$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa File: 0915a78c-e339-34ed-bcdd-c8c141febb0d.roa (raw, json) Hash identifier: dLjR7Uci+NMKYK+rvBmhY5dGRwWZKb8Ho2XfXsQPpbw= Subject key identifier: 68:9C:39:41:2C:6D:BA:1B:0C:E4:D9:B3:32:35:52:88:09:DD:57:94 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB826F3DC9EA5915D90C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b8:26:f3:dc:9e:a5:91:5d:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=7fc40f2c-0436-4045-92a1-ff118eaa3f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:e8:26:af:fa:df:20:eb:2a:d5:2e:c6:83: 79:65:c4:ef:9b:9b:d1:78:18:f3:3b:2f:e4:78:ae: ad:2e:72:c0:7d:eb:18:b3:e7:8d:69:c2:2a:da:cd: ee:ce:01:a3:32:80:7a:88:53:b5:c9:0b:fe:d0:fe: 35:55:94:06:c5:9a:b8:8c:3f:8e:59:4d:46:2f:de: 5a:5e:8f:01:4b:18:f3:b3:15:16:70:9b:7f:cc:0f: 8f:4d:95:5a:b0:19:1d:53:90:dc:2a:52:0b:1b:a6: e5:92:0d:ef:90:c7:a1:ea:7f:1f:c4:d3:e5:75:df: 5e:d5:1f:2f:e4:24:1f:0f:35:64:f7:bf:be:6c:b3: bd:83:45:80:fd:43:3b:02:39:e1:3f:d2:85:7e:64: 24:84:b4:aa:36:b5:81:2b:c0:0f:8b:eb:a7:e2:b1: 6d:4d:d7:1e:c5:b6:dd:7f:71:ff:05:81:35:6a:14: 7d:1b:29:50:59:ed:64:c8:c1:23:f5:42:46:5d:6e: 30:ff:17:e1:be:23:8a:7d:3e:45:e0:34:53:ed:e7: 07:45:6d:96:69:ac:b1:6d:db:49:5a:77:b9:ce:b5: 31:31:1b:3e:dc:70:79:49:8c:13:60:ef:d1:a8:1a: 91:c7:ad:54:b0:47:11:b6:fe:94:66:d1:d4:da:31: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9C:39:41:2C:6D:BA:1B:0C:E4:D9:B3:32:35:52:88:09:DD:57:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:97:c7:bd:1a:ac:c5:a7:32:e7:78:71:eb:c7:99:a2:99:1f: ac:66:1f:95:06:e1:33:de:b7:bc:f0:f3:25:e2:f5:be:ca:11: 7d:91:40:01:76:1f:f0:da:c4:39:7b:6e:4e:35:f7:33:1e:88: 45:9e:64:0a:4f:74:d0:62:65:97:f1:50:b7:c3:d5:a4:2c:fa: 84:05:a7:8c:ec:d4:79:e4:38:77:a8:47:53:5e:a2:3b:6b:6a: d4:8c:e1:f2:5c:14:f5:e6:05:6e:17:ce:e1:6a:5a:63:ab:fc: 23:0b:29:ab:05:54:8f:e4:ac:57:7a:2e:c2:a2:6e:23:81:54: 92:75:28:e6:25:67:9c:5d:94:14:9c:aa:08:0f:14:3d:09:57: cc:8a:11:50:62:77:40:18:77:45:fb:33:00:5b:39:1f:96:92: bc:51:e6:e3:dd:ff:30:1f:ff:93:d7:b3:fa:71:3d:29:ed:d2: df:26:59:89:81:7b:86:fb:ab:73:9d:da:56:00:49:e4:52:09: 29:9a:56:5b:c9:3c:95:ef:91:b5:86:4c:94:16:6e:5d:c2:33: 16:5d:c5:0c:dc:23:cc:53:bd:97:dd:49:59:23:2d:14:20:6f: eb:ac:6e:06:0b:00:b9:cf:5b:ba:3e:34:ec:aa:7c:56:f4:d4: 50:bf:0f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Lgm89yepZFdkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk N2ZjNDBmMmMtMDQzNi00MDQ1LTkyYTEtZmYxMThlYWEzZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dXoJq/63yDrKtUuxoN5ZcTvm5vReBjzOy/k eK6tLnLAfesYs+eNacIq2s3uzgGjMoB6iFO1yQv+0P41VZQGxZq4jD+OWU1GL95a Xo8BSxjzsxUWcJt/zA+PTZVasBkdU5DcKlILG6blkg3vkMeh6n8fxNPldd9e1R8v 5CQfDzVk97++bLO9g0WA/UM7AjnhP9KFfmQkhLSqNrWBK8APi+un4rFtTdcexbbd f3H/BYE1ahR9GylQWe1kyMEj9UJGXW4w/xfhviOKfT5F4DRT7ecHRW2WaayxbdtJ Wne5zrUxMRs+3HB5SYwTYO/RqBqRx61UsEcRtv6UZtHU2jFDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGicOUEsbbobDOTZszI1UogJ3VeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDkxNWE3OGMtZTMzOS0z NGVkLWJjZGQtYzhjMTQxZmViYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiXx70arMWnMud4cevHmaKZH6xmH5UG4TPet7zw8yXi9b7KEX2RQAF2 H/DaxDl7bk419zMeiEWeZApPdNBiZZfxULfD1aQs+oQFp4zs1HnkOHeoR1Neojtr atSM4fJcFPXmBW4XzuFqWmOr/CMLKasFVI/krFd6LsKibiOBVJJ1KOYlZ5xdlBSc qggPFD0JV8yKEVBid0AYd0X7MwBbOR+WkrxR5uPd/zAf/5PXs/pxPSnt0t8mWYmB e4b7q3Od2lYASeRSCSmaVlvJPJXvkbWGTJQWbl3CMxZdxQzcI8xTvZfdSVkjLRQg b+usbgYLALnPW7o+NOyqfFb01FC/Dz0= -----END CERTIFICATE-----Generated at Fri Oct 17 10:51:10 2025 by rpki-client