$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: OxMm4DrfVzofk8TIYDogG4vA13p24Lsl7vjXjkPBhfk= Subject key identifier: A9:3C:2B:20:9B:4D:8D:75:D5:CA:FC:6F:8A:D0:B8:FE:B3:D5:EC:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EDDD1D0E84FE7A2C7880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ed:dd:1d:0e:84:fe:7a:2c:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=af66e7b3-bbc8-4eb3-9573-2a1166d81a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:3d:c6:13:56:b1:bd:0f:5d:b7:b1:50:e8: 83:cc:45:48:5a:7b:92:36:58:23:71:d2:fc:25:b8: 64:0a:23:8f:e8:a7:f9:77:85:6f:22:d3:d2:52:20: 89:f5:cd:d8:48:5c:28:39:74:9c:cc:5e:92:37:2f: 38:5c:bf:b3:f2:19:fe:2c:66:9c:c2:b5:28:3a:6c: f9:22:b1:dd:59:82:ba:ac:92:04:c2:0e:48:09:c3: 24:b2:72:43:67:87:ec:8f:88:30:81:88:00:6f:34: e9:43:c4:6a:90:fd:ea:1a:20:0b:d5:c4:31:c7:f8: 88:66:05:96:f3:c8:e0:d1:98:44:89:3b:41:49:25: 59:2f:15:9f:fe:66:2f:d8:95:2f:b4:52:30:a0:90: ca:aa:33:2e:f2:01:9b:0c:98:1a:d6:3b:08:ea:49: a8:25:90:e5:c3:8a:a1:6c:c3:87:60:0c:2b:cf:6e: 24:1a:5f:16:90:24:d0:9e:73:34:58:78:c0:e7:f6: c0:05:bf:aa:fd:2f:9a:62:d0:b5:ad:30:4e:bf:60: c7:43:6c:81:44:ab:75:56:f0:ad:50:9f:a0:d8:c1: b9:4e:19:9a:5d:50:f2:d3:7c:f2:1d:10:4f:ba:67: e7:4b:59:49:31:e2:7c:9b:89:f3:2c:4d:6e:8c:30: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3C:2B:20:9B:4D:8D:75:D5:CA:FC:6F:8A:D0:B8:FE:B3:D5:EC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b4:fb:c6:ea:b1:57:89:56:b1:fc:c6:44:c3:4a:0e:55:5f: a0:3b:54:82:c5:99:5a:64:a5:ec:22:e5:79:a8:2c:c2:13:ce: cc:66:40:52:c3:38:f5:84:7d:f1:4f:b0:f5:96:7b:40:cd:01: b8:80:b5:2f:2b:7d:78:6f:db:7e:00:79:d2:9f:7a:cd:8b:6c: bb:c0:a1:3c:52:59:d0:8f:11:84:eb:57:88:37:0e:1e:05:67: d8:a9:0c:9b:4e:7e:13:c2:34:9b:f9:08:e0:ab:95:4a:c5:f8: 03:65:f8:3b:d6:07:cb:07:98:34:f4:67:00:c5:76:e3:fe:47: 8d:44:8f:88:5b:7e:ca:cf:5c:f7:53:9b:d0:00:f4:71:5f:bd: 9a:b0:9c:07:bb:3b:17:d6:c8:f8:a5:3a:9d:c9:61:0f:6a:fe: 11:43:20:47:60:0d:67:d9:c3:f4:41:f5:dc:e7:a3:89:b7:a2: f0:80:68:5c:63:5e:f7:53:f3:70:e1:2e:34:24:30:b5:aa:78: 62:b0:8d:fb:f6:e9:aa:e9:a5:13:51:3f:42:7d:25:bd:45:3d: dd:12:fe:80:31:3c:08:a6:15:bc:d9:8d:b9:a2:af:28:04:9a: 97:5a:bb:99:c0:7c:ea:d4:28:ac:03:c7:d1:8e:47:e8:2a:b2: b0:d1:ab:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O3dHQ6E/noseIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWY2NmU3YjMtYmJjOC00ZWIzLTk1NzMtMmExMTY2ZDgxYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Y9xhNWsb0PXbexUOiDzEVIWnuSNlgjcdL8 JbhkCiOP6Kf5d4VvItPSUiCJ9c3YSFwoOXSczF6SNy84XL+z8hn+LGacwrUoOmz5 IrHdWYK6rJIEwg5ICcMksnJDZ4fsj4gwgYgAbzTpQ8RqkP3qGiAL1cQxx/iIZgWW 88jg0ZhEiTtBSSVZLxWf/mYv2JUvtFIwoJDKqjMu8gGbDJga1jsI6kmoJZDlw4qh bMOHYAwrz24kGl8WkCTQnnM0WHjA5/bABb+q/S+aYtC1rTBOv2DHQ2yBRKt1VvCt UJ+g2MG5ThmaXVDy03zyHRBPumfnS1lJMeJ8m4nzLE1ujDAX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk8KyCbTY111cr8b4rQuP6z1exEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi0+8bqsVeJVrH8xkTDSg5VX6A7VILFmVpkpewi5XmoLMITzsxmQFLD OPWEffFPsPWWe0DNAbiAtS8rfXhv234AedKfes2LbLvAoTxSWdCPEYTrV4g3Dh4F Z9ipDJtOfhPCNJv5COCrlUrF+ANl+DvWB8sHmDT0ZwDFduP+R41Ej4hbfsrPXPdT m9AA9HFfvZqwnAe7OxfWyPilOp3JYQ9q/hFDIEdgDWfZw/RB9dzno4m3ovCAaFxj XvdT83DhLjQkMLWqeGKwjfv26arppRNRP0J9Jb1FPd0S/oAxPAimFbzZjbmirygE mpdau5nAfOrUKKwDx9GOR+gqsrDRqyk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:15 2026 by rpki-client