$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa File: bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa (raw, json) Hash identifier: K+sgi6+mo7tQX+u/kCRlmHTP95dFuSr8U/4uSxCZbTQ= Subject key identifier: 42:69:84:2C:8F:AB:CD:16:97:9F:EE:3F:90:C9:D2:12:BF:92:1F:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03E9902261E5D72250140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 173.194.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3e:99:02:26:1e:5d:72:25:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b65c051b-5337-47a3-afbd-6109bdf4d0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:22:0a:2d:96:4c:ee:a1:8f:9e:26:ce:17: 87:bf:14:3d:40:88:04:03:db:11:e7:ec:42:8f:9a: 21:bc:f3:ab:99:ff:27:3f:c6:87:b8:3a:8f:e7:0c: 0b:cd:60:30:f2:33:32:f7:de:ad:b2:aa:f6:d9:1d: 99:49:f9:25:a8:69:e8:81:db:61:7d:53:c4:96:da: e5:fd:6e:76:d2:c2:d7:0a:44:ac:c4:01:87:ca:f4: f3:d7:dd:55:48:d8:33:ef:0b:40:9d:2a:ff:e8:d8: 8e:05:de:c1:b9:94:97:62:05:49:ee:11:7f:90:0c: d6:51:32:f0:48:90:fa:45:fc:89:92:c8:75:c2:b7: 21:67:aa:6a:34:01:53:66:50:20:f1:6d:44:6a:f7: f9:e9:1c:8b:30:22:4d:96:41:31:d9:05:35:f3:f2: 45:b7:c5:ed:6c:6e:d6:f5:e6:5d:6f:e7:ed:8a:bb: b6:4b:a7:4d:df:ea:f3:02:91:21:d1:1a:7a:db:bf: dc:6d:ba:9b:70:07:97:62:67:fa:c4:a8:29:af:33: a7:0f:25:f6:e9:75:4b:1d:fd:e0:7f:84:ca:be:b4: 13:9a:f3:e7:6d:df:2b:60:7a:77:be:e6:38:c1:32: 94:04:1a:14:d1:84:5b:84:f6:b9:29:cf:bf:ff:ff: 31:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:69:84:2C:8F:AB:CD:16:97:9F:EE:3F:90:C9:D2:12:BF:92:1F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5c:80:92:45:49:c0:77:39:57:1b:d5:6c:f7:9d:20:59:3f: 4f:f1:a9:31:d7:f8:3b:d6:57:72:5e:29:f6:5b:d8:ab:f1:bc: 2a:b6:0a:b8:3d:2c:45:8c:45:10:51:30:75:7f:e2:6b:3f:f3: 0d:14:49:83:a3:67:4f:a6:5f:2b:24:71:90:dc:bd:31:f4:4b: 40:21:b4:9c:cc:73:05:d5:21:bb:4e:aa:0f:d5:40:c3:a9:83: 11:3c:9d:2c:05:89:7b:33:c3:be:11:c4:1a:98:5a:63:01:96: be:10:61:35:b5:5d:9c:d3:3e:1c:c2:fa:1d:fa:cd:49:91:42: ea:e1:60:80:27:30:7d:1d:13:69:6b:a0:0c:2e:a0:d1:41:b4: ba:df:28:57:64:92:5d:ac:95:2a:20:12:5c:42:a7:49:03:d6: 53:11:13:90:ff:81:ea:25:af:d2:3d:9d:3e:7a:c3:79:21:3c: 95:f8:de:89:d5:75:83:0f:9b:5a:07:67:5c:f9:73:a8:88:7c: 78:50:6c:af:10:ba:cf:c5:a7:f0:6b:40:29:ed:d9:9a:0f:45: f7:c4:ae:fc:8a:b6:7f:f3:25:5f:ad:72:1e:d6:01:a1:96:bc: 72:8a:51:37:ab:01:c9:39:2f:d6:5b:90:57:f6:bb:46:d2:3d: 0a:3d:44:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D6ZAiYeXXIlAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjY1YzA1MWItNTMzNy00N2EzLWFmYmQtNjEwOWJkZjRkMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi4iCi2WTO6hj54mzheHvxQ9QIgEA9sR5+xC j5ohvPOrmf8nP8aHuDqP5wwLzWAw8jMy996tsqr22R2ZSfklqGnogdthfVPEltrl /W520sLXCkSsxAGHyvTz191VSNgz7wtAnSr/6NiOBd7BuZSXYgVJ7hF/kAzWUTLw SJD6RfyJksh1wrchZ6pqNAFTZlAg8W1Eavf56RyLMCJNlkEx2QU18/JFt8XtbG7W 9eZdb+ftiru2S6dN3+rzApEh0Rp627/cbbqbcAeXYmf6xKgprzOnDyX26XVLHf3g f4TKvrQTmvPnbd8rYHp3vuY4wTKUBBoU0YRbhPa5Kc+///8xgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJphCyPq80Wl5/uP5DJ0hK/kh8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmQ3ZDBiZGItYTE4My0z YTk1LTlhM2ItNjA3ODc0MjNhYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpcgJJFScB3OVcb1Wz3nSBZP0/xqTHX+DvWV3JeKfZb2KvxvCq2Crg9 LEWMRRBRMHV/4ms/8w0USYOjZ0+mXyskcZDcvTH0S0AhtJzMcwXVIbtOqg/VQMOp gxE8nSwFiXszw74RxBqYWmMBlr4QYTW1XZzTPhzC+h36zUmRQurhYIAnMH0dE2lr oAwuoNFBtLrfKFdkkl2slSogElxCp0kD1lMRE5D/geolr9I9nT56w3khPJX43onV dYMPm1oHZ1z5c6iIfHhQbK8Qus/Fp/BrQCnt2ZoPRffErvyKtn/zJV+tch7WAaGW vHKKUTerAck5L9ZbkFf2u0bSPQo9RNc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:08 2026 by rpki-client