$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa File: 0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa (raw, json) Hash identifier: rFbzroQgXVNGf4XkeohBkmRWBle/OYdW5/oUF3JJ7bM= Subject key identifier: BE:15:77:83:9B:E5:17:D3:DF:0F:4D:F3:23:D4:B5:6A:56:E5:29:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E100A69ED34528FDDAA280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:00:a6:9e:d3:45:28:fd:da:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d78c57d6-6ea9-45cf-9018-364fa5222f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:1b:bd:3e:de:42:f2:e7:e4:93:2e:1a:36: e8:7e:c5:58:a2:43:64:6e:5f:da:cb:8e:4c:44:38: ef:3c:fb:44:b7:a8:2e:c6:ff:a6:a9:53:bb:35:c6: 1e:24:a4:58:9f:f1:08:d3:6f:fa:0b:c5:52:f4:5a: 6e:3a:ee:0f:b6:dc:60:5e:81:a1:a9:30:1a:6e:8e: a5:8e:f8:af:46:59:0b:ad:de:ff:02:1b:38:96:b9: d6:74:2a:a1:c6:13:45:c9:47:4c:a1:5e:59:1a:ad: 27:b8:4d:fb:0b:5a:58:58:82:ae:b0:9a:7d:27:2c: 6f:67:13:c4:a5:f5:8c:8a:aa:e7:d7:45:08:a2:43: 4c:02:85:08:2c:0d:d6:0e:fc:80:b1:68:04:ef:3b: 69:d7:3a:0b:e1:ba:aa:9a:ed:07:c1:ec:62:cc:89: 93:59:fd:09:f9:ae:7c:e1:88:9f:c1:24:25:58:b2: a4:9d:cf:48:d5:d3:9a:e8:7f:84:b2:a2:fc:03:22: 0a:5f:58:76:33:c5:e8:55:f3:c9:20:cc:52:26:df: 81:94:28:b3:16:8b:39:72:eb:5c:67:66:3f:4f:3e: 54:2c:eb:95:8b:55:2a:79:ff:9a:73:34:e6:ad:b9: d2:a6:97:05:57:6b:4b:cd:dd:07:6d:0e:51:97:bc: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:15:77:83:9B:E5:17:D3:DF:0F:4D:F3:23:D4:B5:6A:56:E5:29:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1f:d6:16:0f:e3:4c:ac:90:5f:90:fb:1a:a3:f4:03:d2:41: 1f:c7:8b:b3:b8:58:af:6f:0f:6c:14:be:47:a2:6e:82:cb:7a: 4b:c1:3b:a5:fa:21:57:cf:98:af:70:c0:2b:af:57:a9:67:de: 77:d8:64:11:98:51:a1:c0:2e:3f:cc:61:eb:64:c3:49:eb:70: 11:c3:05:92:df:31:a7:9a:52:40:39:a2:36:ec:cc:f5:b2:de: e0:b7:b8:af:1b:d3:de:d5:69:fe:9b:f3:74:2d:07:1e:cd:ba: 2e:8b:2f:a2:88:f2:70:9e:fd:ee:10:ec:12:57:50:4e:48:18: ac:b7:d5:1f:e1:9e:20:72:d5:e2:aa:2c:84:a7:17:5d:37:be: c1:d9:2a:66:74:bb:e5:8d:ab:2b:35:23:21:3c:d6:0e:2c:ea: 31:41:4e:3a:9f:3d:22:0b:a5:6c:37:bd:b5:d7:37:01:64:94: 8c:74:d7:94:35:92:15:69:95:34:ed:78:55:bd:fb:19:11:7d: ea:40:71:c2:22:f4:0d:45:58:68:9c:71:da:75:78:2e:fa:d8: fa:22:07:34:82:97:9e:58:35:ff:6f:c3:86:e6:e3:ce:05:71: 66:46:85:24:b2:c5:7b:8d:aa:58:9e:17:64:00:7b:80:0c:22: bc:32:f8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QCmntNFKP3aooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDc4YzU3ZDYtNmVhOS00NWNmLTkwMTgtMzY0ZmE1MjIyZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAsbvT7eQvLn5JMuGjbofsVYokNkbl/ay45M RDjvPPtEt6guxv+mqVO7NcYeJKRYn/EI02/6C8VS9FpuOu4PttxgXoGhqTAabo6l jvivRlkLrd7/Ahs4lrnWdCqhxhNFyUdMoV5ZGq0nuE37C1pYWIKusJp9JyxvZxPE pfWMiqrn10UIokNMAoUILA3WDvyAsWgE7ztp1zoL4bqqmu0HwexizImTWf0J+a58 4YifwSQlWLKknc9I1dOa6H+EsqL8AyIKX1h2M8XoVfPJIMxSJt+BlCizFos5cutc Z2Y/Tz5ULOuVi1Uqef+aczTmrbnSppcFV2tLzd0HbQ5Rl7w5PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4Vd4Ob5RfT3w9N8yPUtWpW5Sn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGQ5ZDNjMTQtMzczNi0z M2E0LThkZWYtNmM0ZWIyZTAxMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4f1hYP40yskF+Q+xqj9APSQR/Hi7O4WK9vD2wUvkeiboLLekvBO6X6 IVfPmK9wwCuvV6ln3nfYZBGYUaHALj/MYetkw0nrcBHDBZLfMaeaUkA5ojbszPWy 3uC3uK8b097Vaf6b83QtBx7Nui6LL6KI8nCe/e4Q7BJXUE5IGKy31R/hniBy1eKq LISnF103vsHZKmZ0u+WNqys1IyE81g4s6jFBTjqfPSILpWw3vbXXNwFklIx015Q1 khVplTTteFW9+xkRfepAccIi9A1FWGiccdp1eC762PoiBzSCl55YNf9vw4bm484F cWZGhSSyxXuNqlieF2QAe4AMIrwy+G4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:38 2026 by rpki-client