$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa File: a67282dc-ef4b-3424-b14a-d7cc85f54925.roa (raw, json) Hash identifier: Mbwq2i/XR8bVb7UgvVrsSXFkyKjI0dwLSTiEeqn96R0= Subject key identifier: 38:67:4F:A6:C3:18:B6:19:FA:82:7E:F2:6F:9C:65:7E:9A:C5:BE:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E043C191FA7A5D8C78AC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:43:c1:91:fa:7a:5d:8c:78:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a42a89fb-d04a-42c1-895c-83170e9cbc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:41:c0:4a:99:f7:b7:4e:73:9a:5e:c6:36: 36:81:03:f5:9b:31:a5:cc:c0:c9:af:3c:a3:43:23: db:bd:a9:5e:1b:dd:0e:28:57:85:9a:df:e2:a1:c4: fe:a2:76:ca:bc:35:06:68:78:da:62:54:ff:94:b1: 09:fe:64:4f:00:4f:a8:61:7b:0f:ba:01:69:d0:01: 51:5c:7e:41:c1:0e:aa:26:99:e4:02:ba:d7:b2:a5: 15:a3:2e:d5:56:a8:f8:68:d3:56:58:ea:40:7b:e9: b8:76:c9:78:74:c5:e3:06:51:2d:d0:ee:27:13:f8: 20:a8:0e:6e:e3:e5:5b:ac:a9:fd:17:cf:6b:62:b0: 27:76:48:b6:82:a7:6d:8e:17:d4:95:f2:e7:14:f9: 6f:28:af:89:fe:3b:07:9f:6e:03:95:27:ac:7a:4b: c8:c5:c5:c9:85:1a:e7:38:14:57:68:82:e1:4f:f6: 6e:f8:b4:db:ca:78:58:9f:3f:3a:38:ab:4b:12:52: 21:00:ce:28:81:c9:67:ce:a7:66:55:1f:9a:ad:7f: de:f3:45:fb:af:89:38:12:8d:f9:54:e0:12:8d:d5: c6:43:e8:7b:75:e5:11:57:30:1c:ed:50:72:8d:56: 57:55:8b:56:45:df:eb:10:d9:6c:8a:78:dc:c9:d9: a1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:4F:A6:C3:18:B6:19:FA:82:7E:F2:6F:9C:65:7E:9A:C5:BE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a67282dc-ef4b-3424-b14a-d7cc85f54925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:98:00:c1:71:a4:61:a3:6b:33:50:ce:b0:cd:b3:5d:86:bb: 87:a8:55:07:95:88:7f:eb:ad:83:a4:31:60:dc:db:dc:89:92: 27:b7:99:e8:a3:37:66:e5:ac:27:27:fe:fc:8f:3a:09:9f:a6: ad:3f:bc:23:cd:3e:b3:53:19:6d:25:5c:47:1d:64:eb:10:f1: d0:f1:a6:54:3a:0e:99:e3:39:13:c2:9a:e0:cb:d7:32:53:a7: fc:d5:e3:0f:e3:92:a3:33:71:21:9f:e9:be:77:46:e8:cd:32: 63:1c:74:99:6d:03:8a:1e:a1:ab:06:e5:08:02:30:30:e5:ca: 2c:99:47:c4:17:c0:39:3a:63:e8:8a:3f:49:06:d4:49:c2:c8: cd:41:9c:1b:fb:17:37:06:57:c5:22:3d:2a:a8:42:5e:18:2c: 55:fd:d9:15:6c:d2:e4:9c:c7:61:5c:4d:aa:98:19:00:fd:2f: ad:f1:db:81:1a:8f:69:5d:0a:a9:02:eb:1f:e9:a3:80:c5:95: bd:91:42:35:2c:c9:f5:f0:b9:11:e6:4c:a6:a7:0f:17:30:70: 1f:91:88:01:eb:65:66:7f:64:e4:0d:01:5b:39:76:1b:0f:f4: 76:35:28:bb:f2:33:c2:33:01:2e:96:ed:6a:97:3a:d6:bd:05: 21:63:87:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EPBkfp6XYx4rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTQyYTg5ZmItZDA0YS00MmMxLTg5NWMtODMxNzBlOWNiYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpBBwEqZ97dOc5pexjY2gQP1mzGlzMDJrzyj QyPbvaleG90OKFeFmt/iocT+onbKvDUGaHjaYlT/lLEJ/mRPAE+oYXsPugFp0AFR XH5BwQ6qJpnkArrXsqUVoy7VVqj4aNNWWOpAe+m4dsl4dMXjBlEt0O4nE/ggqA5u 4+VbrKn9F89rYrAndki2gqdtjhfUlfLnFPlvKK+J/jsHn24DlSesekvIxcXJhRrn OBRXaILhT/Zu+LTbynhYnz86OKtLElIhAM4ogclnzqdmVR+arX/e80X7r4k4Eo35 VOASjdXGQ+h7deURVzAc7VByjVZXVYtWRd/rENlsinjcydmhIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhnT6bDGLYZ+oJ+8m+cZX6axb41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTY3MjgyZGMtZWY0Yi0z NDI0LWIxNGEtZDdjYzg1ZjU0OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuYAMFxpGGjazNQzrDNs12Gu4eoVQeViH/rrYOkMWDc29yJkie3meij N2blrCcn/vyPOgmfpq0/vCPNPrNTGW0lXEcdZOsQ8dDxplQ6DpnjORPCmuDL1zJT p/zV4w/jkqMzcSGf6b53RujNMmMcdJltA4oeoasG5QgCMDDlyiyZR8QXwDk6Y+iK P0kG1EnCyM1BnBv7FzcGV8UiPSqoQl4YLFX92RVs0uScx2FcTaqYGQD9L63x24Ea j2ldCqkC6x/po4DFlb2RQjUsyfXwuRHmTKanDxcwcB+RiAHrZWZ/ZOQNAVs5dhsP 9HY1KLvyM8IzAS6W7WqXOta9BSFjh0Y= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:39 2026 by rpki-client