$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/078ae780-9433-3cba-86dd-b52c0d351714.roa File: 078ae780-9433-3cba-86dd-b52c0d351714.roa (raw, json) Hash identifier: B41U/CqQmuC2PFhFGQYIhFAAqCp8rV1+M3voZBLifaQ= Subject key identifier: 3C:0E:38:E2:C8:F1:A9:C9:3C:E5:49:3B:6B:D5:FB:C0:63:98:0D:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D32D4DE4764173C9005524580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/078ae780-9433-3cba-86dd-b52c0d351714.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 172.253.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:de:47:64:17:3c:90:05:52:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=35d13374-665c-475c-8745-7cfa293f6f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:d7:31:08:aa:8c:5c:b3:42:bb:5e:7f:93: 06:17:10:f4:dd:02:18:69:86:66:d6:d1:65:30:f9: 87:7c:81:ba:07:51:3e:bb:c4:dd:b6:91:a1:b9:85: b8:be:1c:f0:17:08:4b:7e:d2:b4:c8:9c:82:b1:07: f7:23:3e:5c:1e:5e:18:4b:b8:54:64:a7:03:3c:06: 92:6c:bc:ed:c0:84:66:80:0e:e3:f5:30:74:62:a2: 0b:43:a1:72:80:0d:e4:46:d4:9c:93:bd:c8:78:5f: 3f:ab:e1:c2:2e:c1:a1:d0:49:0e:3f:c6:5c:1c:e2: 67:d2:f1:0d:88:e3:9f:0f:b3:d2:87:fb:44:43:95: d6:21:a4:f9:77:d8:90:11:ef:be:59:b3:49:e4:dd: 99:21:f1:1f:04:cf:39:50:dc:d6:84:24:7e:ba:f2: 6a:2a:06:16:cf:b4:7d:51:ec:49:81:19:f0:bf:4d: 3c:a5:53:24:bd:24:40:b7:55:82:20:ae:e0:f9:c8: 4b:24:fe:b9:3c:98:64:00:f0:a9:98:8a:47:33:b9: f5:ff:ec:0b:c5:b1:2e:08:35:2a:fd:3a:61:61:d1: a2:e5:9c:d6:5d:79:d5:ce:36:a3:53:7f:c9:38:b6: ed:4f:85:b6:e9:c9:a4:d0:bf:5a:be:b7:94:40:9f: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:38:E2:C8:F1:A9:C9:3C:E5:49:3B:6B:D5:FB:C0:63:98:0D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/078ae780-9433-3cba-86dd-b52c0d351714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bb:43:fe:a5:ea:7c:ca:61:aa:50:9c:13:03:71:0d:24:8c: 3f:ec:b8:3a:aa:1f:06:c0:e1:9d:4f:fe:ec:29:73:b9:19:bd: f5:2e:eb:9a:a0:b6:a1:fb:db:37:3c:90:62:ee:ed:cd:ca:c0: cb:fc:5f:c4:9a:f3:73:73:a3:03:2c:56:fc:e1:fa:c9:3c:78: 04:0b:44:af:aa:b1:0a:85:81:b1:4b:4c:95:d7:ab:3c:9b:02: 24:b4:4e:cb:b4:36:1c:ca:18:a7:5b:40:82:cf:dd:ac:97:46: 6a:5a:a7:de:fa:f5:df:77:ff:27:f8:c2:01:75:1b:9b:1a:d4: 15:c6:5a:ed:68:6d:f6:44:6a:d4:39:98:0f:8e:45:e8:56:ad: d4:ff:4d:d9:dd:3a:31:43:3e:cc:db:36:16:5a:54:b8:d2:cf: 65:f7:82:a5:62:98:82:5d:94:b9:09:78:15:5c:62:ab:92:86: 08:cb:f2:86:4a:9b:ab:29:71:53:8e:c7:8a:1e:59:3f:0e:2a: 07:2a:01:ec:d4:aa:b4:50:49:21:e6:45:5d:5d:4b:13:8b:b5: ce:af:e8:7e:66:e9:fa:13:06:9f:c0:aa:eb:52:30:d1:14:a9: 3a:6e:c9:90:b6:03:83:87:ef:36:74:a4:20:62:27:11:8f:1c: aa:85:ee:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1N5HZBc8kAVSRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk MzVkMTMzNzQtNjY1Yy00NzVjLTg3NDUtN2NmYTI5M2Y2ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB3XMQiqjFyzQrtef5MGFxD03QIYaYZm1tFl MPmHfIG6B1E+u8TdtpGhuYW4vhzwFwhLftK0yJyCsQf3Iz5cHl4YS7hUZKcDPAaS bLztwIRmgA7j9TB0YqILQ6FygA3kRtSck73IeF8/q+HCLsGh0EkOP8ZcHOJn0vEN iOOfD7PSh/tEQ5XWIaT5d9iQEe++WbNJ5N2ZIfEfBM85UNzWhCR+uvJqKgYWz7R9 UexJgRnwv008pVMkvSRAt1WCIK7g+chLJP65PJhkAPCpmIpHM7n1/+wLxbEuCDUq /TphYdGi5ZzWXXnVzjajU3/JOLbtT4W26cmk0L9avreUQJ/SLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwOOOLI8anJPOVJO2vV+8BjmA2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc4YWU3ODAtOTQzMy0z Y2JhLTg2ZGQtYjUyYzBkMzUxNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa7Q/6l6nzKYapQnBMDcQ0kjD/suDqqHwbA4Z1P/uwpc7kZvfUu65qg tqH72zc8kGLu7c3KwMv8X8Sa83NzowMsVvzh+sk8eAQLRK+qsQqFgbFLTJXXqzyb AiS0Tsu0NhzKGKdbQILP3ayXRmpap9769d93/yf4wgF1G5sa1BXGWu1obfZEatQ5 mA+ORehWrdT/TdndOjFDPszbNhZaVLjSz2X3gqVimIJdlLkJeBVcYquShgjL8oZK m6spcVOOx4oeWT8OKgcqAezUqrRQSSHmRV1dSxOLtc6v6H5m6foTBp/AqutSMNEU qTpuyZC2A4OH7zZ0pCBiJxGPHKqF7n0= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:28 2026 by rpki-client