$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa File: 8420604a-78c3-354a-867d-4cbdeb9953ad.roa (raw, json) Hash identifier: IDDDVqDXtKOCNT9ewgtvaAsJzFpSLvP7HfYrHbeSMqU= Subject key identifier: 37:40:DC:44:21:3A:27:FB:39:3B:CB:06:76:5A:60:71:8C:9A:0E:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E40FBA504A38E7763E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e4:0f:ba:50:4a:38:e7:76:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d7f57b88-d051-4d31-a126-da299a69ff0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6c:1b:12:22:c6:5d:91:1e:6f:a2:5c:f3:18: e4:e4:17:f9:89:4c:9a:71:93:67:1c:f1:60:be:73: 30:72:25:cb:5a:d0:97:fc:94:9e:c6:ea:8b:55:a6: f0:50:97:fa:8b:6c:57:59:9d:b2:a9:f0:fa:fb:1e: af:ad:f3:ef:85:ad:92:c5:b5:db:8c:ba:2c:f3:1d: fd:68:76:40:16:f0:82:bf:4f:56:4a:fa:33:f2:5f: 48:63:6e:67:c9:3f:f2:08:fd:b8:26:79:d9:ef:8a: 6c:12:5f:b8:bc:76:9d:df:01:3a:e3:2f:66:81:6b: 10:3f:7d:2e:09:fa:b0:43:43:e7:4f:69:26:0c:7e: f6:94:5c:56:f1:f8:17:8d:8e:32:6a:b2:5c:6f:1f: 47:cb:aa:b9:3e:f7:c9:3a:65:fb:2d:33:86:5e:13: a8:4f:f0:d4:bf:9c:9e:f6:0c:a2:1a:f3:4a:9e:05: 79:8c:30:e3:af:7f:05:d5:00:65:0c:7e:aa:9a:c2: 6e:6e:f4:70:d4:b5:e2:30:1e:aa:b2:4a:30:e9:bc: f7:b2:94:33:4a:a5:3c:70:86:a7:70:a8:78:31:c0: b6:91:27:40:d5:4c:d7:d8:78:da:ab:bc:50:2b:6e: 3b:e0:88:6d:8b:c4:08:f1:7f:31:84:f7:87:30:de: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:DC:44:21:3A:27:FB:39:3B:CB:06:76:5A:60:71:8C:9A:0E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8420604a-78c3-354a-867d-4cbdeb9953ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8e:81:f2:53:b0:71:9d:ac:77:96:aa:b7:1f:7c:18:b8:36: 6b:6b:5d:e7:8c:3a:d2:fc:1b:de:50:5a:f7:98:ee:cb:44:a5: 7a:c0:79:2b:6b:3a:3b:5d:ec:9b:22:d3:2b:3b:31:22:19:db: e1:15:60:10:a0:53:a6:22:35:34:f5:73:d7:6d:d4:b7:46:57: d2:5e:1b:54:13:18:a3:1b:97:04:52:34:24:3f:bd:72:01:cb: 15:45:76:d7:2f:0d:40:d8:f3:c2:64:1c:4a:cd:d8:44:0f:86: 71:48:8b:9c:c6:61:ec:f3:d3:bc:6c:2c:60:d8:9d:7f:a9:9c: c7:06:8f:89:83:f2:1f:39:18:cd:2f:54:db:08:66:3d:7f:a0: 91:8e:ea:68:2c:cb:b3:99:19:d7:11:1a:6f:3f:7d:4b:b6:41: 9c:cf:ad:20:68:bb:c0:ae:52:f9:df:c2:e3:11:ad:88:c9:7d: 36:f3:89:db:51:9c:ed:85:28:3f:d3:78:76:8f:9d:14:e2:d0: 54:86:e1:e6:52:93:2c:23:d2:b1:b6:ce:22:4e:15:47:9b:5e: 63:d9:f9:f8:89:b9:3e:ff:a5:c9:b2:8b:1f:1e:1a:fb:8e:a4: 90:25:52:bf:31:fc:a6:f3:16:72:98:b2:be:2d:b4:db:47:07: 04:ce:2b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OQPulBKOOd2PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDdmNTdiODgtZDA1MS00ZDMxLWExMjYtZGEyOTlhNjlmZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2wbEiLGXZEeb6Jc8xjk5Bf5iUyacZNnHPFg vnMwciXLWtCX/JSexuqLVabwUJf6i2xXWZ2yqfD6+x6vrfPvha2SxbXbjLos8x39 aHZAFvCCv09WSvoz8l9IY25nyT/yCP24JnnZ74psEl+4vHad3wE64y9mgWsQP30u CfqwQ0PnT2kmDH72lFxW8fgXjY4yarJcbx9Hy6q5PvfJOmX7LTOGXhOoT/DUv5ye 9gyiGvNKngV5jDDjr38F1QBlDH6qmsJubvRw1LXiMB6qskow6bz3spQzSqU8cIan cKh4McC2kSdA1UzX2Hjaq7xQK2474Ihti8QI8X8xhPeHMN5QxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdA3EQhOif7OTvLBnZaYHGMmg4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODQyMDYwNGEtNzhjMy0z NTRhLTg2N2QtNGNiZGViOTk1M2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaOgfJTsHGdrHeWqrcffBi4NmtrXeeMOtL8G95QWveY7stEpXrAeStr Ojtd7Jsi0ys7MSIZ2+EVYBCgU6YiNTT1c9dt1LdGV9JeG1QTGKMblwRSNCQ/vXIB yxVFdtcvDUDY88JkHErN2EQPhnFIi5zGYezz07xsLGDYnX+pnMcGj4mD8h85GM0v VNsIZj1/oJGO6mgsy7OZGdcRGm8/fUu2QZzPrSBou8CuUvnfwuMRrYjJfTbzidtR nO2FKD/TeHaPnRTi0FSG4eZSkywj0rG2ziJOFUebXmPZ+fiJuT7/pcmyix8eGvuO pJAlUr8x/KbzFnKYsr4ttNtHBwTOK28= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:20 2026 by rpki-client