$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8627cc6-7c29-3f40-9d6d-f7d8926090eb.roa File: a8627cc6-7c29-3f40-9d6d-f7d8926090eb.roa (raw, json) Hash identifier: s+DrdWXS36jSgE/y3aJYbFyXMXpR6IMuQ2WzWxq0nQg= Subject key identifier: 21:8C:2A:C1:78:82:CD:5D:9F:EC:69:20:46:7D:6D:2B:67:94:A5:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EEFBE6E32D80F5051D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8627cc6-7c29-3f40-9d6d-f7d8926090eb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ee:fb:e6:e3:2d:80:f5:05:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=475349d5-06f9-4f6c-90e7-5747d1724f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:71:28:68:58:a0:8e:5d:28:46:75:6f:7f: 8a:70:c2:97:a9:ad:30:54:44:9a:77:29:ab:6b:eb: 62:39:b4:7b:7b:ec:bd:29:7f:77:53:70:68:d9:76: 10:f2:d6:73:50:60:29:0e:39:b1:0a:50:1b:bf:30: c1:b8:03:7b:7e:43:47:bf:a6:42:08:a7:7a:2d:1c: fb:6d:bb:31:4f:d5:20:61:ee:70:e6:ec:3f:e7:1c: 55:77:05:fd:94:21:dc:ea:1b:cb:5a:22:89:42:19: 77:4f:b2:49:4e:9c:30:1d:8f:74:46:5a:78:58:3a: 1b:46:2b:9f:19:63:bc:df:7b:63:33:bf:b8:55:f2: a2:39:95:02:3a:3d:d4:21:6f:66:b3:04:6b:92:2c: f5:42:70:01:a5:38:ce:d5:33:41:59:85:b7:8e:16: 0f:9f:f3:6b:49:17:87:4e:cf:4e:bb:01:bb:3f:81: 63:0d:21:5a:f3:ac:24:17:10:b4:08:eb:39:70:88: f7:98:f9:d4:8d:e3:a5:01:9b:6b:b2:c7:63:4a:bf: a2:c1:04:f8:b9:7f:45:b8:7c:9c:48:69:7f:93:fd: 56:ef:cb:1b:c8:bb:2c:32:31:17:d3:69:16:61:4b: 72:87:f7:4d:6d:65:90:b9:39:40:c5:da:e4:ab:e4: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:2A:C1:78:82:CD:5D:9F:EC:69:20:46:7D:6D:2B:67:94:A5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8627cc6-7c29-3f40-9d6d-f7d8926090eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3e:27:49:a6:23:9b:76:bd:a6:5d:98:15:93:1d:aa:64:24: e9:dd:fb:1f:dd:06:81:8c:68:ad:dd:a3:a4:08:19:b9:97:be: 7c:67:ad:b0:57:4b:19:a6:66:6b:33:e5:da:cd:5a:66:5c:fc: d2:03:bf:39:af:6d:0d:77:c8:80:5a:35:76:8a:f2:39:4d:12: e8:11:f9:db:c7:3d:7f:4c:c8:d7:11:fb:99:ed:4e:78:2c:3c: 6e:a6:d4:6f:52:57:52:ea:e1:f2:5d:42:22:b7:a8:97:91:58: da:e3:aa:81:f6:5d:e5:ba:7f:ee:2e:7a:45:23:db:16:b2:63: ed:77:20:48:77:4b:96:ce:f8:1a:68:b3:e6:ea:2e:2e:bc:c6: 37:8a:16:e4:d2:c9:2f:96:7a:af:a4:b1:6c:e7:7a:f1:4f:91: fa:b7:76:89:7c:a5:3b:ee:2f:11:50:9f:01:7c:69:42:b8:ac: 15:f8:c4:3e:77:60:8b:2b:1a:21:5d:cd:4e:c2:23:7c:09:dc: 37:b5:da:43:a1:d0:f4:fc:75:d4:08:cf:8b:c4:7c:0e:25:0c: a1:d1:8e:c6:34:88:e8:a8:a8:fb:6e:26:25:b2:35:cd:17:4b: 04:85:82:76:fd:43:c1:87:28:34:ff:b6:45:9c:ca:49:9b:d2: 2e:f6:04:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O775uMtgPUFHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDc1MzQ5ZDUtMDZmOS00ZjZjLTkwZTctNTc0N2QxNzI0ZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI1xKGhYoI5dKEZ1b3+KcMKXqa0wVESadymr a+tiObR7e+y9KX93U3Bo2XYQ8tZzUGApDjmxClAbvzDBuAN7fkNHv6ZCCKd6LRz7 bbsxT9UgYe5w5uw/5xxVdwX9lCHc6hvLWiKJQhl3T7JJTpwwHY90Rlp4WDobRiuf GWO833tjM7+4VfKiOZUCOj3UIW9mswRrkiz1QnABpTjO1TNBWYW3jhYPn/NrSReH Ts9OuwG7P4FjDSFa86wkFxC0COs5cIj3mPnUjeOlAZtrssdjSr+iwQT4uX9FuHyc SGl/k/1W78sbyLssMjEX02kWYUtyh/dNbWWQuTlAxdrkq+QREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGMKsF4gs1dn+xpIEZ9bStnlKVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTg2MjdjYzYtN2MyOS0z ZjQwLTlkNmQtZjdkODkyNjA5MGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0+J0mmI5t2vaZdmBWTHapkJOnd+x/dBoGMaK3do6QIGbmXvnxnrbBX SxmmZmsz5drNWmZc/NIDvzmvbQ13yIBaNXaK8jlNEugR+dvHPX9MyNcR+5ntTngs PG6m1G9SV1Lq4fJdQiK3qJeRWNrjqoH2XeW6f+4uekUj2xayY+13IEh3S5bO+Bpo s+bqLi68xjeKFuTSyS+Weq+ksWznevFPkfq3dol8pTvuLxFQnwF8aUK4rBX4xD53 YIsrGiFdzU7CI3wJ3De12kOh0PT8ddQIz4vEfA4lDKHRjsY0iOioqPtuJiWyNc0X SwSFgnb9Q8GHKDT/tkWcykmb0i72BKw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:55 2026 by rpki-client