$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa File: afce684f-83c8-353a-b590-2788d771b00b.roa (raw, json) Hash identifier: poG7PwR5DY6oi+adaNzJnpfmi3BeHJeiEcJET8oyGtE= Subject key identifier: 1F:04:98:94:75:BD:6C:FE:9E:F2:DF:1A:84:14:35:A1:4F:28:95:C8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D27AA38F52406275B05979180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 64.233.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:38:f5:24:06:27:5b:05:97:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=9bd949a9-9ae9-46a3-9017-7b9de0f9592f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:e4:fa:0b:5d:94:2f:3f:11:ff:5e:b9:fd: 88:7d:0f:d9:4b:66:6f:25:44:8d:02:a2:55:86:02: 58:19:15:64:32:7f:f9:91:b0:ab:39:29:4c:99:15: a7:4c:df:cc:1a:21:e6:8d:32:b9:63:2e:2f:33:20: 73:c7:fe:f6:82:13:f8:63:43:11:2b:ed:9d:6d:73: fb:09:15:a4:0f:ac:80:84:a4:95:ff:56:38:5c:8f: 73:78:be:29:2c:63:01:4f:39:95:7b:4c:e0:af:ce: 1f:e9:e9:0d:0f:fb:63:8f:04:8e:d1:c3:5c:ed:b6: 2c:6f:1d:a9:21:e5:87:fa:3e:0d:50:0c:61:97:8f: 6f:5c:d6:c6:f6:4b:84:3e:11:de:4a:54:8e:eb:6c: ed:b0:a8:d6:27:f0:a7:40:0e:57:53:65:7c:94:55: 28:11:d3:14:38:60:71:3b:3a:de:ec:89:da:53:2f: 17:c0:94:59:a2:cd:02:ef:bb:f2:0a:91:2f:f0:08: 8d:88:09:94:e4:82:72:17:18:b1:18:dc:49:00:60: e6:7e:13:a2:91:d0:f6:4a:8d:81:b2:bd:11:e9:95: 64:fe:2f:86:80:b9:a2:ed:bd:d4:16:03:b7:71:c6: 67:6d:80:f1:4a:97:68:2f:7e:5b:c8:21:d1:1d:4a: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:98:94:75:BD:6C:FE:9E:F2:DF:1A:84:14:35:A1:4F:28:95:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afce684f-83c8-353a-b590-2788d771b00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 64.233.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:49:da:bd:87:72:5c:8c:21:57:9e:85:18:09:e0:30:4f:8a: d3:49:79:1c:6b:d3:a3:76:00:8c:aa:3a:3b:85:99:c2:f6:37: af:dc:61:ad:43:e1:ff:1b:82:52:bf:74:62:a5:2e:63:8d:79: d9:40:30:5b:52:df:35:41:24:40:bd:62:54:ed:59:17:a8:0c: 85:68:49:6e:3c:13:85:d6:6a:a9:a2:73:18:78:72:e2:fe:a4: b8:09:ad:31:38:eb:e1:9b:b5:6b:1a:4b:e9:fd:f5:b0:a6:2e: 86:e9:b9:cb:ad:75:4f:67:e5:f1:c2:f2:84:e1:b7:16:f2:33: 4d:fa:54:f7:57:c3:e2:0f:b2:c1:17:b9:f9:b1:f6:48:81:6e: 34:07:2c:53:e0:b1:e8:7c:e9:6f:53:75:a8:3c:b5:2d:ec:76: 16:7a:e6:57:df:23:c6:c4:40:03:71:f2:78:d7:0b:3b:22:6a: 9f:73:4e:cf:51:2f:67:1e:c8:48:50:a5:79:a3:aa:68:d8:70: 1c:c6:a2:56:c5:bc:55:55:b3:a6:5b:27:8a:7f:37:cc:b6:24: 93:17:de:1c:0f:8d:27:ab:97:1d:77:1e:f6:e4:8f:ef:7a:b0: 8c:cf:10:d3:1f:7f:51:83:71:29:39:39:4c:e9:d4:5e:ef:e8: 0b:4b:32:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqjj1JAYnWwWXkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk OWJkOTQ5YTktOWFlOS00NmEzLTkwMTctN2I5ZGUwZjk1OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB/k+gtdlC8/Ef9euf2IfQ/ZS2ZvJUSNAqJV hgJYGRVkMn/5kbCrOSlMmRWnTN/MGiHmjTK5Yy4vMyBzx/72ghP4Y0MRK+2dbXP7 CRWkD6yAhKSV/1Y4XI9zeL4pLGMBTzmVe0zgr84f6ekND/tjjwSO0cNc7bYsbx2p IeWH+j4NUAxhl49vXNbG9kuEPhHeSlSO62ztsKjWJ/CnQA5XU2V8lFUoEdMUOGBx Ozre7InaUy8XwJRZos0C77vyCpEv8AiNiAmU5IJyFxixGNxJAGDmfhOikdD2So2B sr0R6ZVk/i+GgLmi7b3UFgO3ccZnbYDxSpdoL35byCHRHUpkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8EmJR1vWz+nvLfGoQUNaFPKJXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWZjZTY4NGYtODNjOC0z NTNhLWI1OTAtMjc4OGQ3NzFiMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxJ2r2HclyMIVeehRgJ4DBPitNJeRxr06N2AIyqOjuFmcL2N6/cYa1D 4f8bglK/dGKlLmONedlAMFtS3zVBJEC9YlTtWReoDIVoSW48E4XWaqmicxh4cuL+ pLgJrTE46+GbtWsaS+n99bCmLobpucutdU9n5fHC8oThtxbyM036VPdXw+IPssEX ufmx9kiBbjQHLFPgseh86W9Tdag8tS3sdhZ65lffI8bEQANx8njXCzsiap9zTs9R L2ceyEhQpXmjqmjYcBzGolbFvFVVs6ZbJ4p/N8y2JJMX3hwPjSerlx13Hvbkj+96 sIzPENMff1GDcSk5OUzp1F7v6AtLMiA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:18 2026 by rpki-client