$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa File: a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa (raw, json) Hash identifier: 56mJXIt/Zpy+CQo5Oadax6ApjcFmcIEzD8fjGujFVFE= Subject key identifier: 31:DE:83:6E:98:F3:A4:E2:FF:15:5C:B2:A4:F8:BB:61:84:1B:B9:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E2074AAC177A039C4EE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 209.85.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e2:07:4a:ac:17:7a:03:9c:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4d54f619-57b6-416b-9c9c-fe470eeff72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:aa:42:dc:f6:ba:18:eb:a4:16:ba:28:5e: f8:fb:ce:d9:76:cf:4d:ab:64:b6:9d:f9:fc:cc:10: 33:bc:b1:12:e8:23:bd:bc:93:2b:ea:08:c9:57:25: 79:af:e7:19:a6:f3:63:e1:bc:07:22:55:3f:90:db: a4:a3:7d:34:1e:77:71:27:e7:f4:f3:9c:61:69:f5: 6f:31:70:1e:08:75:db:c0:11:96:eb:4c:bd:f8:2b: df:a9:d0:2b:f4:72:ea:c0:ab:f5:c9:0d:8e:f2:6f: c9:ee:17:aa:98:85:fa:3d:f9:91:f8:07:ee:32:5e: 7f:4e:a8:e6:a8:9d:d7:87:c7:20:10:c3:12:39:70: 30:b7:ec:ea:6d:58:16:ca:a5:47:79:dc:c1:58:db: 3d:83:2e:c8:4d:24:f0:cb:65:5b:1b:fa:5d:79:6b: da:75:b8:91:98:b0:73:41:d7:9f:fd:c7:da:13:50: f7:85:ce:d7:d2:ff:c6:82:e1:1d:e7:6d:15:af:56: e3:9b:c2:88:e8:77:5e:be:2b:93:ef:d8:8b:cb:6e: 01:f7:e6:21:f1:76:5e:51:a6:53:1c:1e:cc:5b:31: 9a:dd:cd:a6:18:e2:58:9f:86:e4:06:ff:3f:49:7e: 08:71:b6:d0:3d:05:2f:16:8d:2e:3e:13:c9:9b:08: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:83:6E:98:F3:A4:E2:FF:15:5C:B2:A4:F8:BB:61:84:1B:B9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:47:4d:b8:4e:fa:ad:62:6e:8b:52:92:41:6e:cc:18:83:69: 43:66:17:b5:f7:95:5f:88:55:5f:d4:60:09:dc:dd:24:ef:11: 81:e9:68:38:5b:c7:a3:2a:b4:a8:bb:eb:74:f4:0a:5c:8a:50: f5:c1:aa:75:cb:cd:c8:c1:2a:97:ba:e5:fd:36:08:1a:7f:95: a2:14:06:64:c6:f4:18:af:19:e3:30:cd:69:e8:60:d2:3b:90: 91:29:26:c8:cd:fe:6d:59:fb:13:a9:08:c6:66:e3:3b:70:c3: 50:74:47:e1:ec:5e:95:a2:8c:83:5f:80:b8:01:89:4d:36:b7: ab:2a:ac:26:3c:c8:45:8d:36:f7:a8:ea:60:55:04:9c:88:9d: 98:b8:3b:98:8d:48:5c:fd:fa:ff:9a:3d:3b:eb:89:64:00:7f: fd:50:64:01:ad:65:f6:6c:1c:6c:48:78:75:49:c3:1c:22:39: 5f:2f:e2:73:88:b6:39:f2:34:2f:4d:bd:bb:62:1c:f7:1f:c3: 5b:a6:a9:88:9e:f0:dc:c2:61:d2:25:00:89:8f:a6:2d:00:43: a2:f2:4f:77:92:a0:93:66:84:8d:3e:0a:42:f9:7e:66:fe:64: be:86:69:c5:02:2b:20:e5:5a:57:6f:e0:6d:64:55:8b:53:3e: 81:d3:8d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OIHSqwXegOcTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGQ1NGY2MTktNTdiNi00MTZiLTljOWMtZmU0NzBlZWZmNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1iqQtz2uhjrpBa6KF74+87Zds9Nq2S2nfn8 zBAzvLES6CO9vJMr6gjJVyV5r+cZpvNj4bwHIlU/kNuko300HndxJ+f085xhafVv MXAeCHXbwBGW60y9+CvfqdAr9HLqwKv1yQ2O8m/J7heqmIX6PfmR+AfuMl5/Tqjm qJ3Xh8cgEMMSOXAwt+zqbVgWyqVHedzBWNs9gy7ITSTwy2VbG/pdeWvadbiRmLBz Qdef/cfaE1D3hc7X0v/GguEd520Vr1bjm8KI6HdeviuT79iLy24B9+Yh8XZeUaZT HB7MWzGa3c2mGOJYn4bkBv8/SX4IcbbQPQUvFo0uPhPJmwgWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHeg26Y86Ti/xVcsqT4u2GEG7mdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5NTJiYzEtZTFkMy0z M2RkLTk2ODQtOWM5YjBiOTI1YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERHTbhO+q1ibotSkkFuzBiDaUNmF7X3lV+IVV/UYAnc3STvEYHpaDhb x6MqtKi763T0ClyKUPXBqnXLzcjBKpe65f02CBp/laIUBmTG9BivGeMwzWnoYNI7 kJEpJsjN/m1Z+xOpCMZm4ztww1B0R+HsXpWijINfgLgBiU02t6sqrCY8yEWNNveo 6mBVBJyInZi4O5iNSFz9+v+aPTvriWQAf/1QZAGtZfZsHGxIeHVJwxwiOV8v4nOI tjnyNC9NvbtiHPcfw1umqYie8NzCYdIlAImPpi0AQ6LyT3eSoJNmhI0+CkL5fmb+ ZL6GacUCKyDlWldv4G1kVYtTPoHTjVg= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:50 2026 by rpki-client