$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa File: ade63972-a7fa-3aa6-9cdc-7f422468c453.roa (raw, json) Hash identifier: H1plE+SJo2y6k7aJOqMSn0sxG/KlqNgMWlG5R5vNVi8= Subject key identifier: 8B:BF:FF:D9:01:08:24:D4:5C:CC:55:8D:4B:D0:7E:81:C5:56:81:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E4D7C2594521FB5AB880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e4:d7:c2:59:45:21:fb:5a:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5cb80552-6004-4f74-a53e-39c82ddd5730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:43:71:68:18:8d:52:dc:c9:4b:3f:e2:43: f9:e1:04:6e:3c:9a:00:a8:ae:cc:18:cf:06:3f:94: 6f:10:16:3a:ca:c5:1d:88:f2:3e:18:32:4f:8a:33: 9d:34:9e:e5:1a:5b:c9:92:5a:91:3a:e2:cc:47:1b: 7a:bc:6b:1f:64:5d:10:00:24:a7:8d:40:5c:ba:28: 4f:99:c7:25:39:2e:b3:0f:76:71:49:f4:ca:6e:18: 15:4f:73:15:70:8e:b9:cf:fe:4c:bd:ba:16:d5:83: 16:ab:a2:51:ec:20:74:b9:a3:83:34:49:4b:e1:e7: 3e:e9:07:69:02:76:08:e2:8a:10:09:9e:91:da:ee: 0b:05:50:c3:c7:c4:09:b9:0d:18:d7:59:a5:75:2c: 63:be:a2:c8:89:be:23:52:2e:bb:39:58:74:6b:df: aa:29:21:11:0f:6f:b7:0a:34:0e:63:cf:d2:35:99: 18:75:a7:d8:92:81:a4:cb:fc:37:fb:f0:20:b8:da: 69:37:df:8c:ef:93:73:7a:0e:aa:93:00:5e:c8:4b: 77:76:01:cf:96:79:c3:e4:5d:ef:4a:92:6c:ab:f3: 6d:72:0f:88:fa:f0:34:72:57:c6:99:15:9b:96:8b: 4d:e5:53:9c:85:3b:0c:bf:b4:13:48:b7:74:dc:e9: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BF:FF:D9:01:08:24:D4:5C:CC:55:8D:4B:D0:7E:81:C5:56:81:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5b:e3:b5:65:00:58:b5:b2:18:2b:c3:55:0d:14:9c:0d:c8: ff:8a:0a:11:ef:28:13:61:8d:6b:3f:7e:87:22:98:61:71:83: 62:ba:35:2d:07:50:86:6f:f7:d3:8a:16:94:e3:ad:ef:cc:16: 88:06:34:1d:a5:96:9a:bf:9d:26:92:c2:ac:f1:78:04:2e:3e: 9a:b5:5a:7e:a2:f8:22:11:93:31:1f:69:16:ad:a0:af:b7:1f: 5a:a2:3a:f4:5d:2e:31:cc:61:bc:89:3c:8a:95:fe:1b:82:fc: 03:81:20:13:05:04:c6:26:e5:92:95:c3:e3:d8:a7:87:20:f4: e6:15:23:7e:76:ad:19:69:f0:1a:d3:f5:0e:1d:70:38:ac:c1: ad:e8:cc:6d:f3:ba:5d:1c:d3:34:25:97:11:2a:87:69:e0:0b: ae:42:8b:4e:de:1d:37:b0:52:0b:68:2d:39:5f:55:ff:9c:9d: 80:4c:9e:28:a6:00:d6:14:ef:08:d2:c1:85:fd:f0:e1:8d:97: 05:38:52:cf:fa:c1:8d:2a:be:98:64:95:a0:a5:c8:ec:eb:21: 32:25:2f:dd:d3:27:b1:61:d7:5f:28:2a:3e:0b:90:f6:e4:4a: e7:8a:9e:da:cc:25:c6:f8:94:9b:da:a3:9b:b6:35:b7:7c:05: e1:07:36:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OTXwllFIftauIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWNiODA1NTItNjAwNC00Zjc0LWE1M2UtMzljODJkZGQ1NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvxDcWgYjVLcyUs/4kP54QRuPJoAqK7MGM8G P5RvEBY6ysUdiPI+GDJPijOdNJ7lGlvJklqROuLMRxt6vGsfZF0QACSnjUBcuihP mcclOS6zD3ZxSfTKbhgVT3MVcI65z/5MvboW1YMWq6JR7CB0uaODNElL4ec+6Qdp AnYI4ooQCZ6R2u4LBVDDx8QJuQ0Y11mldSxjvqLIib4jUi67OVh0a9+qKSERD2+3 CjQOY8/SNZkYdafYkoGky/w3+/AguNppN9+M75Nzeg6qkwBeyEt3dgHPlnnD5F3v SpJsq/Ntcg+I+vA0clfGmRWblotN5VOchTsMv7QTSLd03On2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu//9kBCCTUXMxVjUvQfoHFVoEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWRlNjM5NzItYTdmYS0z YWE2LTljZGMtN2Y0MjI0NjhjNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVb47VlAFi1shgrw1UNFJwNyP+KChHvKBNhjWs/focimGFxg2K6NS0H UIZv99OKFpTjre/MFogGNB2llpq/nSaSwqzxeAQuPpq1Wn6i+CIRkzEfaRatoK+3 H1qiOvRdLjHMYbyJPIqV/huC/AOBIBMFBMYm5ZKVw+PYp4cg9OYVI352rRlp8BrT 9Q4dcDiswa3ozG3zul0c0zQllxEqh2ngC65Ci07eHTewUgtoLTlfVf+cnYBMniim ANYU7wjSwYX98OGNlwU4Us/6wY0qvphklaClyOzrITIlL93TJ7Fh118oKj4LkPbk SueKntrMJcb4lJvao5u2Nbd8BeEHNok= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:14 2026 by rpki-client