$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa File: b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa (raw, json) Hash identifier: KJgS5YAhSu7HzsmGVscDanrTYCo1L7iRxlK+ToRnazY= Subject key identifier: C5:2B:83:60:C5:2F:42:2A:F3:02:96:A7:8D:DB:9F:C8:65:70:8E:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02F524975993227FD7D48 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2f:52:49:75:99:32:27:fd:7d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b98579e7-cb65-465f-9ab5-3c9b1da55530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:b4:d0:84:03:15:50:9d:3b:c5:a4:8f:8e: 00:ad:79:5d:ac:29:3d:7c:a8:fb:de:fc:6c:a9:8d: 66:80:d8:05:c2:88:84:84:b9:98:73:f0:c1:c3:bd: 97:de:70:d8:7d:6b:ab:f5:1e:4d:6f:18:18:2e:af: ce:f3:b6:0e:bf:9b:b8:eb:32:e6:c5:4d:93:61:dc: d2:7a:cb:7f:9b:72:e0:59:b2:73:db:1d:72:32:bd: b1:b0:51:f9:e8:b6:53:1c:ab:81:85:11:1b:b8:4c: 32:01:f0:fe:6f:a0:3f:4f:d7:fa:12:a5:e7:13:0d: 77:98:82:8b:cf:6d:4b:f7:a6:91:43:a6:79:b7:9b: b3:aa:5c:09:4d:fa:e2:b7:be:c2:20:7b:5b:d6:05: 20:7d:bb:86:3f:aa:ad:8a:bd:fb:9a:eb:ed:b1:17: dd:49:49:cc:60:76:9b:fc:15:92:c0:fe:68:97:d6: b3:c6:cb:d4:0a:10:c4:a5:d5:35:76:ee:38:a4:e5: 3e:48:83:28:83:af:fd:79:52:0a:78:c8:f3:d8:e1: 7b:08:d2:7c:45:a2:db:95:c8:79:f8:91:b1:67:de: ac:b9:b3:6d:8d:0b:f2:cc:50:9d:fe:f7:51:eb:39: f1:be:03:8e:e6:e5:90:7a:85:51:88:e3:66:ca:40: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2B:83:60:C5:2F:42:2A:F3:02:96:A7:8D:DB:9F:C8:65:70:8E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1fd15e7-ea90-36f6-ac41-687ccb187d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:99:a6:e6:21:a8:65:4d:e9:16:36:4a:1d:6c:68:b5:c6:9a: 64:47:45:9d:4c:c0:9b:07:46:bd:d8:50:5e:57:c8:c6:3b:e4: ae:ad:2b:88:7d:28:81:f3:fe:52:ae:c8:45:07:99:f5:a6:b6: ac:45:d0:81:3d:65:cd:34:87:79:5c:ae:3f:07:cf:e2:ca:af: 2d:db:24:37:e3:e5:3c:13:8f:70:30:d9:9e:b8:a6:e6:e0:86: 1b:84:ec:b9:2c:3c:d4:3d:7c:80:f3:bd:a4:35:0a:12:a8:e3: 90:9f:3d:01:e2:db:84:a8:f2:b8:f9:df:15:9d:84:bc:c2:35: 03:d0:da:aa:d1:8d:91:65:c0:f8:f1:9b:b7:be:4b:e0:df:c0: 59:a1:02:fb:40:f4:47:d5:3f:b8:c9:87:bb:f2:aa:12:ed:fd: d4:e3:53:61:76:9a:ed:9f:df:46:5b:5a:3a:2c:29:b1:62:61: b0:a0:4f:b5:25:9e:0b:30:b1:15:75:e4:dd:97:d3:2b:64:61: 7b:7d:9b:3f:46:26:29:af:11:09:42:cc:f5:39:a9:62:a7:fa: 69:0e:80:4e:0c:af:61:36:50:84:cc:1f:1e:c2:05:a9:94:42: ef:bb:d8:67:02:3c:1a:3b:4f:2e:6d:a4:aa:ec:1d:da:39:f9: 20:09:22:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C9SSXWZMif9fUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Yjk4NTc5ZTctY2I2NS00NjVmLTlhYjUtM2M5YjFkYTU1NTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16q00IQDFVCdO8Wkj44ArXldrCk9fKj73vxs qY1mgNgFwoiEhLmYc/DBw72X3nDYfWur9R5NbxgYLq/O87YOv5u46zLmxU2TYdzS est/m3LgWbJz2x1yMr2xsFH56LZTHKuBhREbuEwyAfD+b6A/T9f6EqXnEw13mIKL z21L96aRQ6Z5t5uzqlwJTfrit77CIHtb1gUgfbuGP6qtir37muvtsRfdSUnMYHab /BWSwP5ol9azxsvUChDEpdU1du44pOU+SIMog6/9eVIKeMjz2OF7CNJ8RaLblch5 +JGxZ96subNtjQvyzFCd/vdR6znxvgOO5uWQeoVRiONmykAKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUrg2DFL0Iq8wKWp43bn8hlcI5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmZDE1ZTctZWE5MC0z NmY2LWFjNDEtNjg3Y2NiMTg3ZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGZpuYhqGVN6RY2Sh1saLXGmmRHRZ1MwJsHRr3YUF5XyMY75K6tK4h9 KIHz/lKuyEUHmfWmtqxF0IE9Zc00h3lcrj8Hz+LKry3bJDfj5TwTj3Aw2Z64pubg hhuE7LksPNQ9fIDzvaQ1ChKo45CfPQHi24So8rj53xWdhLzCNQPQ2qrRjZFlwPjx m7e+S+DfwFmhAvtA9EfVP7jJh7vyqhLt/dTjU2F2mu2f30ZbWjosKbFiYbCgT7Ul ngswsRV15N2X0ytkYXt9mz9GJimvEQlCzPU5qWKn+mkOgE4Mr2E2UITMHx7CBamU Qu+72GcCPBo7Ty5tpKrsHdo5+SAJIsk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:33 2026 by rpki-client