$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa File: ef6dc64b-a739-3069-8e89-e656f33c13e6.roa (raw, json) Hash identifier: HtybJ6vz3fYz/LdVX1CJho5BDJxz77jQolePBtLM9EY= Subject key identifier: 91:7C:3E:AE:BB:30:21:7E:FF:23:6A:54:8B:02:61:3E:5E:E8:98:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E043F0C20E34ACB8853280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.217.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:43:f0:c2:0e:34:ac:b8:85:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=05e6d7b4-7789-4ff3-9676-7d78b6e03dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:54:29:2a:be:45:6a:7d:43:a8:b2:1b:4b: 81:29:c9:fe:75:5d:2d:5c:1f:0f:75:2a:27:f9:34: 86:bc:38:f3:fc:ba:19:99:21:a5:c0:6e:ae:e2:20: ea:79:57:1a:13:90:38:c1:67:5e:21:31:c0:ef:dc: 45:3c:cf:40:61:ba:34:94:ee:7d:05:55:3e:f0:16: 8a:3f:5b:25:dc:d4:8e:93:7c:01:f3:7e:9d:b0:68: e0:ac:e1:b4:17:b9:73:ea:d1:a4:7c:e3:ff:e6:32: 54:97:cb:bb:ff:74:54:c4:8b:fe:04:28:14:e2:a0: b2:13:01:59:89:97:c4:01:45:1a:f0:6f:17:47:8e: 48:6a:06:3c:f8:d7:2f:37:dd:9d:16:b3:f7:8c:83: 09:f0:01:89:9b:28:1a:02:a2:ca:e0:e0:9d:85:c6: 58:ef:20:f9:2e:b0:29:09:5e:b6:48:aa:35:29:84: fa:be:4a:cd:e5:19:57:e8:49:af:72:90:0b:32:25: 4d:3f:4b:ca:52:ef:4f:c3:35:64:4f:49:bc:b1:01: 20:66:f5:fe:cb:ee:13:ef:d0:a2:ae:f4:2b:17:b4: b8:60:e7:61:18:5a:2c:6e:15:9f:b7:56:0a:2d:58: 22:4b:38:c9:91:38:ba:06:51:c7:28:c2:aa:b5:c4: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:3E:AE:BB:30:21:7E:FF:23:6A:54:8B:02:61:3E:5E:E8:98:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef6dc64b-a739-3069-8e89-e656f33c13e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:74:c7:3a:83:ce:fc:68:5b:0a:38:ec:0a:96:cb:3d:8a:76: b0:76:ab:51:84:59:03:84:77:e2:84:34:58:54:46:6f:34:9e: f3:0e:3a:4d:a2:32:58:51:77:bc:a6:50:61:e2:e6:a9:c1:97: 41:cc:a1:4a:5b:63:8f:7f:77:35:d2:1e:e3:ad:d8:b6:f2:a5: cd:b9:85:39:83:26:c8:35:dc:69:2c:cd:22:e0:af:73:7a:a9: 9d:b7:f7:8e:cd:f3:44:4c:f4:97:2c:f5:cf:17:b7:cc:d8:b1: 84:bd:52:b2:55:e0:aa:bb:ec:11:94:0a:52:73:19:62:54:76: cf:c4:03:ae:67:19:1f:59:95:97:e0:2e:6f:de:98:02:51:7e: ec:78:f0:d3:b1:c0:0b:27:2f:ee:15:6d:d3:0a:0e:1b:5f:cf: 20:fa:54:ff:e0:68:c5:24:b2:60:84:13:38:8c:68:cf:11:cc: 55:ba:8b:e7:1a:5c:27:00:cc:77:64:1f:22:fe:79:18:20:8f: b1:95:a8:dd:cc:58:df:f5:fa:c3:8a:43:85:80:96:69:71:4f: d6:8f:98:1c:21:df:ba:b0:00:ca:4c:30:a0:b8:a6:07:42:b5: 1e:79:d6:52:d0:21:51:af:26:cb:f3:fa:c6:99:a9:68:bf:25: 88:10:b1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EPwwg40rLiFMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDVlNmQ3YjQtNzc4OS00ZmYzLTk2NzYtN2Q3OGI2ZTAzZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6BUKSq+RWp9Q6iyG0uBKcn+dV0tXB8PdSon +TSGvDjz/LoZmSGlwG6u4iDqeVcaE5A4wWdeITHA79xFPM9AYbo0lO59BVU+8BaK P1sl3NSOk3wB836dsGjgrOG0F7lz6tGkfOP/5jJUl8u7/3RUxIv+BCgU4qCyEwFZ iZfEAUUa8G8XR45IagY8+NcvN92dFrP3jIMJ8AGJmygaAqLK4OCdhcZY7yD5LrAp CV62SKo1KYT6vkrN5RlX6EmvcpALMiVNP0vKUu9PwzVkT0m8sQEgZvX+y+4T79Ci rvQrF7S4YOdhGFosbhWft1YKLVgiSzjJkTi6BlHHKMKqtcTb5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF8Pq67MCF+/yNqVIsCYT5e6JicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY2ZGM2NGItYTczOS0z MDY5LThlODktZTY1NmYzM2MxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALR0xzqDzvxoWwo47AqWyz2KdrB2q1GEWQOEd+KENFhURm80nvMOOk2i MlhRd7ymUGHi5qnBl0HMoUpbY49/dzXSHuOt2Lbypc25hTmDJsg13GkszSLgr3N6 qZ23947N80RM9Jcs9c8Xt8zYsYS9UrJV4Kq77BGUClJzGWJUds/EA65nGR9ZlZfg Lm/emAJRfux48NOxwAsnL+4VbdMKDhtfzyD6VP/gaMUksmCEEziMaM8RzFW6i+ca XCcAzHdkHyL+eRggj7GVqN3MWN/1+sOKQ4WAlmlxT9aPmBwh37qwAMpMMKC4pgdC tR551lLQIVGvJsvz+saZqWi/JYgQsc8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:08 2026 by rpki-client