$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa File: dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa (raw, json) Hash identifier: BAL6aj0aYrIaKnqbULZkoAMPHLzBSJTEgglDoLR/rMg= Subject key identifier: D2:F4:AF:2D:FA:3B:00:C9:25:85:D9:E1:D6:D3:EB:D7:07:1E:A7:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E09F542F42048BEB4160 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e0:9f:54:2f:42:04:8b:eb:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5ad01559-9ace-4afd-a660-bf0de363adf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:8d:14:90:bc:1c:58:11:38:2f:a1:85:9b: c8:98:aa:aa:f9:10:61:76:0c:84:c2:b7:88:c3:5d: a0:bf:86:38:a4:a2:f8:43:63:e9:df:e7:e5:d8:12: 72:7f:ce:df:57:c1:c5:33:40:5e:94:bd:b8:72:07: 33:c3:77:ba:87:71:34:52:e4:69:d0:1f:a7:12:c0: a8:02:42:d5:e5:71:58:cf:71:12:83:b8:c3:dc:15: 57:7e:9e:2c:72:7c:ab:59:f6:8a:b2:e9:28:22:26: 58:d1:00:3c:5f:8d:c2:5b:03:45:64:cf:7f:4a:83: b2:84:04:df:42:44:ba:79:a8:08:b6:64:c7:2d:7d: 14:5a:72:cd:89:40:92:a5:c3:e8:6f:fb:c8:20:3e: 2b:ee:40:9a:a0:9b:41:f4:61:2c:5e:be:4d:42:59: a2:94:bf:58:62:cc:79:b1:cb:00:ec:fd:66:6e:e8: 79:e1:8c:a5:cf:11:45:06:d3:90:27:70:4a:3b:40: 17:2c:52:56:6d:56:c1:14:f4:f5:3c:82:d5:d0:b9: ab:a1:90:00:92:35:ed:fe:d3:42:b7:6b:c2:42:cd: 92:c4:bb:4b:36:d5:ed:0d:44:92:e8:94:01:f4:71: d5:2a:f6:d6:db:aa:56:b1:73:13:8b:7b:b4:44:cf: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:AF:2D:FA:3B:00:C9:25:85:D9:E1:D6:D3:EB:D7:07:1E:A7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e5:a3:cb:51:e2:7f:39:ad:3e:13:f2:f4:7e:37:29:f2:f5: 27:c7:3b:e4:e2:42:96:a4:32:0b:7e:53:6c:bb:8e:40:7a:8f: 9f:f9:c4:71:55:71:fc:5c:48:6d:81:58:db:2b:bf:c4:48:25: b5:98:62:2d:ec:a8:c7:01:00:e7:6e:2d:f1:b5:f2:06:79:a0: f8:fc:35:22:49:57:78:dc:60:32:6a:81:37:44:a3:62:0a:5e: 7e:08:d8:a6:ac:9a:84:e8:e5:75:35:05:7f:3c:b0:a0:be:7b: ef:d5:9b:af:8c:29:07:40:f6:72:79:4d:b4:62:78:d2:e8:5d: e2:65:d4:e8:ac:21:db:66:37:bf:9e:3d:25:44:87:d2:31:4d: 3a:f2:74:2a:99:ea:80:bc:77:ac:4d:17:d9:6b:80:72:10:62: b6:af:4c:24:19:2e:b4:26:3e:7b:2a:c0:74:ed:60:19:d3:b0: 52:95:ec:48:b3:b2:54:f5:4e:f8:1f:8e:fb:1f:a5:44:6e:06: 97:0f:8e:da:06:86:54:06:00:59:6e:be:61:17:f7:7d:ac:8c: ab:fd:0a:25:12:2e:59:5b:c2:87:bc:40:6a:ed:6a:c6:80:dd: a2:a6:65:6a:c3:33:6b:46:8f:4e:bd:52:82:3c:34:fa:9a:70: 8f:32:3c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OCfVC9CBIvrQWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWFkMDE1NTktOWFjZS00YWZkLWE2NjAtYmYwZGUzNjNhZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrmNFJC8HFgROC+hhZvImKqq+RBhdgyEwreI w12gv4Y4pKL4Q2Pp3+fl2BJyf87fV8HFM0BelL24cgczw3e6h3E0UuRp0B+nEsCo AkLV5XFYz3ESg7jD3BVXfp4scnyrWfaKsukoIiZY0QA8X43CWwNFZM9/SoOyhATf QkS6eagItmTHLX0UWnLNiUCSpcPob/vIID4r7kCaoJtB9GEsXr5NQlmilL9YYsx5 scsA7P1mbuh54YylzxFFBtOQJ3BKO0AXLFJWbVbBFPT1PILV0LmroZAAkjXt/tNC t2vCQs2SxLtLNtXtDUSS6JQB9HHVKvbW26pWsXMTi3u0RM9yfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL0ry36OwDJJYXZ4dbT69cHHqcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZmMGZjZjYtM2U5NC0z ZGVmLTllNzctMjdlMDBlZmQ2YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTlo8tR4n85rT4T8vR+Nyny9SfHO+TiQpakMgt+U2y7jkB6j5/5xHFV cfxcSG2BWNsrv8RIJbWYYi3sqMcBAOduLfG18gZ5oPj8NSJJV3jcYDJqgTdEo2IK Xn4I2KasmoTo5XU1BX88sKC+e+/Vm6+MKQdA9nJ5TbRieNLoXeJl1OisIdtmN7+e PSVEh9IxTTrydCqZ6oC8d6xNF9lrgHIQYravTCQZLrQmPnsqwHTtYBnTsFKV7Eiz slT1TvgfjvsfpURuBpcPjtoGhlQGAFluvmEX932sjKv9CiUSLllbwoe8QGrtasaA 3aKmZWrDM2tGj069UoI8NPqacI8yPMM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:29 2026 by rpki-client