$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa File: 0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa (raw, json) Hash identifier: dpGvgjn7iPGE3Nael6Vrp4+ZLScWmOQvJvuaVv+BOT0= Subject key identifier: E8:2A:D1:83:C8:B0:E5:CE:BC:5A:10:B0:3C:61:C0:8F:6B:74:CD:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E032C8A5C15F7E0869F240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:32:c8:a5:c1:5f:7e:08:69:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=13bc5bc9-5e63-4c26-9874-851ceecdc359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:8d:97:87:ef:63:9b:b2:b9:bc:0e:b0:c9: 6d:2e:11:06:82:dc:17:a6:85:a4:55:a4:09:a3:16: e7:63:2a:b8:75:81:ad:52:e2:e1:ee:1d:0d:5b:d9: ff:f8:bf:97:b3:3a:48:46:08:8f:b8:94:80:61:3b: 11:fb:7c:83:96:3c:f3:65:58:83:82:4c:17:63:3a: e1:3b:54:17:40:35:a8:b7:9c:29:f5:1a:3f:47:f9: c0:b0:b3:8c:d8:19:d6:7e:cf:84:d5:f5:8a:55:4e: 5f:0f:c2:b3:0b:32:9a:21:bd:ff:c0:85:ec:39:8a: e7:59:8c:a6:5f:89:30:33:db:6e:f8:f6:48:dc:e2: 70:7d:73:2a:48:2d:f4:e2:5d:dc:d2:29:75:1c:7a: 03:61:f0:33:7b:d1:4d:a6:1e:c3:c0:f1:99:e7:09: bf:0f:3e:0e:73:a1:fc:7f:d2:75:5f:6a:72:d3:f2: b2:a9:86:f7:0e:2e:bb:2e:f8:93:e9:59:0f:2c:f1: 7c:0b:d3:51:e0:36:ec:cf:5b:28:1a:08:c8:f1:73: 97:c6:88:2b:25:8e:b3:a1:16:96:ab:7c:79:01:69: b7:95:d8:07:51:99:85:ec:1b:92:c4:51:d5:f9:8f: 9d:52:00:f0:19:b3:ca:e6:14:a8:5b:a1:64:c4:e5: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:D1:83:C8:B0:E5:CE:BC:5A:10:B0:3C:61:C0:8F:6B:74:CD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0c:05:b0:d0:00:e5:35:bb:93:5d:a0:55:b4:ce:f5:3c:9e: c6:ed:af:e7:e2:79:b1:6a:99:ea:2a:95:f0:67:67:cf:53:83: 6f:24:ca:85:63:80:6d:23:f1:1f:57:0a:ff:5c:4e:0f:51:c3: 41:72:96:c5:94:96:7d:d0:96:9f:ed:e0:c2:33:f0:fc:61:9e: 35:75:24:fc:5f:01:13:b7:ff:da:f2:40:27:31:75:0e:4b:34: f2:1d:51:56:45:18:d7:ae:f7:56:60:c8:5a:86:b1:a4:3e:e6: 50:28:a4:6a:2f:40:a8:91:89:3e:e4:64:9b:56:49:85:c8:93: 96:0d:cb:36:e7:bc:36:29:ed:7c:da:03:bb:23:91:0e:76:7e: be:e1:b3:42:99:f7:ab:ef:3c:79:af:03:9f:e2:43:61:ae:be: 4b:b1:03:c4:8f:bc:1e:b2:dc:f1:86:0e:d4:2b:7c:91:e5:58: de:b3:7d:60:ca:d4:06:db:17:ec:b0:87:3f:7e:cd:ad:68:e2: bb:59:41:0b:f3:7b:ca:0a:56:37:b2:11:e1:bd:c2:a8:fb:a6: 4c:2e:52:56:b1:4f:fb:13:6f:57:2e:2a:c8:c0:3c:25:da:e8: 3e:9e:c1:32:9b:10:42:77:96:75:78:53:e9:a0:87:a1:01:f5: 25:63:73:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DLIpcFffghp8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTNiYzViYzktNWU2My00YzI2LTk4NzQtODUxY2VlY2RjMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS6Nl4fvY5uyubwOsMltLhEGgtwXpoWkVaQJ oxbnYyq4dYGtUuLh7h0NW9n/+L+XszpIRgiPuJSAYTsR+3yDljzzZViDgkwXYzrh O1QXQDWot5wp9Ro/R/nAsLOM2BnWfs+E1fWKVU5fD8KzCzKaIb3/wIXsOYrnWYym X4kwM9tu+PZI3OJwfXMqSC304l3c0il1HHoDYfAze9FNph7DwPGZ5wm/Dz4Oc6H8 f9J1X2py0/KyqYb3Di67LviT6VkPLPF8C9NR4Dbsz1soGgjI8XOXxogrJY6zoRaW q3x5AWm3ldgHUZmF7BuSxFHV+Y+dUgDwGbPK5hSoW6FkxOUlbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgq0YPIsOXOvFoQsDxhwI9rdM0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIyMTQ4NGItZjBmMi0z Y2E0LWJjZTUtN2U1YTY1YWE0MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgMBbDQAOU1u5NdoFW0zvU8nsbtr+fiebFqmeoqlfBnZ89Tg28kyoVj gG0j8R9XCv9cTg9Rw0FylsWUln3Qlp/t4MIz8PxhnjV1JPxfARO3/9ryQCcxdQ5L NPIdUVZFGNeu91ZgyFqGsaQ+5lAopGovQKiRiT7kZJtWSYXIk5YNyzbnvDYp7Xza A7sjkQ52fr7hs0KZ96vvPHmvA5/iQ2GuvkuxA8SPvB6y3PGGDtQrfJHlWN6zfWDK 1AbbF+ywhz9+za1o4rtZQQvze8oKVjeyEeG9wqj7pkwuUlaxT/sTb1cuKsjAPCXa 6D6ewTKbEEJ3lnV4U+mgh6EB9SVjc3A= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:49 2026 by rpki-client