3f9oxNIUHU+IPIaVyo+nPvisjmPU35NnqwWI he/xZO//+wWmTQboBhT4B7Jbak7fgwxKYwiStjeH12NydmnE0Cqqo9fkVlbDpmSI 6qfShEUAj+PJQTYLQUYqnZ/hFQeKIRfd33NzoZVbZsMTjZXT98PwH2Y37TWSU656 vHPg6cE5LcVVcEiwMwQI2V3MZ4L65r7zYQCbZYPdRsWCznMaC6gWeT8MGMjIuNBn dwfII3RBHbTvXUZIb7gyAgGoeOCDh0E= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:38 2026 by rpki-client