$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa File: 1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa (raw, json) Hash identifier: b+zX1q8ZcCaW8CdU3jE6p7sFYcU4rzTCJyoUGTb9PCs= Subject key identifier: 77:1B:7F:45:AB:60:CF:C5:25:4C:71:A3:62:53:6C:2A:E5:3C:5D:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5EDFC54B79E3AD2D3E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5e:df:c5:4b:79:e3:ad:2d:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=eaefd495-f326-49ed-9ccb-9e45eb48ed64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:d7:b4:1e:bd:46:4a:ef:b2:99:b5:7f:f9: e9:16:4a:19:1d:10:3f:aa:f4:11:a4:bf:96:9e:76: 3b:34:61:38:31:ce:22:dc:cc:f3:8b:28:bd:d2:bd: d5:6d:ef:98:ef:2c:f9:a8:94:3c:5e:28:50:78:12: cb:38:a8:95:88:23:f4:f2:1c:3b:df:ba:a6:e9:c4: ed:73:39:6b:89:47:d4:b8:88:95:c6:fd:78:a9:47: 04:8e:c4:d0:e9:ff:9b:28:db:df:e8:61:cb:36:3f: be:47:69:06:6e:e1:c0:c7:e6:69:0a:12:75:7f:4e: 48:ba:0f:1d:c8:07:b9:01:f1:bf:9e:6f:c6:4d:12: 5a:62:5d:24:83:cd:45:4a:38:dc:b5:32:d8:17:23: f3:fb:71:d6:3c:af:bb:88:bd:78:17:51:71:5d:9b: b1:33:14:35:85:43:18:03:f5:40:01:c1:ec:af:3e: 2a:74:8e:85:02:9b:fa:88:df:d9:d2:29:db:e1:9f: 03:54:b8:3f:52:29:4b:dc:9a:d1:2b:96:08:7a:2c: 19:68:f8:92:d3:8d:39:c7:2e:2c:d1:73:48:c5:10: 36:5c:ec:4d:7b:93:89:be:7b:62:26:83:19:52:4c: b1:1c:38:d9:92:a2:71:f6:4f:87:8f:60:06:7b:70: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1B:7F:45:AB:60:CF:C5:25:4C:71:A3:62:53:6C:2A:E5:3C:5D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c248afd-62cf-36b5-8ab6-65b20c0a09b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:ef:fc:0a:c5:88:28:1e:af:31:11:bd:ed:e1:04:90:5f: a2:f0:99:be:d7:fd:2c:c7:f3:8d:96:99:42:f6:ac:ec:c1:08: 0e:df:91:eb:61:d2:fc:5e:ba:2a:f7:35:f3:78:21:f6:33:e8: f0:01:26:99:6a:99:68:ec:1c:fc:06:0c:13:37:1d:ab:a6:e5: b2:84:97:2f:6b:d3:fb:c3:14:95:ee:12:31:1c:f3:1b:be:e9: 90:bb:ca:ae:a5:b8:ba:99:35:92:5b:a2:f1:b6:64:fe:e5:c9: 4c:c5:f6:e1:7b:91:ff:45:ce:77:59:7a:41:dd:fe:c9:31:25: bd:46:d2:c1:c8:4b:0f:dc:52:f8:c3:0d:09:35:dc:32:29:19: 5b:ab:2b:62:4e:e0:8a:a7:c2:4c:a5:de:0d:3a:37:6b:96:52: b3:83:e5:ab:53:3a:2d:27:30:f5:4d:12:7e:c2:1d:b0:71:84: de:31:b2:f8:1c:62:a1:96:03:19:8c:71:90:17:bf:7e:92:08: 66:ed:75:00:55:2f:c4:2a:8c:6e:77:98:f7:33:b3:e2:5e:3c: 87:57:40:d4:58:2b:bf:41:f5:03:16:f3:99:0a:6d:58:cf:25: 2b:5b:12:3e:29:43:25:09:52:68:da:a7:60:92:fc:16:29:0c: 3d:9a:83:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzV7fxUt5460tPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWFlZmQ0OTUtZjMyNi00OWVkLTljY2ItOWU0NWViNDhlZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogzXtB69Rkrvspm1f/npFkoZHRA/qvQRpL+W nnY7NGE4Mc4i3Mzziyi90r3Vbe+Y7yz5qJQ8XihQeBLLOKiViCP08hw737qm6cTt czlriUfUuIiVxv14qUcEjsTQ6f+bKNvf6GHLNj++R2kGbuHAx+ZpChJ1f05Iug8d yAe5AfG/nm/GTRJaYl0kg81FSjjctTLYFyPz+3HWPK+7iL14F1FxXZuxMxQ1hUMY A/VAAcHsrz4qdI6FApv6iN/Z0inb4Z8DVLg/UilL3JrRK5YIeiwZaPiS0405xy4s 0XNIxRA2XOxNe5OJvntiJoMZUkyxHDjZkqJx9k+Hj2AGe3ClcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcbf0WrYM/FJUxxo2JTbCrlPF3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWMyNDhhZmQtNjJjZi0z NmI1LThhYjYtNjViMjBjMGEwOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYb7/wKxYgoHq8xEb3t4QSQX6Lwmb7X/SzH842WmUL2rOzBCA7fketh 0vxeuir3NfN4IfYz6PABJplqmWjsHPwGDBM3Haum5bKEly9r0/vDFJXuEjEc8xu+ 6ZC7yq6luLqZNZJbovG2ZP7lyUzF9uF7kf9FzndZekHd/skxJb1G0sHISw/cUvjD DQk13DIpGVurK2JO4Iqnwkyl3g06N2uWUrOD5atTOi0nMPVNEn7CHbBxhN4xsvgc YqGWAxmMcZAXv36SCGbtdQBVL8QqjG53mPczs+JePIdXQNRYK79B9QMW85kKbVjP JStbEj4pQyUJUmjap2CS/BYpDD2ag+o= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:37 2025 by rpki-client