$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa File: 8be47344-a631-3d2c-b2b7-dc3d503b692e.roa (raw, json) Hash identifier: 1Kyh/UT9Jxi6Zrc17Pr4pS9PPiMzpJfwwHzgbYGZfG0= Subject key identifier: AE:C0:9D:67:97:2D:6E:A3:3C:43:78:B5:4D:39:3C:DA:A2:7B:4B:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F6E0D8C3427628844800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f6:e0:d8:c3:42:76:28:84:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=541b1d86-f283-4e54-8df0-33a9436548a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:69:3a:f6:10:99:06:4b:fa:53:ca:a4:3c: 28:96:b1:89:11:40:5e:ab:89:fb:3c:db:21:39:86: 51:42:c9:34:e4:c3:02:df:3e:e7:79:13:93:72:70: 79:3f:73:0a:ac:b6:00:21:8f:c6:e5:d7:78:1f:0f: 54:4f:30:72:34:83:24:c5:8a:4b:4f:e5:b2:4b:86: 2d:06:05:7f:e7:f9:65:e1:97:ce:58:81:a4:92:f9: a1:ce:99:83:01:36:96:1f:7f:88:e3:80:8f:57:31: 49:6b:b4:de:b1:07:88:d3:ad:6c:e4:38:06:d2:9a: 8f:a8:4f:0f:ce:b7:fc:2d:f9:6e:30:4d:30:7e:f0: e0:ee:53:86:a7:c7:29:2c:fb:29:64:7f:d2:f5:8c: e6:24:82:96:a0:46:18:dc:71:3f:d5:c0:91:95:e9: 3a:57:e4:3e:9f:c2:06:ce:6a:74:9c:52:a2:43:fb: b7:e6:06:f9:36:30:24:52:13:2f:79:0d:c2:56:06: 49:ef:6c:95:80:af:bd:bc:90:d1:63:57:66:62:53: fd:ff:6f:ef:26:ec:02:9a:a5:be:cc:05:e2:9b:01: a6:5b:f4:ec:12:93:07:79:39:50:de:7e:be:b9:8c: b0:cf:99:6e:06:f0:45:3e:da:0b:5b:87:8f:1e:4a: 23:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C0:9D:67:97:2D:6E:A3:3C:43:78:B5:4D:39:3C:DA:A2:7B:4B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:18:08:dd:40:3f:f6:bd:b1:68:c7:ff:a0:dd:4b:7c:2e:44: aa:35:03:91:68:1b:6e:d0:78:0b:dd:d4:ed:40:bf:85:05:a0: 16:05:24:94:81:bc:d4:27:30:ec:f3:1a:8c:70:fc:fc:82:78: 58:70:30:7a:b8:b2:b0:ff:34:32:19:7f:b1:64:e4:bd:87:5b: b2:24:61:23:55:84:3b:fd:df:e4:8d:4b:e5:dc:fe:8d:4b:cd: 08:3a:1b:c8:78:3f:9d:57:ec:d0:0f:fb:db:7a:89:0e:b0:8f: e1:8f:0b:e1:52:a0:8f:a5:b6:ab:b2:31:a7:bb:35:38:57:bd: 3b:c6:72:e2:e1:87:63:78:2a:af:52:66:0c:9e:8f:0c:6d:5b: dd:6a:b5:ea:be:c4:0f:db:b4:de:e4:31:6a:ea:73:87:bb:46: 88:d8:50:35:0b:f2:c8:50:92:5d:d9:08:78:45:49:f8:c6:34: 10:23:cf:db:27:9b:e7:44:7e:5e:36:f4:cb:90:06:f4:2d:d7: 42:43:dd:34:b8:b8:aa:1e:3f:cd:0f:94:f5:19:84:1b:05:5a: f8:f7:64:25:32:db:d7:68:36:13:30:3c:3b:1f:7f:27:81:77: d2:f2:e9:b3:05:81:6b:c6:e3:b6:89:89:5a:b3:b4:f1:15:e8: e4:8d:02:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Pbg2MNCdiiESAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTQxYjFkODYtZjI4My00ZTU0LThkZjAtMzNhOTQzNjU0OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZtpOvYQmQZL+lPKpDwolrGJEUBeq4n7PNsh OYZRQsk05MMC3z7neROTcnB5P3MKrLYAIY/G5dd4Hw9UTzByNIMkxYpLT+WyS4Yt BgV/5/ll4ZfOWIGkkvmhzpmDATaWH3+I44CPVzFJa7TesQeI061s5DgG0pqPqE8P zrf8LfluME0wfvDg7lOGp8cpLPspZH/S9YzmJIKWoEYY3HE/1cCRlek6V+Q+n8IG zmp0nFKiQ/u35gb5NjAkUhMveQ3CVgZJ72yVgK+9vJDRY1dmYlP9/2/vJuwCmqW+ zAXimwGmW/TsEpMHeTlQ3n6+uYywz5luBvBFPtoLW4ePHkojSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7AnWeXLW6jPEN4tU05PNqie0vkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGJlNDczNDQtYTYzMS0z ZDJjLWIyYjctZGMzZDUwM2I2OTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAYCN1AP/a9sWjH/6DdS3wuRKo1A5FoG27QeAvd1O1Av4UFoBYFJJSB vNQnMOzzGoxw/PyCeFhwMHq4srD/NDIZf7Fk5L2HW7IkYSNVhDv93+SNS+Xc/o1L zQg6G8h4P51X7NAP+9t6iQ6wj+GPC+FSoI+ltquyMae7NThXvTvGcuLhh2N4Kq9S ZgyejwxtW91qteq+xA/btN7kMWrqc4e7RojYUDUL8shQkl3ZCHhFSfjGNBAjz9sn m+dEfl429MuQBvQt10JD3TS4uKoeP80PlPUZhBsFWvj3ZCUy29doNhMwPDsffyeB d9Ly6bMFgWvG47aJiVqztPEV6OSNAg0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:32 2026 by rpki-client