$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa File: ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa (raw, json) Hash identifier: 4iTKeFAZinaz1RI7lohpfIDgoKc81ppxMcWB5z1Uxxw= Subject key identifier: 4C:EA:D7:3C:C4:CE:58:31:7B:79:5E:11:EE:46:77:79:A0:F9:25:47 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04A3D7F223DDF87418480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4a:3d:7f:22:3d:df:87:41:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=87cf5fd4-3270-4155-b435-4f593bfe5cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:ad:63:48:ef:62:2a:7b:2c:04:f2:a4:dd: 58:11:ca:65:31:da:d3:b6:6c:4c:8c:50:da:a8:25: 6f:01:14:23:08:31:3e:69:be:58:8d:6f:3a:1c:32: fa:bd:89:79:bf:a3:bd:bd:27:39:77:4d:c6:62:65: fe:bb:c1:af:34:fd:d6:d9:5b:59:46:c3:c0:93:b8: 34:30:0e:8f:a7:71:05:2a:4c:cb:89:68:34:3a:d0: dd:7d:f0:0a:e9:b6:51:e2:e9:2b:5f:90:7f:c7:5f: 3e:c8:87:2f:bc:a7:6c:78:e0:f1:06:4a:07:2a:7b: b9:af:2b:c3:bb:94:18:4b:ee:13:7f:3a:c7:b5:f0: ed:07:85:53:6d:8d:9b:a8:ab:bc:9f:7d:c2:5f:6e: 40:ac:6d:b6:18:f8:17:c9:67:8b:57:0a:67:a9:7a: 55:1a:80:67:da:50:20:ac:a2:36:0a:c5:d0:d2:a4: ca:d7:85:0c:38:b9:54:18:e6:ad:f6:ac:b1:e7:bb: f2:62:eb:46:0a:29:d5:72:72:0c:28:94:18:a2:8f: bf:81:60:f6:82:21:eb:1a:0a:66:dc:3d:83:ae:7d: 4f:e9:3b:cc:fe:19:21:6b:9a:fa:1f:56:48:0a:f1: f9:d2:cb:a2:e3:ca:f4:be:d5:54:ae:be:ac:1d:b4: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EA:D7:3C:C4:CE:58:31:7B:79:5E:11:EE:46:77:79:A0:F9:25:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ea1304f5-4179-3ea1-a6d2-8aed7a86bbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:23:46:d7:86:8a:25:75:b3:8e:9f:79:4a:32:e0:29:f3:78: 6a:92:ee:c9:c9:07:c1:9a:0e:cf:fa:ba:cd:10:5e:72:d5:36: bb:90:40:34:73:e0:23:0c:d1:94:58:28:10:5c:ab:91:e3:bb: 68:78:6e:5e:de:ee:72:bb:2a:73:f4:a1:32:3a:7d:9c:5f:24: ff:e3:2f:ad:ab:13:f9:ee:21:79:7c:ed:68:96:d7:df:03:63: 8b:0e:d2:13:a5:16:49:4e:e6:db:34:6e:8d:c3:1a:38:d2:df: f3:78:6e:7a:ea:e5:15:46:72:2f:50:1d:31:6a:9b:79:19:67: c9:1f:ca:a6:f5:93:7f:81:e0:16:40:d4:4d:53:c7:b8:ec:12: b9:d0:38:37:4e:ea:14:43:28:9c:c1:37:44:d6:82:e2:7c:39: 08:7c:6b:1c:7f:49:63:c3:58:6b:0b:1d:6e:6a:92:67:b6:e7: 6b:ff:ba:d9:74:a2:ae:ec:5d:8b:f8:1b:63:34:10:54:d6:3e: bd:01:17:bc:2d:de:3a:4b:9e:9c:45:e8:8a:4b:86:67:a1:d0: 64:62:01:f3:bb:90:fa:ec:bf:26:1a:01:3e:1d:e5:55:51:0d: 69:5f:fc:91:a9:cd:b4:35:63:d8:99:88:18:2f:b8:b5:7f:ef: 4c:ba:a8:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Eo9fyI934dBhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODdjZjVmZDQtMzI3MC00MTU1LWI0MzUtNGY1OTNiZmU1Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFqtY0jvYip7LATypN1YEcplMdrTtmxMjFDa qCVvARQjCDE+ab5YjW86HDL6vYl5v6O9vSc5d03GYmX+u8GvNP3W2VtZRsPAk7g0 MA6Pp3EFKkzLiWg0OtDdffAK6bZR4ukrX5B/x18+yIcvvKdseODxBkoHKnu5ryvD u5QYS+4TfzrHtfDtB4VTbY2bqKu8n33CX25ArG22GPgXyWeLVwpnqXpVGoBn2lAg rKI2CsXQ0qTK14UMOLlUGOat9qyx57vyYutGCinVcnIMKJQYoo+/gWD2giHrGgpm 3D2Drn1P6TvM/hkha5r6H1ZICvH50sui48r0vtVUrr6sHbTsKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzq1zzEzlgxe3leEe5Gd3mg+SVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWExMzA0ZjUtNDE3OS0z ZWExLWE2ZDItOGFlZDdhODZiYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEjRteGiiV1s46feUoy4CnzeGqS7snJB8GaDs/6us0QXnLVNruQQDRz 4CMM0ZRYKBBcq5Hju2h4bl7e7nK7KnP0oTI6fZxfJP/jL62rE/nuIXl87WiW198D Y4sO0hOlFklO5ts0bo3DGjjS3/N4bnrq5RVGci9QHTFqm3kZZ8kfyqb1k3+B4BZA 1E1Tx7jsErnQODdO6hRDKJzBN0TWguJ8OQh8axx/SWPDWGsLHW5qkme252v/utl0 oq7sXYv4G2M0EFTWPr0BF7wt3jpLnpxF6IpLhmeh0GRiAfO7kPrsvyYaAT4d5VVR DWlf/JGpzbQ1Y9iZiBgvuLV/70y6qOA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:06 2026 by rpki-client