$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa File: f32520e4-c5ed-3c6e-8a5c-f42032642839.roa (raw, json) Hash identifier: iJCcqExruQ97w/MFz/jI0WD8xBQ7UfXAxzFhKIs1e6I= Subject key identifier: FE:17:0B:A9:F7:CB:9E:8A:0B:65:79:8C:5F:E0:D5:E9:D6:4C:53:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E67A3EF9A4D0B1D0F3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 216.58.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e6:7a:3e:f9:a4:d0:b1:d0:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fe2aa85f-9233-4681-a1e8-e42c33e73dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:c4:f6:96:4c:10:5a:28:b0:f1:9e:eb:72: 79:7d:13:81:43:ed:58:9f:d2:0d:43:a9:6e:c9:32: d0:0b:87:13:b1:56:73:76:7e:01:27:e2:b5:80:12: 75:5e:d5:d1:2f:d6:d8:87:aa:18:1e:77:f7:57:06: 51:58:21:e0:de:21:a9:32:18:72:85:cd:39:d5:a5: 7c:fa:de:ae:a1:48:09:ec:5d:c0:dc:58:c1:01:2c: 05:34:94:d9:1b:78:71:59:46:27:37:10:d5:73:a4: 19:ec:a3:a1:2c:7a:6f:68:09:9a:78:92:d4:8b:99: a2:d6:c6:2d:0f:f4:f4:f3:5b:31:5f:fe:44:89:d1: ff:4a:9f:d2:e0:fb:7e:ec:6b:02:ce:1b:ff:77:ec: 81:cb:68:ef:22:59:14:d7:a3:7d:aa:6e:ff:c8:12: 90:c5:3b:63:fa:8a:1b:fb:a1:d6:61:64:bb:4b:53: a9:32:fa:6e:1f:6f:02:72:9a:28:d1:38:0f:f3:e5: 05:c1:f0:5a:17:84:c2:dd:f8:3d:45:9f:dd:33:7a: 5f:3d:24:df:53:19:dd:e3:6f:ab:83:24:f9:b6:3f: 49:ec:3e:41:bd:70:e2:64:2b:0d:cb:32:20:69:fe: da:04:05:dd:e5:5e:7c:aa:14:40:c6:de:4a:6e:02: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:17:0B:A9:F7:CB:9E:8A:0B:65:79:8C:5F:E0:D5:E9:D6:4C:53:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:54:22:9d:28:86:4b:55:1e:ed:cb:e7:a7:55:82:1d:fa:f5: 6a:d8:af:36:74:25:12:ae:c8:a1:23:ce:dc:e5:86:2f:1f:a0: 2e:3e:5c:68:25:75:29:39:ae:de:ee:54:f8:99:00:a1:83:dc: 1c:20:8c:7a:e0:a9:a9:b3:3f:3b:13:8c:f5:77:12:4e:1f:31: 8f:f0:96:a3:df:9e:41:eb:85:7b:df:b0:2b:64:77:6a:64:d1: 31:76:e9:ec:8e:32:8d:26:38:18:44:5d:6c:95:8e:c2:39:e0: 01:79:13:2d:93:dc:75:b8:cd:65:47:22:db:99:c0:fa:14:9e: e3:b2:0a:6a:6a:40:b9:5e:b0:71:79:ab:ac:fe:27:c4:78:be: 82:6c:07:18:30:8b:4c:5d:16:af:a2:af:60:fd:d1:f4:db:54: 38:47:5c:ea:dd:13:04:d3:5b:b9:15:27:51:28:51:cc:ce:c0: bb:5a:15:dd:73:01:c1:8c:9c:9c:61:0e:2f:f4:0f:8c:cf:85: 0f:38:a7:9f:a1:49:6b:66:21:82:53:ac:d6:d8:e3:f2:66:ac: 9c:17:08:aa:d3:9a:5d:23:01:9b:b6:6e:d5:4b:b9:de:9a:4d: cd:12:3a:6a:90:3e:44:87:9d:8c:b0:8a:a5:dd:bc:6c:6f:6d: c5:4c:0e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OZ6Pvmk0LHQ88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmUyYWE4NWYtOTIzMy00NjgxLWExZTgtZTQyYzMzZTczZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyerE9pZMEFoosPGe63J5fROBQ+1Yn9INQ6lu yTLQC4cTsVZzdn4BJ+K1gBJ1XtXRL9bYh6oYHnf3VwZRWCHg3iGpMhhyhc051aV8 +t6uoUgJ7F3A3FjBASwFNJTZG3hxWUYnNxDVc6QZ7KOhLHpvaAmaeJLUi5mi1sYt D/T081sxX/5EidH/Sp/S4Pt+7GsCzhv/d+yBy2jvIlkU16N9qm7/yBKQxTtj+oob +6HWYWS7S1OpMvpuH28Ccpoo0TgP8+UFwfBaF4TC3fg9RZ/dM3pfPSTfUxnd42+r gyT5tj9J7D5BvXDiZCsNyzIgaf7aBAXd5V58qhRAxt5KbgKeOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4XC6n3y56KC2V5jF/g1enWTFMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyNTIwZTQtYzVlZC0z YzZlLThhNWMtZjQyMDMyNjQyODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhUIp0ohktVHu3L56dVgh369WrYrzZ0JRKuyKEjztzlhi8foC4+XGgl dSk5rt7uVPiZAKGD3BwgjHrgqamzPzsTjPV3Ek4fMY/wlqPfnkHrhXvfsCtkd2pk 0TF26eyOMo0mOBhEXWyVjsI54AF5Ey2T3HW4zWVHItuZwPoUnuOyCmpqQLlesHF5 q6z+J8R4voJsBxgwi0xdFq+ir2D90fTbVDhHXOrdEwTTW7kVJ1EoUczOwLtaFd1z AcGMnJxhDi/0D4zPhQ84p5+hSWtmIYJTrNbY4/JmrJwXCKrTml0jAZu2btVLud6a Tc0SOmqQPkSHnYywiqXdvGxvbcVMDnw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:30 2026 by rpki-client