$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa File: 839e5923-d592-30e5-ba37-9fbbbf065f7a.roa (raw, json) Hash identifier: 2KuYX71FdcGoJd51Q3DecIXH8hnGC+5xPWW4N7+QYxM= Subject key identifier: 75:43:2F:D1:2E:19:CB:90:08:76:25:66:CD:B8:62:92:B5:7C:07:F1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E029964D02DCFE27B3BE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:29:96:4d:02:dc:fe:27:b3:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=edf4afcd-c3bf-49b0-8cb6-019588a36d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:73:1a:b4:8e:d3:8a:8f:c2:fa:cb:ea:03: 50:6b:df:78:14:4c:a2:97:11:b9:21:b0:07:e4:1b: df:6c:38:02:02:a2:63:b5:77:81:d2:70:fa:e6:2f: 4e:36:3e:57:6f:ee:69:08:69:e1:65:86:dc:0e:cd: 5c:fa:02:8c:e0:e4:12:19:21:a5:e1:d2:55:51:db: 4b:2b:9f:68:c4:41:98:b9:de:48:c5:d8:9b:e8:0a: cb:a0:9d:d7:17:cb:73:4d:d9:5b:67:a0:63:a5:a4: dd:95:8e:8f:c8:03:73:c2:6c:f1:34:ba:a4:30:42: fb:48:fc:4b:10:91:50:96:9b:35:dd:8d:09:f8:76: e1:bd:dd:b8:5a:b6:29:cb:d5:5f:8a:04:fe:46:f1: b5:b5:58:51:79:6b:2c:48:1b:92:b8:19:ce:a4:91: 3d:8a:21:94:92:c7:cd:be:8d:93:48:2a:8a:8e:03: e7:ec:e2:5b:97:eb:aa:06:1d:ec:aa:f1:3d:f3:18: 7d:4d:fa:03:7c:c1:ce:ac:71:d1:0c:87:ae:ef:bd: 2b:2f:f8:2b:d6:d5:51:c4:d3:64:29:33:91:11:b3: 58:43:62:6b:45:c0:bc:3d:8d:45:44:25:be:d2:75: b5:d4:c1:ea:eb:a4:c0:56:60:80:7e:b5:bb:fb:a2: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:2F:D1:2E:19:CB:90:08:76:25:66:CD:B8:62:92:B5:7C:07:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b9:46:4f:4b:fd:47:53:70:8c:85:7f:4a:ba:51:fa:12:6a: d9:19:5e:04:1c:70:f9:6e:99:dd:15:9f:a6:59:64:fe:d3:9e: 88:69:fc:06:23:35:47:10:fd:23:33:fe:84:16:e2:f8:e8:60: 40:2d:86:87:a3:83:63:17:9c:9a:f4:0e:26:88:ef:87:de:83: 30:36:78:e7:6b:dc:eb:65:df:38:22:14:db:8b:8b:5e:4c:05: 4c:91:e7:58:5a:54:fb:81:3c:3d:20:4a:2e:10:46:8a:c9:5c: d3:d3:ce:86:f5:d8:cb:55:3a:00:84:ab:c1:42:e6:11:46:1c: 72:51:1f:fd:5b:c3:2b:30:88:c5:8c:bb:d3:36:9e:3a:38:19: fe:51:21:e8:77:a8:05:38:09:e8:12:8f:5f:53:f3:88:04:83: c8:28:f2:32:45:41:3c:74:1f:60:be:13:fc:26:be:c6:5d:d5: 69:60:4f:4e:47:13:c2:64:3b:d3:10:67:89:e3:7c:54:58:68: 3a:7d:07:cb:11:27:c1:d2:10:38:d2:f0:e6:0c:5c:73:b9:f6: 5d:ab:71:0c:72:94:22:11:cd:71:03:d5:60:26:d1:cd:1e:58: 9f:f7:83:0c:69:1d:07:7f:c0:83:91:cd:68:c2:b1:7c:3d:20: d4:ed:44:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CmWTQLc/iezvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWRmNGFmY2QtYzNiZi00OWIwLThjYjYtMDE5NTg4YTM2ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7tzGrSO04qPwvrL6gNQa994FEyilxG5IbAH 5BvfbDgCAqJjtXeB0nD65i9ONj5Xb+5pCGnhZYbcDs1c+gKM4OQSGSGl4dJVUdtL K59oxEGYud5Ixdib6ArLoJ3XF8tzTdlbZ6BjpaTdlY6PyANzwmzxNLqkMEL7SPxL EJFQlps13Y0J+Hbhvd24WrYpy9VfigT+RvG1tVhReWssSBuSuBnOpJE9iiGUksfN vo2TSCqKjgPn7OJbl+uqBh3sqvE98xh9TfoDfMHOrHHRDIeu770rL/gr1tVRxNNk KTOREbNYQ2JrRcC8PY1FRCW+0nW11MHq66TAVmCAfrW7+6KhzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVDL9EuGcuQCHYlZs24YpK1fAfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODM5ZTU5MjMtZDU5Mi0z MGU1LWJhMzctOWZiYmJmMDY1ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa5Rk9L/UdTcIyFf0q6UfoSatkZXgQccPlumd0Vn6ZZZP7Tnohp/AYj NUcQ/SMz/oQW4vjoYEAthoejg2MXnJr0DiaI74fegzA2eOdr3Otl3zgiFNuLi15M BUyR51haVPuBPD0gSi4QRorJXNPTzob12MtVOgCEq8FC5hFGHHJRH/1bwyswiMWM u9M2njo4Gf5RIeh3qAU4CegSj19T84gEg8go8jJFQTx0H2C+E/wmvsZd1WlgT05H E8JkO9MQZ4njfFRYaDp9B8sRJ8HSEDjS8OYMXHO59l2rcQxylCIRzXED1WAm0c0e WJ/3gwxpHQd/wIORzWjCsXw9INTtRFA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:07 2026 by rpki-client