$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa File: d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa (raw, json) Hash identifier: 69C4IAfgYPMvx9J+tU59TcEQHTGk5Nkwd/CPhLDR4KI= Subject key identifier: F6:86:1E:52:41:96:11:F9:EE:14:39:BC:3F:E9:09:D5:F7:AC:26:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03331CC96EAF10097C580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:33:31:cc:96:ea:f1:00:97:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0c505c7a-a407-4e40-a03d-b84620645559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:d2:3a:4c:15:e7:ec:e1:0a:ac:4f:7a:ff: 92:f4:0e:ac:76:d4:69:bb:4a:06:d8:39:9a:61:d1: 0c:c3:bc:a2:9b:79:8e:77:8a:94:0a:1a:f1:a2:cf: 53:bd:0a:96:06:1b:d7:d3:d9:f1:9c:9c:b2:95:14: c2:ba:c5:54:2e:53:18:52:77:88:1e:6b:6d:eb:e2: 61:65:15:1b:d7:61:89:eb:1b:4b:b0:33:f9:14:ba: 6f:ee:8f:41:14:59:1c:fb:63:03:15:63:60:4b:7a: 70:ae:dd:0e:7c:a8:a4:bb:31:e6:91:87:97:6a:b8: 6b:b7:fc:c0:5c:41:09:54:3b:31:9a:92:4b:4c:ef: c6:fb:46:8d:64:e0:11:2e:97:36:19:31:26:75:af: 27:e6:d6:c2:d9:bf:01:81:97:20:07:57:51:e6:d0: db:bd:7e:d0:d1:5c:c1:7c:28:63:9a:ef:cf:4c:3f: 75:0b:de:fb:94:48:d7:93:8b:69:e0:a7:35:8d:b5: f9:ab:93:e3:fb:15:ad:6a:c9:75:f8:e3:2c:98:49: 16:ef:19:8b:9c:e5:76:44:d5:c9:01:b0:2e:59:6d: 83:86:11:17:7a:17:1e:e8:fe:52:69:99:85:0e:a7: 4b:c9:c3:ef:aa:41:d4:c9:f0:b7:63:d4:02:d7:44: 9d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:86:1E:52:41:96:11:F9:EE:14:39:BC:3F:E9:09:D5:F7:AC:26:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3e78a80-9c86-3a1a-8ee8-2c60f561d66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:08:3c:67:0c:23:c6:86:89:58:37:07:c9:fe:57:92:d6:9b: b9:be:b6:37:2e:7d:3c:d9:4a:44:c2:03:8a:78:56:09:0d:62: c9:06:7b:67:b4:d6:fd:b4:c9:3a:76:27:e7:d1:2b:ad:b4:fe: 40:72:36:56:de:fd:6e:2b:db:d6:a5:bb:78:28:70:7f:43:7a: 62:aa:3d:7d:c8:82:e4:01:45:be:28:03:b5:4e:63:bd:6b:73: f5:87:22:fb:95:2a:0a:cf:13:7c:81:9b:b7:10:3a:be:5f:0f: 52:28:dd:23:92:d8:60:f4:17:36:c1:85:5f:fa:81:e2:7f:fb: 0d:16:33:3a:02:c1:d4:6a:e4:24:b9:c3:1c:7f:0c:65:0e:57: 23:74:d8:0c:ba:f9:b1:7f:ac:4f:c3:51:6f:c6:79:25:20:f5: aa:82:49:57:33:a7:44:f2:07:78:95:30:df:46:43:b0:e7:ab: 30:18:f6:1a:d4:f2:d9:cd:86:01:f1:43:5f:ae:98:41:2a:9f: 0b:44:1a:96:77:07:53:73:e4:4c:07:40:d2:f3:ab:37:a5:eb: e8:79:2e:0b:cd:6d:d8:48:ed:55:42:e8:de:f4:a6:c1:f4:17: 26:ce:e5:7e:7f:d9:ae:76:52:ce:57:31:ef:8e:0b:a9:07:28: 59:7a:4b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DMxzJbq8QCXxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGM1MDVjN2EtYTQwNy00ZTQwLWEwM2QtYjg0NjIwNjQ1NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyvSOkwV5+zhCqxPev+S9A6sdtRpu0oG2Dma YdEMw7yim3mOd4qUChrxos9TvQqWBhvX09nxnJyylRTCusVULlMYUneIHmtt6+Jh ZRUb12GJ6xtLsDP5FLpv7o9BFFkc+2MDFWNgS3pwrt0OfKikuzHmkYeXarhrt/zA XEEJVDsxmpJLTO/G+0aNZOARLpc2GTEmda8n5tbC2b8BgZcgB1dR5tDbvX7Q0VzB fChjmu/PTD91C977lEjXk4tp4Kc1jbX5q5Pj+xWtasl1+OMsmEkW7xmLnOV2RNXJ AbAuWW2DhhEXehce6P5SaZmFDqdLycPvqkHUyfC3Y9QC10SdRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaGHlJBlhH57hQ5vD/pCdX3rCbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDNlNzhhODAtOWM4Ni0z YTFhLThlZTgtMmM2MGY1NjFkNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQIPGcMI8aGiVg3B8n+V5LWm7m+tjcufTzZSkTCA4p4VgkNYskGe2e0 1v20yTp2J+fRK620/kByNlbe/W4r29alu3gocH9DemKqPX3IguQBRb4oA7VOY71r c/WHIvuVKgrPE3yBm7cQOr5fD1Io3SOS2GD0FzbBhV/6geJ/+w0WMzoCwdRq5CS5 wxx/DGUOVyN02Ay6+bF/rE/DUW/GeSUg9aqCSVczp0TyB3iVMN9GQ7DnqzAY9hrU 8tnNhgHxQ1+umEEqnwtEGpZ3B1Nz5EwHQNLzqzel6+h5LgvNbdhI7VVC6N70psH0 FybO5X5/2a52Us5XMe+OC6kHKFl6SxA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:06 2026 by rpki-client