$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa File: 8f5885ba-2023-329b-8f3a-25904f05aa70.roa (raw, json) Hash identifier: 0KtTfWgB+IX5ZAiI9XVgBCRt13z7aE9c3ie6/Zzpg0Q= Subject key identifier: 7B:B7:E9:5E:14:73:73:E3:81:34:34:FE:C9:05:50:75:67:E0:F0:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E044A5D4D345F456875B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.217.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:44:a5:d4:d3:45:f4:56:87:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=affa3fd1-4116-43a7-afda-fa7f491838c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:61:2a:78:fa:b5:19:69:2d:84:cb:43:2e: cc:fe:66:a5:af:b4:f6:04:40:aa:cb:42:7e:5f:10: 2e:07:97:8a:16:5c:d4:43:ba:67:4e:de:b0:4f:a0: 55:8a:e8:6c:f6:b6:4f:eb:72:9e:1a:3b:fb:56:6e: ca:4a:9d:8b:93:07:cc:62:e0:a1:b3:73:7d:f1:67: 3a:67:41:8a:66:b7:86:60:86:8c:c2:c7:e0:73:ef: 21:28:e8:52:aa:27:0a:0a:99:7b:4a:79:dd:c4:15: 4a:eb:8c:4b:b0:83:16:b6:12:fd:a9:36:82:0d:68: a9:99:d0:e6:92:60:aa:36:53:4d:0b:b8:89:a1:fb: cb:97:67:aa:4b:4a:30:bb:98:ca:84:a8:94:45:17: 83:0a:0b:5d:41:89:6e:5c:27:08:3c:99:e4:aa:52: 9f:39:05:c3:7a:b6:3c:76:40:02:78:36:8d:d8:a1: e3:3a:3a:f9:14:3d:bc:21:a4:64:e6:51:8e:52:22: bc:3f:21:09:9b:e3:63:39:a9:42:2a:da:97:8a:cc: 80:ac:e9:39:dc:dc:bb:73:e5:5c:73:53:2c:6b:51: 9e:37:9c:9e:ed:70:e8:30:c1:84:8a:37:5b:01:2a: 3c:ce:03:8b:31:58:3e:ea:9b:20:f8:36:77:2c:42: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B7:E9:5E:14:73:73:E3:81:34:34:FE:C9:05:50:75:67:E0:F0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2b:34:ea:5f:b4:24:fd:51:bf:3f:03:ac:9e:9e:19:62:8b: 4d:0a:5c:44:8a:8b:b0:62:7d:12:67:cd:56:d7:c8:5f:08:2b: f2:04:d4:38:a5:21:e1:66:37:53:94:40:f3:1d:90:fe:6c:6a: f7:47:ee:f5:0c:1f:bf:9e:a6:39:fb:74:b0:7b:a2:f0:80:d0: b1:db:db:3a:53:9a:6e:67:96:8c:9d:2b:15:a5:77:4d:ff:e7: 91:ed:65:9e:fb:55:6a:27:b3:c3:46:4e:a9:af:44:58:56:a6: dd:23:3d:23:35:7e:7a:c5:ba:32:0d:29:f6:c0:3a:60:d5:ab: 65:10:9f:39:d3:1e:02:d8:2e:7d:96:de:a0:85:0e:01:9e:78: 1d:fe:89:7c:e6:f8:01:71:6e:7b:cc:23:49:2a:96:05:74:7f: 71:dc:67:b9:d0:99:87:2d:16:a6:95:7d:b2:50:e2:28:16:b3: c9:4a:97:49:fe:3a:f0:89:f4:80:44:67:3f:e5:f4:10:4f:f3: a3:66:29:d5:87:5f:e4:57:7a:2a:53:bb:9a:2e:5a:32:eb:b7: e4:ec:b1:b8:1d:5f:b5:d2:a1:7e:a6:0c:97:84:9b:89:02:b4: 10:1f:32:53:65:5c:6d:ec:dc:43:23:c6:f1:b1:56:dd:09:88: 72:a4:08:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ESl1NNF9FaHWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWZmYTNmZDEtNDExNi00M2E3LWFmZGEtZmE3ZjQ5MTgzOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwVhKnj6tRlpLYTLQy7M/malr7T2BECqy0J+ XxAuB5eKFlzUQ7pnTt6wT6BViuhs9rZP63KeGjv7Vm7KSp2LkwfMYuChs3N98Wc6 Z0GKZreGYIaMwsfgc+8hKOhSqicKCpl7SnndxBVK64xLsIMWthL9qTaCDWipmdDm kmCqNlNNC7iJofvLl2eqS0owu5jKhKiURReDCgtdQYluXCcIPJnkqlKfOQXDerY8 dkACeDaN2KHjOjr5FD28IaRk5lGOUiK8PyEJm+NjOalCKtqXisyArOk53Ny7c+Vc c1Msa1GeN5ye7XDoMMGEijdbASo8zgOLMVg+6psg+DZ3LEK9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu36V4Uc3PjgTQ0/skFUHVn4PBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY1ODg1YmEtMjAyMy0z MjliLThmM2EtMjU5MDRmMDVhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNk/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4rNOpftCT9Ub8/A6yenhlii00KXESKi7BifRJnzVbXyF8IK/IE1Dil IeFmN1OUQPMdkP5savdH7vUMH7+epjn7dLB7ovCA0LHb2zpTmm5nloydKxWld03/ 55HtZZ77VWons8NGTqmvRFhWpt0jPSM1fnrFujINKfbAOmDVq2UQnznTHgLYLn2W 3qCFDgGeeB3+iXzm+AFxbnvMI0kqlgV0f3HcZ7nQmYctFqaVfbJQ4igWs8lKl0n+ OvCJ9IBEZz/l9BBP86NmKdWHX+RXeipTu5ouWjLrt+TssbgdX7XSoX6mDJeEm4kC tBAfMlNlXG3s3EMjxvGxVt0JiHKkCHY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:21 2026 by rpki-client