$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa File: 01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa (raw, json) Hash identifier: eKz2HoGW16wN7R/hyR2J/qF5w6VQ4CN0isy7cZ5ALEk= Subject key identifier: 41:D6:19:B5:8A:3B:D6:00:75:28:6A:5B:33:47:E4:D0:93:38:3E:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0FECC4456722772852B78 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:fe:cc:44:56:72:27:72:85:2b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f2e49afd-e5fa-4a56-93d9-90f3d07f9a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:86:e8:9d:b1:3d:38:dd:39:9c:57:df:5d: 39:c6:38:46:d1:49:06:f4:1d:9b:61:f4:01:5f:5c: 78:17:4b:e2:8d:9d:02:e2:4a:6f:8a:64:db:6b:0c: 49:b5:14:1e:38:cb:c4:6d:48:59:42:ce:55:54:13: 78:96:64:f3:f4:f5:37:8a:42:f1:f0:08:16:30:d7: fd:0e:c6:89:fe:2b:0b:d4:f7:70:06:ef:77:4a:a4: aa:8c:66:0c:9c:11:91:d9:ca:af:df:0a:60:85:3f: 7f:bf:2e:23:db:3b:09:4e:f8:14:85:6c:cc:83:ec: 07:5b:9a:a4:42:bb:f4:69:72:27:de:c7:be:47:92: 84:8f:d8:5e:8b:8c:76:10:4f:b2:10:97:f9:ed:7b: 48:4c:b7:bb:b6:79:f1:c6:c4:ea:9f:3f:51:7f:b2: ce:93:4c:4a:ee:f4:79:01:b9:1d:0c:c3:24:92:ad: 03:da:ff:99:80:b2:7a:8e:9a:75:4b:98:b6:ca:56: e8:e5:3a:eb:01:15:7c:c3:50:74:2d:8a:2d:61:13: 6b:36:d9:c6:9c:1f:0b:cb:1b:c2:4f:09:a5:27:7c: 59:e8:7f:b9:1b:c1:3e:48:14:ff:d9:fb:17:d8:e0: ab:e7:95:96:62:5e:b4:b8:41:28:ba:c9:74:69:11: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D6:19:B5:8A:3B:D6:00:75:28:6A:5B:33:47:E4:D0:93:38:3E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01ad9c4a-9f64-3060-8b00-ede4e0ddc949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:09:b8:89:b9:ab:ab:db:19:1a:b8:98:08:11:fa:c8:79:df: e0:9f:2d:d4:94:0f:ba:26:e1:51:66:9b:8d:ba:b7:69:1d:96: 38:dc:5b:21:e0:17:f9:b3:37:f6:cc:08:38:34:28:d0:69:4f: b6:5d:36:c0:a8:5c:c4:18:ff:30:b6:ea:15:6b:70:ae:24:e2: 19:ce:e2:26:e2:85:d9:e6:8c:0c:10:23:fe:1d:b4:d4:d7:9f: 1d:5d:15:dd:6d:15:a0:94:13:00:2c:88:6f:13:55:be:54:27: de:b2:9b:1e:75:97:e7:b0:a5:de:5a:64:18:1a:8f:42:73:29: 6b:a5:b7:d0:a0:e7:df:c5:75:f5:6a:b1:96:d7:73:da:e7:da: 80:bf:58:2e:97:bc:00:97:d0:4b:ac:bc:fd:86:dc:4e:bb:4b: e0:39:48:01:29:a3:47:2e:af:ab:fa:0c:7f:99:4f:be:fa:a0: 84:bf:b5:bc:c2:d7:78:0c:70:1c:ff:18:cc:9a:2d:2e:d9:f5: 26:a8:82:10:ce:ba:c6:77:e1:ec:bd:3c:a2:bd:b2:74:2c:85: e1:31:16:02:b0:66:be:47:fc:e2:a8:af:57:a2:02:42:65:f4: 71:10:8e:18:79:8c:de:b9:8a:ea:ac:00:9d:db:64:99:61:a9: a8:3c:70:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4P7MRFZyJ3KFK3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjJlNDlhZmQtZTVmYS00YTU2LTkzZDktOTBmM2QwN2Y5YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux6G6J2xPTjdOZxX3105xjhG0UkG9B2bYfQB X1x4F0vijZ0C4kpvimTbawxJtRQeOMvEbUhZQs5VVBN4lmTz9PU3ikLx8AgWMNf9 DsaJ/isL1PdwBu93SqSqjGYMnBGR2cqv3wpghT9/vy4j2zsJTvgUhWzMg+wHW5qk Qrv0aXIn3se+R5KEj9hei4x2EE+yEJf57XtITLe7tnnxxsTqnz9Rf7LOk0xK7vR5 AbkdDMMkkq0D2v+ZgLJ6jpp1S5i2ylbo5TrrARV8w1B0LYotYRNrNtnGnB8LyxvC TwmlJ3xZ6H+5G8E+SBT/2fsX2OCr55WWYl60uEEousl0aRHNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHWGbWKO9YAdShqWzNH5NCTOD60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFhZDljNGEtOWY2NC0z MDYwLThiMDAtZWRlNGUwZGRjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMJuIm5q6vbGRq4mAgR+sh53+CfLdSUD7om4VFmm426t2kdljjcWyHg F/mzN/bMCDg0KNBpT7ZdNsCoXMQY/zC26hVrcK4k4hnO4ibihdnmjAwQI/4dtNTX nx1dFd1tFaCUEwAsiG8TVb5UJ96ymx51l+ewpd5aZBgaj0JzKWult9Cg59/FdfVq sZbXc9rn2oC/WC6XvACX0EusvP2G3E67S+A5SAEpo0cur6v6DH+ZT776oIS/tbzC 13gMcBz/GMyaLS7Z9SaoghDOusZ34ey9PKK9snQsheExFgKwZr5H/OKor1eiAkJl 9HEQjhh5jN65iuqsAJ3bZJlhqag8cKs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:37 2026 by rpki-client