$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa File: 0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa (raw, json) Hash identifier: Dzn2OttLIHDWrEDLJL15zFUmUVOwEwZLCKP/dyA5Lco= Subject key identifier: 27:BF:3E:F1:15:F1:10:60:42:2A:DD:9E:07:6F:65:63:4E:18:F6:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2C408BB2955E1923B180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 172.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2c:40:8b:b2:95:5e:19:23:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d3f4fde3-dd9a-435f-a556-f519b7af7db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:05:d6:e2:7d:cb:f8:57:59:b6:2d:ad:82: da:a0:99:1a:9f:1d:03:b5:b1:05:d8:47:32:26:a0: 2c:14:ef:da:b5:80:91:0a:8b:4f:bd:b8:f7:12:1e: 18:ea:31:ff:7f:63:6c:96:85:a7:99:42:38:77:d8: eb:17:03:1a:f8:7d:38:1c:49:23:f3:4b:6d:c7:a6: 10:12:3f:c2:27:92:02:7d:66:94:ff:69:b2:ee:bd: 03:d6:d6:eb:b2:67:ec:e0:88:d4:b4:f6:45:fc:19: 86:47:48:35:b1:a4:78:4a:4b:2d:90:eb:6e:a4:19: 88:76:a8:20:a6:d2:50:86:6d:eb:56:23:84:99:82: f0:d6:9a:a4:9b:60:5c:0c:9e:c1:47:82:aa:d8:19: b3:04:46:7a:df:93:b8:e8:5b:df:38:4d:38:95:4f: 78:f9:13:2a:45:e3:4d:1c:1f:e7:a1:f4:e2:3f:76: 17:12:68:16:c8:e3:df:20:ab:e7:2a:83:2f:25:dd: ff:42:59:cd:f9:0f:bf:40:6b:69:5a:b5:df:b7:a6: 58:69:a4:d8:99:4f:2e:24:8f:64:be:84:2e:cf:d3: 7c:0a:dd:7e:f0:12:4c:11:7b:f8:11:66:bb:69:12: 68:8a:ed:ad:86:70:70:40:77:9c:e7:f9:d8:52:2a: 2a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BF:3E:F1:15:F1:10:60:42:2A:DD:9E:07:6F:65:63:4E:18:F6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d6:79:d1:c0:73:32:e4:ea:b2:b1:b3:db:17:d2:6c:f1:b5: be:63:25:fd:bf:50:ea:8f:fd:a5:14:bc:cc:bb:b4:fa:6e:70: 89:76:e2:aa:f8:9c:45:7c:1c:02:78:26:5a:69:f4:7d:59:f0: e2:b9:81:b4:53:88:a0:b8:93:c9:38:5b:64:7f:b5:23:3c:3e: d8:26:b3:b7:30:88:7a:26:c0:e5:a0:26:81:0f:85:ff:03:c4: 92:e1:bc:48:92:c0:ac:fa:38:f1:6c:5c:81:a7:a1:24:58:ba: 4b:f6:1c:6a:d7:32:be:e7:96:13:b9:df:ad:2e:41:f1:a3:52: 24:ad:9c:37:27:5e:ea:76:1e:27:90:2c:6a:bb:c2:bd:f8:59: a5:e2:6a:86:3e:88:85:01:ec:64:ec:46:13:b5:ee:6f:a7:f0: 39:e5:c7:30:34:d9:3a:64:00:bf:03:e3:7d:a7:3a:5b:c3:ab: e1:5d:f4:12:c4:d9:32:97:c3:b8:21:1c:c9:8e:fd:a7:d2:c4: 70:c0:02:1f:1f:aa:35:0e:60:e4:21:3a:a9:88:92:d2:15:f9: b3:10:ca:58:cc:3f:ab:b2:ce:cd:72:ce:ba:a9:8a:99:47:05: c0:38:1e:19:29:bd:51:63:86:c1:1f:7b:cb:d5:59:93:ce:c0: 80:b5:5f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzixAi7KVXhkjsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDNmNGZkZTMtZGQ5YS00MzVmLWE1NTYtZjUxOWI3YWY3ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDwF1uJ9y/hXWbYtrYLaoJkanx0DtbEF2Ecy JqAsFO/atYCRCotPvbj3Eh4Y6jH/f2NsloWnmUI4d9jrFwMa+H04HEkj80ttx6YQ Ej/CJ5ICfWaU/2my7r0D1tbrsmfs4IjUtPZF/BmGR0g1saR4SkstkOtupBmIdqgg ptJQhm3rViOEmYLw1pqkm2BcDJ7BR4Kq2BmzBEZ635O46FvfOE04lU94+RMqReNN HB/nofTiP3YXEmgWyOPfIKvnKoMvJd3/QlnN+Q+/QGtpWrXft6ZYaaTYmU8uJI9k voQuz9N8Ct1+8BJMEXv4EWa7aRJoiu2thnBwQHec5/nYUioq7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe/PvEV8RBgQirdngdvZWNOGPbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGQ5ZDNjMTQtMzczNi0z M2E0LThkZWYtNmM0ZWIyZTAxMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7WedHAczLk6rKxs9sX0mzxtb5jJf2/UOqP/aUUvMy7tPpucIl24qr4 nEV8HAJ4Jlpp9H1Z8OK5gbRTiKC4k8k4W2R/tSM8Ptgms7cwiHomwOWgJoEPhf8D xJLhvEiSwKz6OPFsXIGnoSRYukv2HGrXMr7nlhO5360uQfGjUiStnDcnXup2HieQ LGq7wr34WaXiaoY+iIUB7GTsRhO17m+n8DnlxzA02TpkAL8D432nOlvDq+Fd9BLE 2TKXw7ghHMmO/afSxHDAAh8fqjUOYOQhOqmIktIV+bMQyljMP6uyzs1yzrqpiplH BcA4HhkpvVFjhsEfe8vVWZPOwIC1X/Y= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:07 2025 by rpki-client