$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa File: 82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa (raw, json) Hash identifier: zni63Fcs6Swf4C4qqAS+0YxMAo+q1/a37evi63v7bFI= Subject key identifier: E5:4C:56:15:77:2B:15:D0:34:11:36:93:4D:EE:61:25:CF:DB:CD:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E038FD918477AAA3FDB300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 209.85.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:38:fd:91:84:77:aa:a3:fd:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f3104c64-0729-47a1-991c-3e080fd0f818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:52:49:bd:69:76:71:79:9d:42:46:d5:77: 06:ad:e1:1e:12:af:e4:7d:e6:97:7f:09:cb:70:66: 7f:63:25:bd:f8:bf:24:6a:89:3e:f3:bb:ce:5f:d2: 79:74:e1:48:a8:ec:01:97:ef:f3:0b:98:01:25:ff: d2:ae:e2:a2:d3:f7:f8:d4:e6:53:38:ed:41:06:4e: e1:53:6d:b2:e9:6c:ec:2c:39:bc:bc:e3:4f:10:18: e6:33:1b:04:50:48:bc:9e:40:6f:b9:5a:69:30:56: 42:d5:60:15:45:46:38:ab:1d:df:70:ff:a8:00:26: 4a:06:fe:5a:3c:87:7f:e9:e0:a1:0c:54:ca:81:1b: e6:54:28:3b:b7:f7:87:c1:4d:ed:a3:f8:13:b1:e2: 5d:3c:35:7f:c0:5a:50:15:d5:5f:07:c0:1e:fc:c5: 38:e7:d9:92:e9:02:c9:63:f1:95:94:99:bb:e5:56: 06:f9:aa:80:59:0a:97:cb:53:69:bb:28:fb:b6:38: 28:e1:59:ae:ab:57:cf:55:03:58:16:51:76:ef:ea: 6f:f2:82:6d:2d:18:94:5a:71:ee:b1:9f:35:0a:bc: 6b:20:42:71:22:ca:c2:7c:5a:72:fa:41:75:01:0a: f9:a6:47:42:4c:67:a1:b5:0f:75:67:77:81:08:bf: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4C:56:15:77:2B:15:D0:34:11:36:93:4D:EE:61:25:CF:DB:CD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82bb8e4b-8e68-303d-9ff1-93f5f6688d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:fa:be:db:b0:a4:75:20:ce:86:ae:20:6c:e6:94:d1:af:0c: e9:41:d5:a3:0b:a6:11:eb:88:e9:cf:3a:c4:ff:ea:ca:d3:7f: 1a:c3:dd:db:ac:01:82:96:47:3d:d9:84:14:f0:f8:97:d8:41: bc:da:46:d4:bb:77:1e:6d:68:b3:0c:47:da:04:41:f5:9a:f9: 0c:b9:58:04:e9:fd:42:11:11:78:ae:40:5a:0c:8a:dc:f5:96: 1a:ec:a5:3f:bc:ba:7a:6c:c8:23:dd:76:5d:64:97:1d:64:f5: 69:34:64:e2:87:3d:db:d9:b7:43:bc:34:32:76:72:c0:5d:85: ff:2e:5c:1a:08:7a:93:77:1b:e8:c4:91:09:ed:05:fb:65:70: d7:a6:5e:d2:1a:f7:51:b4:07:9e:ba:34:11:9a:0d:c2:8b:6d: 20:f8:63:70:88:45:d8:b9:a2:c0:75:4b:af:75:82:0a:07:8e: b8:11:8e:85:73:cd:a9:48:a9:6f:5e:c7:45:95:8f:61:ea:30: 28:f5:86:42:d8:60:58:77:53:dd:5a:9f:98:64:36:c6:eb:b9: a2:1e:5f:b3:3a:fd:2c:91:3f:07:60:58:d5:9a:38:ec:54:7c: f0:b1:ff:bf:63:9d:44:aa:e4:d4:70:c7:b2:c7:72:d6:bd:65: e0:4f:ed:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Dj9kYR3qqP9swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjMxMDRjNjQtMDcyOS00N2ExLTk5MWMtM2UwODBmZDBmODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglhSSb1pdnF5nUJG1XcGreEeEq/kfeaXfwnL cGZ/YyW9+L8kaok+87vOX9J5dOFIqOwBl+/zC5gBJf/SruKi0/f41OZTOO1BBk7h U22y6WzsLDm8vONPEBjmMxsEUEi8nkBvuVppMFZC1WAVRUY4qx3fcP+oACZKBv5a PId/6eChDFTKgRvmVCg7t/eHwU3to/gTseJdPDV/wFpQFdVfB8Ae/MU459mS6QLJ Y/GVlJm75VYG+aqAWQqXy1Npuyj7tjgo4Vmuq1fPVQNYFlF27+pv8oJtLRiUWnHu sZ81CrxrIEJxIsrCfFpy+kF1AQr5pkdCTGehtQ91Z3eBCL9GYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVMVhV3KxXQNBE2k03uYSXP280lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODJiYjhlNGItOGU2OC0z MDNkLTlmZjEtOTNmNWY2Njg4ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC76vtuwpHUgzoauIGzmlNGvDOlB1aMLphHriOnPOsT/6srTfxrD3dus AYKWRz3ZhBTw+JfYQbzaRtS7dx5taLMMR9oEQfWa+Qy5WATp/UIREXiuQFoMitz1 lhrspT+8unpsyCPddl1klx1k9Wk0ZOKHPdvZt0O8NDJ2csBdhf8uXBoIepN3G+jE kQntBftlcNemXtIa91G0B566NBGaDcKLbSD4Y3CIRdi5osB1S691ggoHjrgRjoVz zalIqW9ex0WVj2HqMCj1hkLYYFh3U91an5hkNsbruaIeX7M6/SyRPwdgWNWaOOxU fPCx/79jnUSq5NRwx7LHcta9ZeBP7es= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:36 2026 by rpki-client