$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa File: 8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa (raw, json) Hash identifier: KbfvB+q0tFigycaLmu1/vCtoDWfKndebNNDXt6KSggM= Subject key identifier: 57:CA:C4:60:D5:9C:6B:FF:45:BE:F9:60:F5:5B:AC:AB:CD:E4:50:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F7A62891C6BD3122D180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f7:a6:28:91:c6:bd:31:22:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a6f13be4-99be-4bfb-ba11-be7137fde140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:fd:06:3c:7a:77:bd:13:fa:9e:d3:d2:20: 1e:ce:14:a2:03:85:13:88:37:b0:ca:3a:29:9e:43: 51:6f:84:5e:c5:fe:75:43:18:ed:6f:cc:85:82:1d: 88:1a:93:87:92:34:e3:bc:fc:d8:67:42:9f:26:9d: 0a:29:ec:79:1f:f1:93:ea:9e:97:da:cc:ad:5b:71: e1:ba:2d:49:97:0f:5d:bc:44:8e:aa:33:9e:64:44: 39:6f:9a:f8:d6:78:22:6d:dd:ae:4d:12:5e:ac:79: 6f:c7:d3:2f:25:63:94:5b:29:9a:6d:20:41:9d:61: 3c:a6:cb:26:e7:8a:68:89:03:71:7b:e1:48:8c:cd: dc:0a:7c:94:0f:cc:ae:80:28:01:de:ad:73:0f:8a: cd:93:24:fd:4b:35:2b:4c:cf:e6:0e:76:a9:60:f1: 1d:8c:a2:2c:99:0a:e6:84:77:d5:a0:40:a7:30:cc: 9a:6a:73:7a:02:5f:51:24:ae:f3:df:c3:cb:5c:d0: bf:ac:37:e4:0e:6f:4f:0f:63:87:4a:a4:f4:8c:3c: ed:7b:02:aa:dc:80:5b:0a:96:19:71:8a:aa:f5:6e: 71:cd:41:12:1b:ee:31:89:c9:f5:42:36:5d:49:0a: 7e:80:27:c2:09:bc:7f:44:9b:b8:2d:67:0f:02:3f: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CA:C4:60:D5:9C:6B:FF:45:BE:F9:60:F5:5B:AC:AB:CD:E4:50:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c8:30:71:aa:9b:cb:49:58:23:14:26:7e:bd:f1:fc:85:43: c2:41:7c:44:3c:e3:4a:1b:81:46:e7:25:85:2e:78:1a:c2:da: 68:95:a5:ae:90:25:33:a1:cb:da:41:c5:e9:a0:59:28:bc:aa: 37:95:f7:eb:60:dc:fd:98:79:e5:c6:4d:d5:5a:66:0c:f9:c1: 2a:3e:0b:aa:d6:8c:b3:ba:f2:a9:94:2b:1a:2d:07:5c:d0:80: 37:ae:de:a1:6e:94:5e:ef:8d:08:e8:a9:14:e0:08:44:2a:6c: 54:40:ff:08:88:26:9d:d2:d2:79:af:0a:98:29:10:97:ac:35: 4a:09:81:ba:20:79:f9:27:3a:fe:45:13:9b:55:33:f8:cc:cc: c7:82:d5:52:70:89:ed:a3:2c:8c:05:59:7a:48:dc:0c:7d:15: f4:b9:f4:29:b5:bc:c9:43:09:e1:34:fa:52:6a:7a:de:53:58: c4:bf:b0:a4:16:4b:28:43:8a:92:12:c4:e3:8b:0e:d7:dc:52: cd:99:20:ed:b4:13:ea:5e:68:48:39:a1:fc:58:2e:0a:1d:e7: 48:ed:5c:00:68:29:a7:32:9a:3a:ab:de:b9:86:38:92:35:93: e7:a9:be:29:d1:f7:ba:92:4c:5a:ef:ff:59:bc:ab:dc:ca:82: 30:b1:2e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PemKJHGvTEi0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTZmMTNiZTQtOTliZS00YmZiLWJhMTEtYmU3MTM3ZmRlMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O39Bjx6d70T+p7T0iAezhSiA4UTiDewyjop nkNRb4Rexf51Qxjtb8yFgh2IGpOHkjTjvPzYZ0KfJp0KKex5H/GT6p6X2sytW3Hh ui1Jlw9dvESOqjOeZEQ5b5r41ngibd2uTRJerHlvx9MvJWOUWymabSBBnWE8pssm 54poiQNxe+FIjM3cCnyUD8yugCgB3q1zD4rNkyT9SzUrTM/mDnapYPEdjKIsmQrm hHfVoECnMMyaanN6Al9RJK7z38PLXNC/rDfkDm9PD2OHSqT0jDztewKq3IBbCpYZ cYqq9W5xzUESG+4xicn1QjZdSQp+gCfCCbx/RJu4LWcPAj8gUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfKxGDVnGv/Rb75YPVbrKvN5FDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGNmZTZhMjgtNGFjZS0z NjNhLThmNzctZmJmZDlmMzNkZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjIMHGqm8tJWCMUJn698fyFQ8JBfEQ840obgUbnJYUueBrC2miVpa6Q JTOhy9pBxemgWSi8qjeV9+tg3P2YeeXGTdVaZgz5wSo+C6rWjLO68qmUKxotB1zQ gDeu3qFulF7vjQjoqRTgCEQqbFRA/wiIJp3S0nmvCpgpEJesNUoJgbogefknOv5F E5tVM/jMzMeC1VJwie2jLIwFWXpI3Ax9FfS59Cm1vMlDCeE0+lJqet5TWMS/sKQW SyhDipISxOOLDtfcUs2ZIO20E+peaEg5ofxYLgod50jtXABoKacymjqr3rmGOJI1 k+epvinR97qSTFrv/1m8q9zKgjCxLmM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:06 2026 by rpki-client