$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa File: 1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa (raw, json) Hash identifier: 54oplHIsYxI5bm/AxIpYzeQE2SMcpgkOC/nLL1UQIn8= Subject key identifier: 25:F0:AD:C0:C1:FF:C0:7F:1F:D9:6D:07:74:9C:A1:27:93:CB:04:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D07ACEB481F2D44333FAB27AD Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:eb:48:1f:2d:44:33:3f:ab:27:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=af5476c4-1e7a-4bcb-a44d-18154907123d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:fc:0b:f6:06:cc:85:61:da:b4:e6:29:f2: 06:28:d0:c9:e6:79:a8:d6:35:af:13:7d:c2:4d:39: 4b:0c:b4:4f:92:3b:3c:f5:6e:c1:52:1b:1f:bf:c7: 56:a5:74:cb:64:ed:f9:61:31:95:87:1c:04:0c:6c: 60:09:7a:b9:14:81:0a:53:35:e9:91:52:b3:86:6c: 7f:06:bc:ad:95:af:df:ef:88:5d:5e:9c:c9:51:ba: 13:77:0a:27:ab:97:cc:87:58:af:2d:89:65:88:7b: 56:c7:77:27:d7:45:32:83:b5:d5:d7:7a:57:1d:7e: e2:35:92:d5:e8:58:7c:0e:ea:dc:7a:5a:c5:b1:7c: c9:29:27:61:39:91:8d:ff:af:cd:fd:f6:b0:44:d7: bf:ff:6c:28:78:9c:c4:dc:3c:19:c9:14:fe:62:5e: 1a:33:30:7a:89:cb:7c:e3:aa:f9:6b:66:9e:19:43: 65:bb:f0:a8:db:80:bc:63:77:9b:fb:eb:f4:5e:ec: b9:96:5d:c9:0b:ed:a1:35:af:2a:66:87:7a:92:1c: fb:df:72:a0:4e:a1:f6:f1:0e:8f:77:c8:33:a6:75: b4:81:64:6c:92:10:e9:2d:93:59:14:2a:e0:1f:28: 7f:b5:18:6f:5f:65:84:05:6a:2f:1e:64:06:9b:ce: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:AD:C0:C1:FF:C0:7F:1F:D9:6D:07:74:9C:A1:27:93:CB:04:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c6:95:77:60:e0:c8:8c:4d:c6:fa:e4:cd:bc:70:7b:f7:dd: 29:c4:fa:87:b3:61:47:da:42:b4:62:5f:14:9d:98:6c:c1:42: 69:9c:a7:dc:4e:52:62:9b:6c:a8:df:0a:57:ff:e1:df:0c:55: 50:67:57:87:34:bc:6f:9c:4c:67:f5:3a:85:b9:e9:eb:0b:ef: bb:7e:81:e2:eb:1d:e7:9a:f8:37:f1:76:b4:00:de:1a:54:a9: 47:91:9b:7a:2a:72:42:60:f8:97:64:d5:54:78:2e:39:7a:49: 08:cf:a1:be:23:ba:7b:7f:b1:e3:42:4d:45:d0:23:3d:d4:14: 3b:91:06:fd:c4:3e:4c:e6:27:ce:a7:72:d0:c5:80:14:26:35: bb:08:7d:da:ea:a9:a6:bc:3b:50:2d:cb:02:e8:45:31:75:f9: a4:55:67:c7:27:ff:41:eb:32:11:7c:06:a5:cd:51:8d:4f:69: e8:6a:a9:79:fe:27:1f:53:2a:58:6e:c0:fa:6e:98:1e:20:c3: fd:51:ce:b2:3d:22:b1:03:cc:0f:c1:a3:e8:a7:bd:38:1a:fa: d6:b3:8c:50:ae:8d:bb:c8:2e:ae:d1:0d:1d:a3:6f:71:51:cb: 07:d4:37:2f:fd:2a:e7:90:7b:6b:49:f1:71:e7:3f:1a:0e:f1: b4:04:21:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOtIHy1EMz+rJ60wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YWY1NDc2YzQtMWU3YS00YmNiLWE0NGQtMTgxNTQ5MDcxMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwr8C/YGzIVh2rTmKfIGKNDJ5nmo1jWvE33C TTlLDLRPkjs89W7BUhsfv8dWpXTLZO35YTGVhxwEDGxgCXq5FIEKUzXpkVKzhmx/ Brytla/f74hdXpzJUboTdwonq5fMh1ivLYlliHtWx3cn10Uyg7XV13pXHX7iNZLV 6Fh8DurcelrFsXzJKSdhOZGN/6/N/fawRNe//2woeJzE3DwZyRT+Yl4aMzB6ict8 46r5a2aeGUNlu/Co24C8Y3eb++v0Xuy5ll3JC+2hNa8qZod6khz733KgTqH28Q6P d8gzpnW0gWRskhDpLZNZFCrgHyh/tRhvX2WEBWovHmQGm84KGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXwrcDB/8B/H9ltB3ScoSeTywRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU3YzFiYzMtNTQ4MS0z ZWUyLTk1MTAtZDZmNzdjZWM2N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLGlXdg4MiMTcb65M28cHv33SnE+oezYUfaQrRiXxSdmGzBQmmcp9xO UmKbbKjfClf/4d8MVVBnV4c0vG+cTGf1OoW56esL77t+geLrHeea+DfxdrQA3hpU qUeRm3oqckJg+Jdk1VR4Ljl6SQjPob4junt/seNCTUXQIz3UFDuRBv3EPkzmJ86n ctDFgBQmNbsIfdrqqaa8O1AtywLoRTF1+aRVZ8cn/0HrMhF8BqXNUY1PaehqqXn+ Jx9TKlhuwPpumB4gw/1RzrI9IrEDzA/Bo+invTga+tazjFCujbvILq7RDR2jb3FR ywfUNy/9KueQe2tJ8XHnPxoO8bQEId4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:27 2026 by rpki-client