$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa File: a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa (raw, json) Hash identifier: XoH2So2fdOndBAxKJm/av/S1L/loDr9QjAEomKJzFDs= Subject key identifier: AC:17:9D:38:47:B5:9C:6E:C5:DA:3C:16:A2:B3:1D:FE:12:F3:65:4A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E031720E90A94B50E03880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:31:72:0e:90:a9:4b:50:e0:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=969df663-1d22-4a22-81d2-c5bded662dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:6b:d9:13:f9:4b:25:a8:96:ff:f9:fa:9f: 7e:97:52:ed:ed:12:f3:69:e7:08:c4:f9:85:e8:36: b9:64:e5:9b:c0:b0:ab:c5:5b:cd:82:1b:88:36:0f: e9:58:45:73:2b:47:52:63:47:f7:ec:cf:5f:16:2f: 91:d9:9c:2f:8e:71:78:55:43:28:e3:0f:e9:ab:f7: 7c:97:99:91:ad:d0:97:a5:ec:01:2e:04:18:cc:99: 45:4b:0c:5a:49:62:a5:0c:67:e7:ac:df:2d:50:75: 72:d2:9e:b2:47:aa:f4:6f:9d:9f:8c:de:80:e0:e9: a9:7b:66:9e:ac:37:68:25:d3:e6:b1:48:8a:9a:cd: ec:ac:cf:a2:0c:f9:18:f8:46:a6:58:7e:fb:5f:71: 2d:a2:e7:50:b7:84:4a:cb:f9:6e:ff:4d:0a:1b:9c: 4a:2f:54:78:5b:14:d6:59:9a:56:5e:64:9c:95:e8: 2c:c9:de:aa:c7:74:9c:fb:03:f3:d6:31:cd:93:5b: 33:c7:bc:c9:c9:a2:7e:e0:4c:de:47:88:c7:26:f6: b1:ba:d2:03:87:d1:c2:99:00:70:c0:23:9f:4f:1c: 0e:c3:ef:81:1c:ff:35:22:18:2e:a0:e4:e3:b7:3b: 12:8e:a2:49:55:34:45:76:f6:9a:b4:d2:c5:1f:9f: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:9D:38:47:B5:9C:6E:C5:DA:3C:16:A2:B3:1D:FE:12:F3:65:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3b:7d:90:34:e7:d9:b0:ab:97:47:3d:52:b8:a5:b8:e4:19: 05:9d:f5:27:47:07:25:9e:03:9b:f5:82:b6:e4:d8:e5:91:7b: 70:c6:8c:c1:23:17:79:8b:9d:d7:e3:36:00:a0:91:e8:45:4b: 68:c8:0f:e2:74:a7:44:13:4f:b1:05:46:06:5f:24:0f:18:10: d1:17:1c:e6:bd:c6:51:f9:a7:a2:d6:4a:73:4f:70:a7:6f:be: fa:4d:a3:25:e1:4c:38:90:69:93:5e:a6:2e:12:d5:78:1a:09: e2:30:60:56:b2:3a:c9:89:c6:7e:72:bd:e3:dd:91:92:d7:14: 5e:13:cc:b6:af:4c:fe:b8:10:44:13:5e:07:fe:44:58:40:5e: 9f:74:86:bc:67:4c:ab:16:e4:48:83:95:49:53:87:bf:d1:ce: c4:a3:13:6f:7f:15:3c:0e:e0:3a:45:61:db:12:0b:4c:77:bd: 80:dd:42:28:bf:59:7a:03:3a:62:ba:7f:6f:83:93:16:94:7c: f1:5f:06:92:1d:c1:8b:5a:93:ac:9d:13:a2:04:c2:be:fd:a0: 37:7f:22:c6:bf:26:5a:8b:c3:0c:5b:89:49:ce:bb:2e:33:c3: d5:fb:9c:4d:1e:31:c0:dc:85:19:8a:bb:9d:6a:20:84:86:46: f5:00:f8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DFyDpCpS1DgOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTY5ZGY2NjMtMWQyMi00YTIyLTgxZDItYzViZGVkNjYyZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibJr2RP5SyWolv/5+p9+l1Lt7RLzaecIxPmF 6Da5ZOWbwLCrxVvNghuINg/pWEVzK0dSY0f37M9fFi+R2ZwvjnF4VUMo4w/pq/d8 l5mRrdCXpewBLgQYzJlFSwxaSWKlDGfnrN8tUHVy0p6yR6r0b52fjN6A4Ompe2ae rDdoJdPmsUiKms3srM+iDPkY+EamWH77X3EtoudQt4RKy/lu/00KG5xKL1R4WxTW WZpWXmSclegsyd6qx3Sc+wPz1jHNk1szx7zJyaJ+4EzeR4jHJvaxutIDh9HCmQBw wCOfTxwOw++BHP81IhguoOTjtzsSjqJJVTRFdvaatNLFH5/wEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwXnThHtZxuxdo8FqKzHf4S82VKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTAwYmQxYTctMDJlYS0z ZTcxLWFlYWMtZjllYjZjMTU1OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw7fZA059mwq5dHPVK4pbjkGQWd9SdHByWeA5v1grbk2OWRe3DGjMEj F3mLndfjNgCgkehFS2jID+J0p0QTT7EFRgZfJA8YENEXHOa9xlH5p6LWSnNPcKdv vvpNoyXhTDiQaZNepi4S1XgaCeIwYFayOsmJxn5yvePdkZLXFF4TzLavTP64EEQT Xgf+RFhAXp90hrxnTKsW5EiDlUlTh7/RzsSjE29/FTwO4DpFYdsSC0x3vYDdQii/ WXoDOmK6f2+DkxaUfPFfBpIdwYtak6ydE6IEwr79oDd/Isa/JlqLwwxbiUnOuy4z w9X7nE0eMcDchRmKu51qIISGRvUA+Ho= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:19 2026 by rpki-client