$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acb5aa5f-9945-3076-b1d0-ec69f6dee366.roa File: acb5aa5f-9945-3076-b1d0-ec69f6dee366.roa (raw, json) Hash identifier: BIlooLy5IerYtRGQkR5ca2BiHyceFrdjdmLajVjVbkU= Subject key identifier: 5C:1F:D4:04:18:91:2A:92:66:C7:D3:A3:C1:88:03:A6:96:E3:E7:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CEC899FB0300848D096FD2080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acb5aa5f-9945-3076-b1d0-ec69f6dee366.roa Signing time: Fri 20 Feb 2026 08:42:42 +0000 ROA not before: Fri 20 Feb 2026 08:42:42 +0000 ROA not after: Thu 21 May 2026 07:42:42 +0000 asID: 15169 IP address blocks: 172.217.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ec:89:9f:b0:30:08:48:d0:96:fd:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 20 08:42:42 2026 GMT Not After : May 21 07:42:42 2026 GMT Subject: CN=c9a24e97-6631-4ae4-ba73-a0e84a821c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:2e:d4:87:19:d1:d7:84:37:92:1f:e9:bb: 40:57:04:50:6f:f0:aa:46:eb:fc:52:bc:ed:1c:9a: e0:f8:82:5d:32:49:4d:e0:9f:72:43:f2:88:1a:c9: e3:4d:c6:b5:03:40:34:83:c7:88:69:dd:4a:24:e6: 53:c1:49:08:9e:fa:ba:df:c8:f0:68:7b:87:89:99: e5:68:40:b6:a7:c8:f4:45:be:f5:b3:81:6d:87:e9: 96:de:55:b3:10:72:14:33:b7:27:d9:50:0c:b1:70: d7:f2:ce:82:1f:7d:cd:90:3f:2c:28:b1:ea:ed:6e: 3c:52:7e:ea:f1:74:32:ab:b9:f4:a8:bb:37:88:57: b7:60:b8:e5:a7:2c:12:a9:4b:1a:20:76:2c:21:f0: ba:5d:75:a9:1b:c6:e6:6f:cb:33:b7:bc:84:26:97: e9:12:63:c6:6a:a0:b7:37:a2:43:91:80:07:3c:0f: 1d:a7:f5:24:ad:70:c5:7f:7a:fa:28:24:78:22:3b: db:5a:0c:73:06:d0:4a:e9:cf:42:a4:e8:c4:54:94: 03:b2:2e:da:22:4d:a3:ee:ed:0e:42:79:cf:fe:47: 52:32:6e:26:f9:0b:8d:67:88:ff:50:2e:82:df:d7: f0:e6:d9:5f:e7:c6:d8:dc:06:35:2d:bc:75:47:29: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1F:D4:04:18:91:2A:92:66:C7:D3:A3:C1:88:03:A6:96:E3:E7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/acb5aa5f-9945-3076-b1d0-ec69f6dee366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.217.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e1:4d:15:d7:62:65:55:c8:95:4d:cd:3f:39:20:9b:03:51: ae:8c:2c:48:0a:26:a5:f9:d7:b9:bd:03:9d:0f:ea:8f:55:1c: 4a:e8:eb:7f:6c:19:9c:27:50:5c:00:51:a8:fa:fe:80:d7:38: f6:98:07:a1:35:17:34:b1:9e:01:5e:f8:48:20:0e:12:9c:d4: aa:58:57:2e:a6:96:27:b2:92:18:47:68:2b:b6:7f:97:a9:71: 28:bb:0e:e3:96:d4:d8:01:6f:41:39:52:23:9e:ea:13:b4:f9: 03:c5:ae:6e:a8:39:fa:82:a4:8b:4c:1d:a9:95:98:b9:1c:f5: 6d:50:00:ac:40:a7:de:bd:a8:ca:3f:19:bc:b6:fa:e9:38:d9: e6:3f:6d:c2:82:82:d3:90:60:e3:43:ac:c4:a4:a5:66:69:92: c4:9f:70:83:fc:6c:e7:98:39:3b:12:84:7c:ac:28:cf:cf:1c: aa:68:aa:34:de:db:bf:bf:8d:74:e4:d3:cd:38:15:62:1c:3d: 7d:70:c9:7c:b3:60:12:b6:c8:0e:a5:af:db:d6:6b:53:fc:90: 96:19:32:6f:38:12:99:da:12:ce:fb:4b:3b:ad:95:87:fb:41: e4:bd:85:74:cb:94:21:19:6b:10:39:0a:b9:1f:34:78:de:7d: 9c:98:f4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzsiZ+wMAhI0Jb9IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIyMDA4NDI0MloXDTI2MDUyMTA3NDI0MlowLzEtMCsGA1UEAxMk YzlhMjRlOTctNjYzMS00YWU0LWJhNzMtYTBlODRhODIxYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW0u1IcZ0deEN5If6btAVwRQb/CqRuv8Urzt HJrg+IJdMklN4J9yQ/KIGsnjTca1A0A0g8eIad1KJOZTwUkInvq638jwaHuHiZnl aEC2p8j0Rb71s4Fth+mW3lWzEHIUM7cn2VAMsXDX8s6CH33NkD8sKLHq7W48Un7q 8XQyq7n0qLs3iFe3YLjlpywSqUsaIHYsIfC6XXWpG8bmb8szt7yEJpfpEmPGaqC3 N6JDkYAHPA8dp/UkrXDFf3r6KCR4IjvbWgxzBtBK6c9CpOjEVJQDsi7aIk2j7u0O QnnP/kdSMm4m+QuNZ4j/UC6C39fw5tlf58bY3AY1Lbx1RylSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwf1AQYkSqSZsfTo8GIA6aW4+cNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWNiNWFhNWYtOTk0NS0z MDc2LWIxZDAtZWM2OWY2ZGVlMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7hTRXXYmVVyJVNzT85IJsDUa6MLEgKJqX517m9A50P6o9VHEro639s GZwnUFwAUaj6/oDXOPaYB6E1FzSxngFe+EggDhKc1KpYVy6mlieykhhHaCu2f5ep cSi7DuOW1NgBb0E5UiOe6hO0+QPFrm6oOfqCpItMHamVmLkc9W1QAKxAp969qMo/ Gby2+uk42eY/bcKCgtOQYONDrMSkpWZpksSfcIP8bOeYOTsShHysKM/PHKpoqjTe 27+/jXTk0804FWIcPX1wyXyzYBK2yA6lr9vWa1P8kJYZMm84EpnaEs77SzutlYf7 QeS9hXTLlCEZaxA5CrkfNHjefZyY9DE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:58:27 2026 by rpki-client