$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: GxftlYIUGI7JXfOeocerZUy4eN31NrU+0Qv3JSCkudI= Subject key identifier: 17:DC:A1:82:83:2D:2F:34:0B:74:84:D2:83:F5:C0:CC:B8:BE:DF:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE18E7E8C736762166E880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:18:e7:e8:c7:36:76:21:66:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2d786b6e-c844-46eb-a49a-8099657a118a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9a:b2:1c:f7:e8:93:02:c7:5d:79:7f:19:34: 51:b8:b7:cb:43:95:22:62:95:8b:c9:04:c4:a8:6c: f6:64:95:a8:de:b9:29:c0:ff:bc:1f:ba:7f:3a:1e: 3a:4b:d3:cb:ff:f8:98:76:92:51:82:52:c4:0c:86: 25:c3:51:d8:c9:b1:86:00:a3:c2:43:be:bc:0c:31: e4:39:11:79:20:69:cb:93:16:68:30:75:b2:70:37: f2:f8:81:b0:a8:18:68:6a:c5:4c:a8:22:70:f3:20: 7f:c6:0a:d8:4b:ab:cb:f1:f6:16:56:2f:f2:3f:67: 2c:7d:29:43:67:63:aa:6f:87:84:3a:b6:f0:38:a1: 32:80:43:39:8f:75:23:c8:bd:7a:a6:58:4f:8a:a1: 9c:98:8f:47:fb:0f:fc:eb:2b:ce:2e:05:ff:36:42: 2c:db:78:bb:65:c5:84:a2:7b:9d:13:26:df:fa:ce: fc:7b:40:3f:1b:14:b2:79:65:df:a2:6e:1a:cf:c9: 46:0f:0d:a6:06:7d:a1:22:24:44:19:42:3b:d9:d0: 14:a4:3e:37:c3:d2:95:20:e6:c4:ec:14:7a:34:37: ad:f1:a3:12:34:12:a5:86:07:b2:5f:7e:e1:bc:c3: a8:1c:97:ca:3f:2f:a5:f9:67:d7:96:b3:e0:68:09: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DC:A1:82:83:2D:2F:34:0B:74:84:D2:83:F5:C0:CC:B8:BE:DF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f1:dc:f5:b4:ad:ac:44:5c:36:8a:e4:ca:e4:b0:d3:8a:13: 2e:e4:a9:64:8a:ec:dd:a8:89:dc:46:b3:86:80:71:d2:47:92: e4:9e:d8:88:0f:d6:be:e9:57:16:27:1b:82:3e:20:81:3a:d4: 2f:90:29:12:65:e5:9c:cc:33:d7:a9:98:96:56:66:2f:d2:81: aa:af:f6:d4:50:43:3a:1f:4e:85:fc:51:85:68:6c:a3:65:f7: 7c:f1:98:39:ed:e8:79:68:4b:fa:a0:07:e1:9e:04:ef:4a:22: 04:e6:7f:fa:28:d7:a3:b9:d4:5c:ee:12:50:2c:f8:19:fc:c2: a5:d6:b8:59:15:2b:e3:ab:e4:4d:58:f8:0e:2c:cb:7b:c3:d1: 70:62:cd:65:04:73:44:e3:e1:1b:8c:5c:f9:c7:83:eb:52:2f: 6c:2f:c9:8b:4d:75:85:21:a8:86:35:89:b2:98:f0:08:23:eb: 03:5a:e6:eb:88:97:0e:8a:fc:5f:e7:ed:70:6c:37:ab:a3:32: 03:1f:ce:8a:98:67:df:72:e7:ed:75:3f:e8:65:19:d1:5c:21: 98:19:e2:2d:59:dc:ba:2b:06:f7:b4:93:1d:d8:40:08:9f:9e: a4:b8:6e:91:7f:b9:51:30:5f:44:95:a7:d7:a9:0c:dd:a6:f3: ae:56:02:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhjn6Mc2diFm6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmQ3ODZiNmUtYzg0NC00NmViLWE0OWEtODA5OTY1N2ExMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95qyHPfokwLHXXl/GTRRuLfLQ5UiYpWLyQTE qGz2ZJWo3rkpwP+8H7p/Oh46S9PL//iYdpJRglLEDIYlw1HYybGGAKPCQ768DDHk ORF5IGnLkxZoMHWycDfy+IGwqBhoasVMqCJw8yB/xgrYS6vL8fYWVi/yP2csfSlD Z2Oqb4eEOrbwOKEygEM5j3UjyL16plhPiqGcmI9H+w/86yvOLgX/NkIs23i7ZcWE onudEybf+s78e0A/GxSyeWXfom4az8lGDw2mBn2hIiREGUI72dAUpD43w9KVIObE 7BR6NDet8aMSNBKlhgeyX37hvMOoHJfKPy+l+WfXlrPgaAk2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfcoYKDLS80C3SE0oP1wMy4vt8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3x3PW0raxEXDaK5MrksNOKEy7kqWSK7N2oidxGs4aAcdJHkuSe2IgP 1r7pVxYnG4I+IIE61C+QKRJl5ZzMM9epmJZWZi/Sgaqv9tRQQzofToX8UYVobKNl 93zxmDnt6HloS/qgB+GeBO9KIgTmf/oo16O51FzuElAs+Bn8wqXWuFkVK+Or5E1Y +A4sy3vD0XBizWUEc0Tj4RuMXPnHg+tSL2wvyYtNdYUhqIY1ibKY8Agj6wNa5uuI lw6K/F/n7XBsN6ujMgMfzoqYZ99y5+11P+hlGdFcIZgZ4i1Z3LorBve0kx3YQAif nqS4bpF/uVEwX0SVp9epDN2m865WAjw= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:04 2025 by rpki-client