$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json) Hash identifier: ZUPIF3Wwvyb+qp3AF521hKv4KdrjDny4xgaFS50sL3E= Subject key identifier: C7:75:C9:9A:D3:AF:DE:84:79:3C:55:F2:E5:41:BA:03:F3:BA:BC:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04B284031221A95AC9B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4b:28:40:31:22:1a:95:ac:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=db36a964-2e63-4518-88a4-1f52c06abdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:8a:1a:0b:b1:bb:d9:be:65:2d:c5:93:75: 14:5d:30:03:c9:26:2c:8a:62:ed:11:b3:7c:ab:9f: 6c:43:b8:c8:74:99:e8:66:d1:e4:53:45:89:15:2e: 4e:bd:39:60:21:10:73:f3:4a:0c:33:82:66:a9:09: 89:c1:f0:7c:98:34:44:00:cb:8f:41:0a:c6:cb:7f: 60:6f:fe:f9:56:8b:0d:02:f6:3b:e6:60:14:a0:2a: 96:e0:3b:3c:8a:a0:7e:c9:7d:d6:6f:4d:bb:ca:6d: 91:70:4b:d6:79:f4:03:ee:91:0c:02:9d:64:1f:b2: 95:ab:f2:e0:c0:40:09:00:0f:fc:05:91:cf:af:95: 56:d4:6e:40:59:fa:b7:3a:0b:82:49:f2:c2:b6:97: 35:66:16:f0:91:87:43:3e:d4:04:66:5f:7b:21:68: 77:b9:df:3a:f6:0e:12:83:f8:40:ed:85:18:5c:6f: fa:fb:9f:f2:1e:f7:13:0a:4a:8e:b4:93:3e:ee:cf: 93:1e:0e:89:8a:57:f1:9c:42:12:58:f5:5f:0c:e0: 0f:df:79:9c:38:c8:cb:8b:83:83:d8:23:35:29:8c: 75:00:fb:d9:64:7d:a9:6f:52:7c:80:f5:5d:4d:49: fb:d8:18:6a:e8:b3:6c:4a:67:9a:e3:84:29:7d:3f: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:C9:9A:D3:AF:DE:84:79:3C:55:F2:E5:41:BA:03:F3:BA:BC:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b9:60:ff:11:59:91:89:80:2b:9b:82:e1:78:a6:dd:85:63: 46:62:ae:8c:6c:95:be:c9:55:e1:da:36:67:86:b7:d1:4b:46: 3b:8a:52:13:f3:fc:74:34:e2:33:82:02:9a:e1:55:70:19:f1: 2a:e8:a2:23:24:0c:0e:11:b0:cd:68:bf:aa:91:a1:0f:bf:53: cb:80:b0:ac:6e:8c:60:89:11:57:e2:05:af:ba:e4:f5:e0:d7: 3c:d5:3d:bb:ab:3f:e7:c0:02:7a:91:5b:c1:8b:e4:38:64:b7: ba:51:05:05:dd:d7:fb:43:cd:a2:18:2c:5e:2d:99:d4:70:a0: de:88:66:a7:02:66:7e:1e:fd:0c:52:91:40:2f:ad:e7:1d:61: 73:f3:c4:5b:68:b1:99:04:6f:d5:62:8a:46:28:ed:b9:eb:34: d3:02:a7:4b:b7:ad:43:9e:96:c0:c5:5c:56:23:12:99:a1:8c: 57:18:b2:95:9b:6d:9e:9c:9b:99:8a:8d:81:5b:1a:6c:ce:bd: c5:bf:c7:5b:36:b5:f8:a0:24:cf:1e:eb:e9:4d:d6:ed:7c:3d: b3:8a:67:b7:95:8c:b1:51:9b:e3:ad:7f:42:56:31:5b:c2:38: d1:54:77:73:ec:a5:34:d9:1d:6c:5b:63:85:e9:d6:23:4e:71: 46:d8:61:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EsoQDEiGpWsm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGIzNmE5NjQtMmU2My00NTE4LTg4YTQtMWY1MmMwNmFiZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZWKGguxu9m+ZS3Fk3UUXTADySYsimLtEbN8 q59sQ7jIdJnoZtHkU0WJFS5OvTlgIRBz80oMM4JmqQmJwfB8mDREAMuPQQrGy39g b/75VosNAvY75mAUoCqW4Ds8iqB+yX3Wb027ym2RcEvWefQD7pEMAp1kH7KVq/Lg wEAJAA/8BZHPr5VW1G5AWfq3OguCSfLCtpc1ZhbwkYdDPtQEZl97IWh3ud869g4S g/hA7YUYXG/6+5/yHvcTCkqOtJM+7s+THg6JilfxnEISWPVfDOAP33mcOMjLi4OD 2CM1KYx1APvZZH2pb1J8gPVdTUn72Bhq6LNsSmea44QpfT8T1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd1yZrTr96EeTxV8uVBugPzurzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzMGMyMzMtMTU5OC0z NzY2LWJkMjctMWMyNmUzMTc4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrcJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy5YP8RWZGJgCubguF4pt2FY0Ziroxslb7JVeHaNmeGt9FLRjuKUhPz /HQ04jOCAprhVXAZ8SrooiMkDA4RsM1ov6qRoQ+/U8uAsKxujGCJEVfiBa+65PXg 1zzVPburP+fAAnqRW8GL5Dhkt7pRBQXd1/tDzaIYLF4tmdRwoN6IZqcCZn4e/QxS kUAvrecdYXPzxFtosZkEb9ViikYo7bnrNNMCp0u3rUOelsDFXFYjEpmhjFcYspWb bZ6cm5mKjYFbGmzOvcW/x1s2tfigJM8e6+lN1u18PbOKZ7eVjLFRm+Otf0JWMVvC ONFUd3PspTTZHWxbY4Xp1iNOcUbYYXE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:30 2026 by rpki-client