$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa File: ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa (raw, json) Hash identifier: ScGziVnwx5fq9c/z6C/22InV26m2fLhAKZ+9zIOfysA= Subject key identifier: 4A:28:9A:60:ED:B8:02:83:B4:5D:CD:60:79:51:E5:B9:CE:D0:02:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03F6EA116688DD55ACC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3f:6e:a1:16:68:8d:d5:5a:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=29d937b9-446f-478c-bf4b-2ac60283d847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:15:8f:d9:6a:f1:3f:6b:d0:df:6e:2b:45: b7:b2:71:58:0e:62:b2:9d:89:19:e0:18:f4:d8:44: 1d:24:0b:7d:da:68:5f:1b:85:11:e8:be:5c:5a:76: 10:15:88:7d:5f:27:e3:fa:8c:28:50:20:2b:6c:84: d3:7f:2b:32:aa:97:95:b9:87:28:e4:12:82:a1:2c: 72:61:c7:d4:d2:0a:8c:c7:75:74:24:8c:6d:1b:cb: 96:2d:51:05:f4:4e:54:d2:9c:2c:44:ec:60:4f:f9: e8:17:68:36:33:22:69:57:d3:68:42:bf:18:7c:d2: 75:32:ad:f0:38:8e:03:f6:16:f8:c8:dc:be:fb:dc: 02:aa:43:4e:92:f2:2f:39:63:a3:9b:46:1a:31:3e: 76:de:a7:b5:e0:f1:a0:ae:75:df:ea:1b:fd:b5:71: b7:75:09:d1:9f:00:e6:8f:1b:c8:81:a3:a9:4d:ee: 04:fc:8b:40:53:01:ba:f2:e8:f0:3c:8d:de:d0:49: 72:fd:58:2a:d8:c0:39:ca:51:b2:72:fa:17:6a:70: 0d:d3:ad:8f:43:2c:42:7a:58:66:79:d1:97:9d:d0: e7:bb:5f:43:b7:be:1f:5f:ab:2f:dd:f3:34:ff:7c: 0b:70:6f:0e:ca:2e:34:5c:35:c9:b4:d9:da:cb:7c: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:9A:60:ED:B8:02:83:B4:5D:CD:60:79:51:E5:B9:CE:D0:02:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cb:bc:f6:d9:91:0d:18:12:6f:4c:3a:fc:26:93:0b:f2:2b: 30:c8:fc:3e:a2:6a:ca:15:e6:78:61:79:9c:53:3b:09:9c:f3: 1e:70:d8:17:3c:85:95:ef:f7:08:7a:21:ff:b2:15:24:b4:64: 0a:34:27:e2:00:07:f3:03:3b:73:94:e6:b7:ce:83:68:6a:0f: 5c:2f:70:27:07:57:3f:1f:87:e6:c8:9d:91:c6:9d:43:41:80: f2:80:7c:df:78:f9:bb:36:fd:a4:48:e9:00:07:57:84:55:41: cc:43:bf:33:de:e8:72:2c:3e:90:15:8b:33:1d:b8:6c:c5:97: f2:b1:da:df:28:5f:82:53:fa:eb:dd:2a:c4:33:f3:74:d8:01: 15:1d:26:73:a2:50:27:09:78:bc:bd:fd:de:26:82:53:b2:54: 79:c5:d4:5a:68:e6:84:92:07:3c:1d:50:a1:13:d6:75:33:0f: 69:5e:b6:fe:50:54:22:72:75:c9:6a:e2:8b:e3:5d:98:01:a2: cd:69:82:32:fa:0a:34:0e:fb:40:f6:31:7c:08:b8:3a:70:ae: 92:33:54:ae:13:dc:25:e5:01:c4:0b:93:cb:9a:81:67:80:5e: c0:2e:77:b3:1f:cd:d8:c5:7b:11:b4:c2:4f:48:1f:cf:8f:c7: 60:44:66:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D9uoRZojdVazAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjlkOTM3YjktNDQ2Zi00NzhjLWJmNGItMmFjNjAyODNkODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7gVj9lq8T9r0N9uK0W3snFYDmKynYkZ4Bj0 2EQdJAt92mhfG4UR6L5cWnYQFYh9Xyfj+owoUCArbITTfysyqpeVuYco5BKCoSxy YcfU0gqMx3V0JIxtG8uWLVEF9E5U0pwsROxgT/noF2g2MyJpV9NoQr8YfNJ1Mq3w OI4D9hb4yNy++9wCqkNOkvIvOWOjm0YaMT523qe14PGgrnXf6hv9tXG3dQnRnwDm jxvIgaOpTe4E/ItAUwG68ujwPI3e0Ely/Vgq2MA5ylGycvoXanAN062PQyxCelhm edGXndDnu19Dt74fX6sv3fM0/3wLcG8Oyi40XDXJtNnay3xvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoommDtuAKDtF3NYHlR5bnO0AKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY5Y2E3ZjktMjA1YS0z NDY2LWJjOTgtY2E0ZTQ0ZGQ5MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3LvPbZkQ0YEm9MOvwmkwvyKzDI/D6iasoV5nhheZxTOwmc8x5w2Bc8 hZXv9wh6If+yFSS0ZAo0J+IAB/MDO3OU5rfOg2hqD1wvcCcHVz8fh+bInZHGnUNB gPKAfN94+bs2/aRI6QAHV4RVQcxDvzPe6HIsPpAVizMduGzFl/Kx2t8oX4JT+uvd KsQz83TYARUdJnOiUCcJeLy9/d4mglOyVHnF1Fpo5oSSBzwdUKET1nUzD2letv5Q VCJydclq4ovjXZgBos1pgjL6CjQO+0D2MXwIuDpwrpIzVK4T3CXlAcQLk8uagWeA XsAud7MfzdjFexG0wk9IH8+Px2BEZhA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:39 2026 by rpki-client