$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa File: 0793e06c-647d-3a3a-a20c-4a207460adb8.roa (raw, json) Hash identifier: KezfNXLtoZBPYMLxYp0opXSMZuzmg4XYybdOF7S2f0Y= Subject key identifier: E2:C0:7E:95:EC:C8:40:3A:3F:D7:76:95:44:69:09:60:D9:1D:E9:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E029142ECBFA934D868E60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.253.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:29:14:2e:cb:fa:93:4d:86:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4c1aa43a-ffbb-4e2e-92a8-4f5b1eff88c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:64:20:7c:c3:19:9d:50:c0:4d:ec:cb:e3: e5:93:52:c0:c2:37:e7:1f:27:50:2f:65:d6:cf:39: 25:d8:33:ff:f5:a1:9f:b5:a5:db:11:9b:9b:92:36: e1:c6:6d:9a:c9:e3:69:1d:79:21:6f:63:22:a2:c0: 93:9f:06:3f:1d:28:5b:e8:cc:e1:36:fe:87:44:59: 0f:bd:ba:22:81:98:5d:1a:b0:89:75:7c:2a:a4:c1: 1a:34:ef:80:d3:8c:5f:88:a6:4a:ae:f7:c7:f2:4c: 71:1f:7b:99:d1:57:1f:5e:b2:7d:16:de:7a:63:74: 6e:a5:61:21:2b:92:5e:f5:f1:ba:66:39:c8:94:04: 1d:27:20:b8:99:45:53:b6:bd:ae:03:00:60:ee:86: 22:ed:b2:7a:91:8f:7b:07:8e:ca:01:50:16:02:e3: 41:70:92:07:19:bd:c2:e1:e3:3b:b5:3c:57:ef:47: 7c:f3:29:7e:7c:fa:1a:62:11:91:d9:32:44:e4:7a: fc:20:d8:87:cb:9b:a0:dc:34:f4:7f:6f:cc:1e:cb: 73:33:6c:5f:63:29:12:5e:7e:66:b4:87:0c:fa:4f: af:f8:b4:62:e3:8c:da:39:2e:76:0d:05:6b:7d:47: d3:a5:dc:c0:13:89:19:f2:44:e2:59:67:9a:65:83: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C0:7E:95:EC:C8:40:3A:3F:D7:76:95:44:69:09:60:D9:1D:E9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0793e06c-647d-3a3a-a20c-4a207460adb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:41:31:e0:6d:70:a3:5f:2a:c2:d5:5a:a6:64:73:92:59:09: 94:e2:94:c1:72:e2:ce:e7:30:a0:d7:db:55:03:b6:19:c0:7b: 8a:a3:64:8d:a3:f9:98:b6:6a:d2:7b:49:17:a9:38:ed:7c:73: 93:bc:c0:ad:d0:a3:27:d6:73:14:d2:87:ae:5e:e7:80:0b:fd: b7:ce:2a:2e:cd:a1:3c:ec:58:97:bb:2c:79:50:30:94:b1:d9: aa:40:f6:f0:41:50:54:3d:7a:80:84:ce:a5:b9:b5:da:f5:1d: d6:c4:a9:02:90:f0:38:d0:f0:4b:12:84:8e:e1:ad:b6:46:bc: 97:c1:dc:a8:73:73:5b:90:2c:1d:ff:7a:08:58:cd:4e:22:38: a8:2d:0a:e3:8e:0d:58:10:fe:28:23:76:3a:0f:eb:ae:fe:90: f9:79:f1:60:ab:61:84:d2:6d:ae:23:43:43:fc:8a:81:13:a8: 59:56:9a:15:e6:21:ff:ff:08:c1:0d:3a:af:b3:b8:3a:50:24: 6d:a6:ce:5c:68:f3:b2:12:e1:2e:e2:9f:47:ae:5a:6c:c4:6c: ea:36:18:30:b5:10:84:9f:aa:e4:1e:cc:72:1c:14:c5:0e:89: dd:5f:24:cc:28:94:54:02:db:93:0e:4f:d4:82:6d:c0:35:7d: 6d:55:83:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CkULsv6k02GjmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGMxYWE0M2EtZmZiYi00ZTJlLTkyYTgtNGY1YjFlZmY4OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhkIHzDGZ1QwE3sy+Plk1LAwjfnHydQL2XW zzkl2DP/9aGftaXbEZubkjbhxm2ayeNpHXkhb2MiosCTnwY/HShb6MzhNv6HRFkP vboigZhdGrCJdXwqpMEaNO+A04xfiKZKrvfH8kxxH3uZ0VcfXrJ9Ft56Y3RupWEh K5Je9fG6ZjnIlAQdJyC4mUVTtr2uAwBg7oYi7bJ6kY97B47KAVAWAuNBcJIHGb3C 4eM7tTxX70d88yl+fPoaYhGR2TJE5Hr8INiHy5ug3DT0f2/MHstzM2xfYykSXn5m tIcM+k+v+LRi44zaOS52DQVrfUfTpdzAE4kZ8kTiWWeaZYMHoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLAfpXsyEA6P9d2lURpCWDZHenUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDc5M2UwNmMtNjQ3ZC0z YTNhLWEyMGMtNGEyMDc0NjBhZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhBMeBtcKNfKsLVWqZkc5JZCZTilMFy4s7nMKDX21UDthnAe4qjZI2j +Zi2atJ7SRepOO18c5O8wK3QoyfWcxTSh65e54AL/bfOKi7NoTzsWJe7LHlQMJSx 2apA9vBBUFQ9eoCEzqW5tdr1HdbEqQKQ8DjQ8EsShI7hrbZGvJfB3Khzc1uQLB3/ eghYzU4iOKgtCuOODVgQ/igjdjoP667+kPl58WCrYYTSba4jQ0P8ioETqFlWmhXm If//CMENOq+zuDpQJG2mzlxo87IS4S7in0euWmzEbOo2GDC1EISfquQezHIcFMUO id1fJMwolFQC25MOT9SCbcA1fW1Vg3c= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:26 2026 by rpki-client