$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa File: 86147445-4d27-3a02-b65f-dcb48ef32850.roa (raw, json) Hash identifier: BQjPfRqM2btVCd5euoGPFWlWJWZ3HAslrsk9Bl0JNQM= Subject key identifier: 63:17:72:C8:7E:4A:5B:CC:83:48:0E:A6:D0:D7:45:20:05:53:4A:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02FFBFE0C287507F1D280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2f:fb:fe:0c:28:75:07:f1:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7129668d-997c-40b0-93b6-f9f58c21209b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:a1:96:b7:e3:71:06:03:04:11:ea:be:f8: 3e:65:61:f7:71:5d:c4:d6:53:7e:5d:b2:03:33:77: 98:e7:06:cc:58:6d:0c:60:5c:9d:aa:80:70:e9:b2: cf:2c:d3:e0:71:22:37:17:ad:0a:c9:0c:fb:73:13: 79:b8:eb:91:ed:5c:0a:b9:16:5f:cf:fe:8b:7d:b2: 67:01:f7:d8:48:6a:7d:85:33:bc:51:66:b9:40:59: b0:9b:b1:90:0b:5d:37:d4:36:54:f5:f7:b4:98:e0: 36:a5:4a:31:fb:a4:41:da:8d:83:28:53:c0:0f:9c: e4:89:e7:dc:3e:31:56:67:9e:8b:9b:b7:21:a1:06: e5:31:54:d9:68:41:ae:03:76:39:dd:5c:30:53:9d: 56:3f:31:88:d3:f7:65:6c:81:3e:31:5a:30:72:1f: 55:c8:30:f8:02:5b:2b:a9:cb:00:37:8d:eb:21:39: cc:c1:d8:f1:21:07:14:e2:4b:a2:fa:7f:90:df:fc: f4:f8:02:38:e0:4e:c3:07:9f:fa:5c:3e:d8:98:0e: 6b:5a:28:8a:1d:d1:77:8f:e6:04:7b:b9:7b:04:47: c5:21:cb:39:f0:0a:25:a9:f8:54:46:e8:cd:74:77: 9e:31:31:de:05:93:4a:2f:67:ce:3d:38:9e:0b:cd: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:17:72:C8:7E:4A:5B:CC:83:48:0E:A6:D0:D7:45:20:05:53:4A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86147445-4d27-3a02-b65f-dcb48ef32850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c4:36:d9:a6:16:34:10:e6:28:e7:b7:b2:17:1c:bc:e4:e1: 56:25:e0:9d:0d:e7:8d:77:81:0d:70:35:f4:fa:ea:ad:3f:1f: eb:4b:7c:a7:c0:87:b8:34:d9:31:4f:da:9d:b2:89:fe:25:0e: 25:e1:30:b7:45:37:95:fa:08:e3:6b:b5:6e:09:df:f1:0d:ae: 3f:b6:4f:fa:1a:ab:e8:40:46:cb:7f:0f:ec:d0:cb:d5:3d:1a: 4a:5c:53:c6:be:03:70:85:33:05:e0:c1:dd:05:14:3c:41:74: 0c:7a:cf:fd:92:87:e1:fe:5b:e2:02:6f:50:cc:ca:96:96:4b: 43:51:0f:64:82:4f:c0:c3:e2:21:49:ac:f6:8c:ca:8d:e6:6d: 5a:0a:98:f8:12:9a:5e:10:63:ff:0b:b9:07:cc:b9:72:60:96: 48:71:ef:84:d0:2b:04:f3:74:61:f4:1b:2c:87:c5:c2:7f:bb: af:11:ed:41:4c:b2:dd:a5:ba:c8:46:42:34:66:ae:f0:3b:39: 7b:02:ad:94:41:d1:43:04:61:83:d9:4c:eb:8a:93:72:56:a2: a6:b6:8f:c6:d8:8b:04:98:b4:aa:e9:6c:1c:d6:8a:e1:46:9e: 6b:43:bc:80:cd:41:e4:88:15:58:73:83:e2:63:5c:2f:62:ad: 3c:10:3c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C/7/gwodQfx0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzEyOTY2OGQtOTk3Yy00MGIwLTkzYjYtZjlmNThjMjEyMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyyhlrfjcQYDBBHqvvg+ZWH3cV3E1lN+XbID M3eY5wbMWG0MYFydqoBw6bLPLNPgcSI3F60KyQz7cxN5uOuR7VwKuRZfz/6LfbJn AffYSGp9hTO8UWa5QFmwm7GQC1031DZU9fe0mOA2pUox+6RB2o2DKFPAD5zkiefc PjFWZ56Lm7choQblMVTZaEGuA3Y53VwwU51WPzGI0/dlbIE+MVowch9VyDD4Alsr qcsAN43rITnMwdjxIQcU4kui+n+Q3/z0+AI44E7DB5/6XD7YmA5rWiiKHdF3j+YE e7l7BEfFIcs58AolqfhURujNdHeeMTHeBZNKL2fOPTieC828dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMXcsh+SlvMg0gOptDXRSAFU0rnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYxNDc0NDUtNGQyNy0z YTAyLWI2NWYtZGNiNDhlZjMyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7ENtmmFjQQ5ijnt7IXHLzk4VYl4J0N5413gQ1wNfT66q0/H+tLfKfA h7g02TFP2p2yif4lDiXhMLdFN5X6CONrtW4J3/ENrj+2T/oaq+hARst/D+zQy9U9 GkpcU8a+A3CFMwXgwd0FFDxBdAx6z/2Sh+H+W+ICb1DMypaWS0NRD2SCT8DD4iFJ rPaMyo3mbVoKmPgSml4QY/8LuQfMuXJglkhx74TQKwTzdGH0GyyHxcJ/u68R7UFM st2lushGQjRmrvA7OXsCrZRB0UMEYYPZTOuKk3JWoqa2j8bYiwSYtKrpbBzWiuFG nmtDvIDNQeSIFVhzg+JjXC9irTwQPIA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:48 2026 by rpki-client