$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa File: 859f2179-6268-3d00-b2bc-ba3b138d14d0.roa (raw, json) Hash identifier: kVsPlzCZXz9Fl5V2dQOzDaQ255h0QBojdaW3+YbnRKo= Subject key identifier: 0E:44:81:01:6A:2C:4F:2B:6D:2C:D7:BA:8C:3B:9A:D4:D4:6B:96:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E89F682EF60D4957E480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e8:9f:68:2e:f6:0d:49:57:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=efba3e1b-8e4c-4be6-8d79-5c71cf0377a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:62:63:98:7e:bb:b3:0e:49:6e:4a:a1:c7: 53:26:16:e5:a8:38:40:05:f7:2d:79:72:6d:ec:0e: 64:06:59:b6:1b:d2:b2:90:e4:2e:29:af:77:62:fb: 35:07:e7:77:0c:3d:47:fb:e9:66:fa:36:4f:f7:65: 92:48:0d:b0:d6:8d:1f:d1:ad:f8:8b:c0:ee:77:47: 52:e2:d5:39:1a:d5:19:ad:c6:63:e3:2b:55:64:81: 2c:b1:aa:63:39:71:a1:c1:a0:b3:ca:fc:a8:2d:3c: bd:9b:2e:73:0d:d5:a2:2a:be:db:5f:85:2d:a8:7c: b8:89:26:8e:45:78:ea:be:90:a8:60:e6:16:72:38: f2:c3:c9:85:48:b6:e8:35:28:7b:83:c3:1c:ca:2f: 0d:43:2f:8f:5f:39:6b:40:ac:69:ce:f8:18:d1:99: 1d:db:18:b6:26:56:86:f3:55:d8:af:c2:83:64:32: fb:5e:69:12:3e:4e:c9:77:cf:4e:66:3b:d8:e4:0f: 68:41:30:fd:9e:02:93:40:f6:41:73:f8:7d:04:d7: f7:e8:b9:6d:7a:91:be:79:ad:27:25:5c:03:fa:1b: 45:55:9d:af:b6:9a:cc:a8:f6:71:a3:67:51:bd:56: 2a:6c:b9:d6:ef:52:90:d2:05:cd:3e:ca:92:a3:87: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:81:01:6A:2C:4F:2B:6D:2C:D7:BA:8C:3B:9A:D4:D4:6B:96:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/859f2179-6268-3d00-b2bc-ba3b138d14d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1e:29:75:52:71:7a:8a:e8:8a:fc:8d:46:2a:cf:cd:bd:40: 9b:c6:89:0c:fe:cb:18:ff:7a:f2:a7:57:38:55:45:66:eb:76: d1:75:f4:3a:f0:d8:24:29:69:97:dd:de:bb:64:72:73:2d:b7: 4f:c3:81:cd:4e:eb:40:d8:34:06:6d:59:01:30:6b:c5:72:ed: 8b:99:69:de:4c:11:04:1a:c0:25:00:c1:99:58:39:2c:7a:4c: 44:4f:37:d7:50:0f:e7:ed:ac:05:e9:cb:01:16:a3:2f:d6:73: bb:01:90:10:44:e6:7e:c6:5e:a3:94:68:a5:06:2f:d9:88:45: 3d:38:fa:7f:cd:5b:2b:ce:3a:c1:1a:9d:65:11:78:8f:2b:4e: 46:53:f1:c0:09:32:6f:5f:3a:4b:53:a5:bd:fe:0b:c3:b8:17: 54:a5:55:79:e4:26:af:8b:be:dd:85:b7:4b:c0:c9:a5:bd:fd: 1f:77:0f:d3:9e:80:06:87:3b:88:63:87:3c:d2:b7:aa:ee:b0: dc:c5:9e:4b:51:66:26:0a:49:8c:49:fc:2b:12:df:b0:25:af: 19:ed:c7:45:f7:63:a4:b2:06:2e:dc:5e:08:df:d9:28:ac:33: b0:eb:e7:b4:dc:7f:c6:60:f1:2a:20:af:ff:35:1a:f4:85:27: 45:b4:0f:67 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0k4OifaC72DUlX5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWZiYTNlMWItOGU0Yy00YmU2LThkNzktNWM3MWNmMDM3N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQdiY5h+u7MOSW5KocdTJhblqDhABfcteXJt 7A5kBlm2G9KykOQuKa93Yvs1B+d3DD1H++lm+jZP92WSSA2w1o0f0a34i8Dud0dS 4tU5GtUZrcZj4ytVZIEssapjOXGhwaCzyvyoLTy9my5zDdWiKr7bX4UtqHy4iSaO RXjqvpCoYOYWcjjyw8mFSLboNSh7g8Mcyi8NQy+PXzlrQKxpzvgY0Zkd2xi2JlaG 81XYr8KDZDL7XmkSPk7Jd89OZjvY5A9oQTD9ngKTQPZBc/h9BNf36LltepG+ea0n JVwD+htFVZ2vtprMqPZxo2dRvVYqbLnW71KQ0gXNPsqSo4dRMQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA5EgQFqLE8rbSzXuow7mtTUa5bJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU5ZjIxNzktNjI2OC0z ZDAwLWIyYmMtYmEzYjEzOGQxNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdR4pdVJxeoroivyNRirPzb1Am8aJDP7LGP968qdXOFVFZut20XX0OvDY JClpl93eu2Rycy23T8OBzU7rQNg0Bm1ZATBrxXLti5lp3kwRBBrAJQDBmVg5LHpM RE8311AP5+2sBenLARajL9ZzuwGQEETmfsZeo5RopQYv2YhFPTj6f81bK846wRqd ZRF4jytORlPxwAkyb186S1Olvf4Lw7gXVKVVeeQmr4u+3YW3S8DJpb39H3cP056A Boc7iGOHPNK3qu6w3MWeS1FmJgpJjEn8KxLfsCWvGe3HRfdjpLIGLtxeCN/ZKKwz sOvntNx/xmDxKiCv/zUa9IUnRbQPZw== -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:59 2026 by rpki-client