$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa File: e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa (raw, json) Hash identifier: JjlwZ3qRUifvfELTKs2ZC6r2wSrjwV2YB42NG9thZw0= Subject key identifier: D9:D6:82:F4:F1:CC:3F:1C:2C:6C:96:1F:BA:EB:C4:20:F3:0A:46:BB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0427E793DE7CEF67D4260 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:42:7e:79:3d:e7:ce:f6:7d:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=49373408-bb91-44b7-ac5b-c1ebe1774c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9e:e1:af:a0:f7:54:dc:58:3e:64:a4:42:6b: b4:f5:5a:43:b0:3b:25:d8:fc:94:b1:02:98:ee:b5: 29:f0:d1:a6:07:24:5a:b6:c1:07:96:ca:aa:c5:85: 4f:7f:dd:ca:35:43:f8:c5:97:05:34:40:99:d7:ae: 3a:ef:1c:a6:06:04:07:ed:4a:70:cd:5b:57:aa:58: 48:1f:11:4c:69:7c:56:e9:6f:74:77:af:c2:d1:27: f4:8f:c1:61:00:f9:cd:3b:91:f1:1b:c4:66:cb:4d: 0a:91:29:1e:61:f7:63:9b:66:5f:6f:6d:ec:7d:26: d9:d3:db:ce:2a:fc:26:da:5f:0c:54:20:66:f3:18: 18:f8:dd:61:7d:cf:eb:76:8d:b5:37:e4:0c:09:7c: 41:fe:a6:25:ea:01:32:bc:ba:ea:4f:f5:67:d1:56: 21:50:74:60:19:c6:6b:d6:68:5c:7d:db:d2:b8:09: 57:10:f9:24:ac:d9:ff:11:6b:ac:23:ad:20:b7:09: c8:b7:cc:de:93:8d:40:85:41:ca:c1:90:b4:a5:77: 8f:97:58:5a:58:90:e7:11:76:b9:43:5a:77:a3:5f: 76:03:1a:c9:f9:95:c5:b1:4f:27:b4:e7:e6:6d:a3: 24:8f:95:46:7c:34:d4:01:de:55:d3:9b:7f:e8:28: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D6:82:F4:F1:CC:3F:1C:2C:6C:96:1F:BA:EB:C4:20:F3:0A:46:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e4caa48c-5b16-37d6-8342-a3b8a3b5d558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ae:04:df:d8:22:31:96:e7:62:52:3c:16:ee:04:b2:06:60: 5e:e9:07:a4:0a:c3:db:58:60:47:75:f5:c3:39:6a:7d:bd:a9: 25:73:2d:13:f2:db:4b:bf:cd:69:2d:da:36:eb:81:f0:41:a5: af:1b:61:c6:9a:2c:bc:91:8f:0c:07:35:63:76:dd:70:03:b5: ed:78:3d:4b:34:a4:f6:b6:49:64:08:26:12:37:cc:63:b4:ad: 5a:ff:e7:53:c8:e1:41:31:cf:f5:58:e2:62:b0:30:dd:e0:d2: 25:1e:72:29:64:8c:40:c7:ed:48:89:42:e7:4e:fc:4c:8e:d6: 8e:6a:c3:89:34:22:91:d3:d7:0c:78:6e:57:5f:bc:84:83:5f: 44:54:c7:01:86:b6:c4:a0:38:56:89:4f:7e:0f:ba:c5:e1:eb: 51:8a:8d:3f:92:12:48:24:93:97:64:9d:c2:9e:43:21:07:8e: 5e:c9:67:7a:ad:16:7a:35:f8:70:32:bd:79:de:2e:4c:77:b0: 54:97:7c:46:3f:60:ff:27:5e:82:2c:28:6f:a3:c3:51:10:9b: aa:ab:8e:30:2c:57:ea:1d:40:6c:c0:b7:bc:ea:94:96:dc:b0: 87:aa:2f:52:26:19:4c:28:a7:6d:78:ad:0c:58:79:5c:6c:ab: 27:39:76:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EJ+eT3nzvZ9QmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDkzNzM0MDgtYmI5MS00NGI3LWFjNWItYzFlYmUxNzc0YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p7hr6D3VNxYPmSkQmu09VpDsDsl2PyUsQKY 7rUp8NGmByRatsEHlsqqxYVPf93KNUP4xZcFNECZ16467xymBgQH7UpwzVtXqlhI HxFMaXxW6W90d6/C0Sf0j8FhAPnNO5HxG8Rmy00KkSkeYfdjm2Zfb23sfSbZ09vO Kvwm2l8MVCBm8xgY+N1hfc/rdo21N+QMCXxB/qYl6gEyvLrqT/Vn0VYhUHRgGcZr 1mhcfdvSuAlXEPkkrNn/EWusI60gtwnIt8zek41AhUHKwZC0pXePl1haWJDnEXa5 Q1p3o192AxrJ+ZXFsU8ntOfmbaMkj5VGfDTUAd5V05t/6CimawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnWgvTxzD8cLGyWH7rrxCDzCka7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTRjYWE0OGMtNWIxNi0z N2Q2LTgzNDItYTNiOGEzYjVkNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSuBN/YIjGW52JSPBbuBLIGYF7pB6QKw9tYYEd19cM5an29qSVzLRPy 20u/zWkt2jbrgfBBpa8bYcaaLLyRjwwHNWN23XADte14PUs0pPa2SWQIJhI3zGO0 rVr/51PI4UExz/VY4mKwMN3g0iUecilkjEDH7UiJQudO/EyO1o5qw4k0IpHT1wx4 bldfvISDX0RUxwGGtsSgOFaJT34PusXh61GKjT+SEkgkk5dkncKeQyEHjl7JZ3qt Fno1+HAyvXneLkx3sFSXfEY/YP8nXoIsKG+jw1EQm6qrjjAsV+odQGzAt7zqlJbc sIeqL1ImGUwop214rQxYeVxsqyc5dng= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:09 2026 by rpki-client