$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa File: 9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa (raw, json) Hash identifier: /EtDpUf9rDCQ1isABY7MP0XRhgeGyIs4hVCQfRnHRzo= Subject key identifier: 7C:B8:BA:67:2F:1D:77:EF:BE:7B:F9:AE:B0:B6:88:98:45:90:98:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0468F5914BDAB890F6880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 209.85.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:46:8f:59:14:bd:ab:89:0f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1c08400c-ac22-4c27-8820-d4044aeb371b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:5f:ed:99:3b:22:50:09:da:23:34:1d:49: c7:81:93:02:6b:f2:09:56:6b:da:d6:bb:b6:9f:25: 6a:e8:a7:9a:fd:a4:ab:90:45:74:72:09:5e:61:63: 16:d5:15:7f:90:b2:3c:c5:eb:8e:9f:b0:a3:3a:ff: d9:d2:17:d9:67:15:d8:f5:01:56:92:d8:eb:11:5d: 8a:93:2e:4a:36:8b:ae:f9:dc:70:24:a6:76:15:bb: a6:53:51:2f:c9:47:ee:12:41:94:56:01:58:62:c1: d7:da:3f:06:31:be:06:f1:3c:a8:26:fb:11:e9:3b: 38:fe:5c:0c:c5:ce:05:8d:60:4e:31:f0:0f:99:ee: 01:27:a3:7c:94:89:d6:a5:7f:6e:a1:98:76:39:5f: 31:96:35:9b:48:34:c5:0a:d5:7a:61:1c:ad:7d:9d: 48:e8:96:84:b6:fe:45:86:6f:6e:93:1b:6d:2c:22: a0:f5:0b:77:72:80:c6:f5:10:0b:fe:16:d4:52:6c: 44:d9:19:fc:b8:ca:42:ad:c2:ea:ec:a6:4b:10:a4: b0:f4:19:22:e5:a4:30:73:a8:00:ee:d4:0a:17:0e: 46:9c:4e:b6:36:c2:9f:1d:a8:40:1d:8d:5a:5b:72: 16:2f:a6:cf:0c:5e:7a:94:ed:82:03:03:93:a9:21: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B8:BA:67:2F:1D:77:EF:BE:7B:F9:AE:B0:B6:88:98:45:90:98:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5d:7a:1a:ab:96:c1:74:60:6a:c3:e8:0b:a6:b6:f2:fe:27: f5:ac:a7:c3:87:c9:4c:15:99:73:e3:1e:a5:80:c9:3d:f1:00: 6b:e3:f1:04:eb:ce:5e:82:ee:2f:61:42:c6:f9:52:d3:82:81: a9:98:1b:37:81:ef:1a:31:6c:e0:25:3c:2b:94:0a:b1:ff:c5: ea:5b:57:23:a6:c3:2a:c8:82:13:67:90:9c:fb:13:e1:26:3f: 45:67:6c:f2:b6:f1:a4:13:6f:59:f1:8b:53:99:dc:87:e7:90: b6:4f:94:f4:b5:75:cf:8d:cb:da:a9:02:8a:3b:e3:45:d4:bd: 36:f3:b2:17:ba:2f:6f:56:58:c8:17:b8:20:73:f2:7e:27:66: 17:c8:f8:2b:0c:48:92:17:be:8e:d2:12:75:75:19:2d:36:8d: 63:83:32:d1:27:75:b9:f6:15:cb:a8:19:97:73:ee:30:10:8e: f9:6e:ae:db:70:2d:8a:23:c5:f4:e8:69:61:55:b9:9d:e3:35: cc:47:6d:cb:d7:73:99:38:d1:b8:db:70:a3:d4:cc:f1:19:92: b0:4d:22:91:37:bf:2c:6c:5f:3a:5f:64:43:ca:e9:4b:8b:38: 6d:65:55:a1:ac:63:81:4f:a8:b3:a7:d0:44:55:d2:af:cf:c4: d7:e4:dd:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EaPWRS9q4kPaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWMwODQwMGMtYWMyMi00YzI3LTg4MjAtZDQwNDRhZWIzNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Jf7Zk7IlAJ2iM0HUnHgZMCa/IJVmva1ru2 nyVq6Kea/aSrkEV0cgleYWMW1RV/kLI8xeuOn7CjOv/Z0hfZZxXY9QFWktjrEV2K ky5KNouu+dxwJKZ2FbumU1EvyUfuEkGUVgFYYsHX2j8GMb4G8TyoJvsR6Ts4/lwM xc4FjWBOMfAPme4BJ6N8lInWpX9uoZh2OV8xljWbSDTFCtV6YRytfZ1I6JaEtv5F hm9ukxttLCKg9Qt3coDG9RAL/hbUUmxE2Rn8uMpCrcLq7KZLEKSw9Bki5aQwc6gA 7tQKFw5GnE62NsKfHahAHY1aW3IWL6bPDF56lO2CAwOTqSF/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy4umcvHXfvvnv5rrC2iJhFkJh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyMThiZmUtYWI1MS0z YzY0LWFiNmItYmE2NDNmYmFjMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADldehqrlsF0YGrD6AumtvL+J/Wsp8OHyUwVmXPjHqWAyT3xAGvj8QTr zl6C7i9hQsb5UtOCgamYGzeB7xoxbOAlPCuUCrH/xepbVyOmwyrIghNnkJz7E+Em P0VnbPK28aQTb1nxi1OZ3IfnkLZPlPS1dc+Ny9qpAoo740XUvTbzshe6L29WWMgX uCBz8n4nZhfI+CsMSJIXvo7SEnV1GS02jWODMtEndbn2FcuoGZdz7jAQjvlurttw LYojxfToaWFVuZ3jNcxHbcvXc5k40bjbcKPUzPEZkrBNIpE3vyxsXzpfZEPK6UuL OG1lVaGsY4FPqLOn0ERV0q/PxNfk3V0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:52 2026 by rpki-client