$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json) Hash identifier: NZ7E/pjIiNDxfFwdDjo6fCgzmVczqgG36iKi9jAfo0U= Subject key identifier: 4E:8A:D8:50:9E:9D:51:51:6A:77:51:50:2C:BA:EC:69:A7:E7:1A:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E86ACD73E81FACACB2A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e8:6a:cd:73:e8:1f:ac:ac:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a6fefbc0-548b-4dd5-b422-91ef479966de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:6c:3f:96:07:cb:d3:06:70:2e:b6:c3:df: 80:02:e3:c1:c2:c1:b3:0a:d5:11:c6:5a:5a:c6:d7: 5b:69:dd:90:80:23:ca:6f:5f:2f:aa:9b:21:63:3d: 96:c3:c4:52:8b:72:5d:45:85:e6:2e:39:c8:10:dc: 87:a9:15:23:76:a9:55:46:db:7f:1c:7d:64:c3:ab: 49:75:7c:9c:81:f5:a7:04:c2:ac:3b:3e:fb:3c:14: 85:0c:fe:61:c6:04:f7:f1:88:95:4f:86:1d:ae:13: 3c:89:6d:3e:cc:45:d5:f6:a1:9e:41:65:04:9b:e2: fc:bd:91:4b:9c:0c:e2:1c:c9:d2:40:b3:7e:df:d1: ac:7b:f6:9f:92:28:4c:ae:f1:9f:ca:b3:06:0d:11: 6d:66:55:f2:31:d7:14:56:be:7b:10:78:44:c6:55: 61:d1:e9:b8:17:19:67:15:ed:24:57:c9:e9:ab:20: 1a:ae:ab:e1:a0:2e:7e:f6:f4:ff:7c:b0:95:67:fa: b1:26:18:ae:ad:82:4f:f7:37:f6:4d:b2:a0:24:9e: 9f:f6:cc:ae:1c:45:0d:95:b2:51:1b:f1:34:6d:e8: e5:9c:cc:a4:62:01:c8:52:54:95:13:a8:b3:f8:99: c9:57:f2:af:14:30:7e:30:bf:4b:b0:66:a9:15:e4: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8A:D8:50:9E:9D:51:51:6A:77:51:50:2C:BA:EC:69:A7:E7:1A:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:82:16:79:89:1b:53:e5:40:77:29:f7:20:74:3e:a9:8c:fe: b6:db:44:b2:50:f7:03:32:8a:a5:78:db:7b:3d:1f:78:a5:28: 91:24:4c:4d:2b:28:0d:ae:1f:2f:02:24:0e:ae:e1:a9:60:9e: b5:bc:ac:69:23:dd:13:fb:dd:c7:c9:e7:27:b3:de:96:4a:19: 26:e6:0d:c2:68:16:a9:d6:25:d2:d7:28:68:24:4b:6c:c4:c2: 4d:58:d0:ef:b1:50:e5:10:95:73:23:4a:b4:69:f5:34:7e:dc: 02:35:d4:e2:d5:5c:49:d6:76:a2:d9:c9:07:f3:5e:8e:a6:80: a1:02:f0:bc:f8:85:a6:ea:bd:cd:09:ce:45:19:69:e4:65:8f: 8d:34:e4:37:9e:b1:43:26:ea:2a:64:59:8a:6e:97:c4:0c:3f: 3b:29:fb:49:11:8f:1a:4e:de:4d:e1:7f:dc:22:1d:60:2b:74: cc:f9:33:0b:43:45:54:4c:2c:78:d5:12:a3:66:16:c7:67:84: e3:85:84:da:e1:c2:21:23:87:6a:18:bf:60:00:bb:30:04:53: b0:e6:5f:c2:19:28:ed:60:01:f4:27:11:dd:4d:17:f9:a2:b2: a7:4f:7a:bf:78:c0:58:d0:fa:13:9f:be:d5:c7:a0:0a:0f:61: e4:87:ca:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OhqzXPoH6yssqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTZmZWZiYzAtNTQ4Yi00ZGQ1LWI0MjItOTFlZjQ3OTk2NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9RsP5YHy9MGcC62w9+AAuPBwsGzCtURxlpa xtdbad2QgCPKb18vqpshYz2Ww8RSi3JdRYXmLjnIENyHqRUjdqlVRtt/HH1kw6tJ dXycgfWnBMKsOz77PBSFDP5hxgT38YiVT4YdrhM8iW0+zEXV9qGeQWUEm+L8vZFL nAziHMnSQLN+39Gse/afkihMrvGfyrMGDRFtZlXyMdcUVr57EHhExlVh0em4Fxln Fe0kV8npqyAarqvhoC5+9vT/fLCVZ/qxJhiurYJP9zf2TbKgJJ6f9syuHEUNlbJR G/E0bejlnMykYgHIUlSVE6iz+JnJV/KvFDB+ML9LsGapFeQfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6K2FCenVFRandRUCy67Gmn5xrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuCFnmJG1PlQHcp9yB0PqmM/rbbRLJQ9wMyiqV423s9H3ilKJEkTE0r KA2uHy8CJA6u4algnrW8rGkj3RP73cfJ5yez3pZKGSbmDcJoFqnWJdLXKGgkS2zE wk1Y0O+xUOUQlXMjSrRp9TR+3AI11OLVXEnWdqLZyQfzXo6mgKEC8Lz4habqvc0J zkUZaeRlj4005DeesUMm6ipkWYpul8QMPzsp+0kRjxpO3k3hf9wiHWArdMz5MwtD RVRMLHjVEqNmFsdnhOOFhNrhwiEjh2oYv2AAuzAEU7DmX8IZKO1gAfQnEd1NF/mi sqdPer94wFjQ+hOfvtXHoAoPYeSHys8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:08 2026 by rpki-client