$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa File: 0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa (raw, json) Hash identifier: YH2NUZ8U2gY8gwPsAjWkuufz/p8BBynnM9LkHCoYE+s= Subject key identifier: 66:4A:45:07:9C:42:4A:B0:65:67:81:C9:B7:CA:90:83:F6:26:C9:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B27618305D81D9AFDBA3C11C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 172.253.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:83:05:d8:1d:9a:fd:ba:3c:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=1add2bec-e12e-4c3a-bd10-98f1c166c7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:45:fb:68:49:87:c9:93:1f:2b:b5:f1:63:8b: 1f:41:40:d2:c6:30:fe:bb:80:6c:c3:8b:74:9d:99: d9:9a:e5:ec:14:3a:b5:0c:dc:e2:bf:1d:86:71:f1: 54:72:a0:b9:8f:0c:0f:50:8f:d4:55:4c:cc:ca:63: c4:ce:cd:09:cd:83:c9:d5:23:7e:6a:44:8c:a8:00: 21:cc:2d:ce:85:28:02:08:59:ce:45:ad:51:23:30: be:1a:7f:f4:99:3f:c2:61:3a:d7:c8:6f:1b:a8:72: c4:0e:01:39:ce:05:0d:92:03:8d:63:d7:05:42:6c: bf:a5:3a:b0:86:a5:5c:2e:f1:cf:7e:6d:83:10:fe: 82:de:52:00:54:cc:cc:83:8e:63:57:df:53:af:54: e0:5d:43:1a:91:9e:92:0b:79:e3:4f:43:03:35:ef: f6:aa:4e:0e:82:87:89:f9:ad:61:c0:fc:7c:64:15: 0c:2e:c0:a4:7e:47:52:1a:66:2d:d8:b5:98:6f:c0: 98:ce:64:cc:2e:67:3c:b1:aa:ad:6a:b7:ca:f7:02: a2:70:56:3a:72:ab:3b:09:85:aa:8a:58:bd:19:12: 50:21:79:56:4c:07:25:23:80:80:a7:88:1f:ec:ab: a4:9b:e0:da:50:1b:88:61:21:eb:d5:e2:55:de:43: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4A:45:07:9C:42:4A:B0:65:67:81:C9:B7:CA:90:83:F6:26:C9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:21:cf:d6:07:19:5f:dd:0b:14:07:6d:60:d8:67:8b:63:69: 11:5c:5d:c0:cd:b3:dc:f5:5a:37:0c:dc:65:2a:1b:dd:e4:2d: fe:0b:5a:22:c2:ee:dc:4b:b3:a3:3e:72:d9:84:ac:5b:f3:93: d9:52:38:90:8d:8c:f5:e9:f1:a5:d5:b4:be:07:80:f5:94:47: 92:92:45:23:ba:b8:b0:8a:bf:c2:db:47:6c:85:3b:5d:0c:c4: 5b:61:ff:7a:dd:2c:12:53:b8:8a:fe:df:5c:d4:42:e6:03:49: 19:38:c3:37:90:75:92:e5:91:b1:55:9b:fa:64:e4:0e:3b:58: 81:01:f3:0e:ef:e2:55:d0:be:9e:a8:e6:6a:c1:e8:d3:d0:a0: 45:15:36:5b:77:43:3a:fb:42:2c:99:ed:f4:88:e9:b7:e1:6e: cd:f3:19:15:25:57:61:08:a3:6d:c2:26:61:1d:62:47:eb:b3: c7:6b:a8:a4:d8:11:70:9e:f0:8a:d3:8c:1e:ab:c5:25:e6:50: 60:72:11:8b:07:79:a8:eb:30:5f:d6:3e:66:f0:4f:41:67:35: af:5c:67:16:6f:d7:7f:86:c0:02:9e:fb:8e:aa:95:7a:82:b6: 2e:04:d2:45:3e:4e:dd:4a:84:4a:cd:e1:ec:8f:e8:6d:85:63: ae:12:a8:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYYMF2B2a/bo8EcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk MWFkZDJiZWMtZTEyZS00YzNhLWJkMTAtOThmMWMxNjZjN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEX7aEmHyZMfK7XxY4sfQUDSxjD+u4Bsw4t0 nZnZmuXsFDq1DNzivx2GcfFUcqC5jwwPUI/UVUzMymPEzs0JzYPJ1SN+akSMqAAh zC3OhSgCCFnORa1RIzC+Gn/0mT/CYTrXyG8bqHLEDgE5zgUNkgONY9cFQmy/pTqw hqVcLvHPfm2DEP6C3lIAVMzMg45jV99Tr1TgXUMakZ6SC3njT0MDNe/2qk4OgoeJ +a1hwPx8ZBUMLsCkfkdSGmYt2LWYb8CYzmTMLmc8saqtarfK9wKicFY6cqs7CYWq ili9GRJQIXlWTAclI4CAp4gf7Kukm+DaUBuIYSHr1eJV3kNMRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZKRQecQkqwZWeBybfKkIP2JskjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0ZmIxMGMtOTk5Mi0z YTdhLThhNTAtOTRiOGMyMWFjZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAchz9YHGV/dCxQHbWDYZ4tjaRFcXcDNs9z1WjcM3GUqG93kLf4LWiLC 7txLs6M+ctmErFvzk9lSOJCNjPXp8aXVtL4HgPWUR5KSRSO6uLCKv8LbR2yFO10M xFth/3rdLBJTuIr+31zUQuYDSRk4wzeQdZLlkbFVm/pk5A47WIEB8w7v4lXQvp6o 5mrB6NPQoEUVNlt3Qzr7QiyZ7fSI6bfhbs3zGRUlV2EIo23CJmEdYkfrs8drqKTY EXCe8IrTjB6rxSXmUGByEYsHeajrMF/WPmbwT0FnNa9cZxZv13+GwAKe+46qlXqC ti4E0kU+Tt1KhErN4eyP6G2FY64SqOg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:25 2025 by rpki-client