$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa File: 1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa (raw, json) Hash identifier: +zl+JJopUFpt64PX0GLwEDVx38NIhIB6bPXYfyIZzVg= Subject key identifier: 91:5D:2C:FC:35:3C:55:6D:06:CE:55:49:4A:CD:E7:C6:B8:A5:4E:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB6F535B32C35B6631F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b6:f5:35:b3:2c:35:b6:63:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=37e3853f-fbac-494b-9945-fdd9885ab311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:94:3f:57:e7:93:fa:1d:c0:45:28:1c:2c:45: 6a:89:47:f2:6e:60:d1:a3:6e:17:fd:26:66:7e:27: 18:25:11:7a:a5:3e:c7:df:b3:32:6b:ac:93:9c:6f: 37:64:47:3e:55:89:64:0f:c9:c1:d4:6b:9f:80:2e: e6:75:24:c0:7a:d3:73:17:ac:af:c6:ef:35:ee:98: 59:0e:88:d2:e2:32:4a:34:eb:75:21:6e:45:83:19: e5:16:5d:92:20:f4:22:86:30:ea:21:4e:aa:b5:d4: 7b:2e:a3:4a:3f:03:35:98:0d:96:95:f0:a1:00:e4: 25:bb:65:56:a6:fc:32:13:ca:86:0a:69:f1:76:a4: e0:7f:28:bd:d6:ca:c3:8b:aa:af:b6:62:cd:6e:00: 4c:f1:96:d1:ca:cd:14:e3:36:de:80:f5:f1:2a:bb: c6:9a:96:8b:4f:ad:d0:af:3a:24:31:c6:ad:67:1b: c9:4b:3d:77:cf:73:a4:13:78:33:6e:ba:a8:a1:3e: 99:94:99:65:b4:20:29:9b:20:75:1b:47:8c:bc:f6: 7a:90:a9:52:ea:19:41:17:92:19:c3:1e:cf:29:64: 44:08:c1:40:52:75:4e:69:6c:5d:f0:c5:cf:35:07: 58:cd:c3:07:1a:88:32:bf:75:5a:52:b6:b6:d2:df: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5D:2C:FC:35:3C:55:6D:06:CE:55:49:4A:CD:E7:C6:B8:A5:4E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:de:97:fa:a1:f3:fc:66:64:f4:49:b0:e1:11:a6:04:e8:e2: 93:cf:65:0b:fc:dc:98:b0:73:05:db:72:a3:58:2e:c9:be:23: 77:36:f5:3e:88:27:0a:7d:69:a6:e6:ab:5c:27:99:c8:fd:21: e7:fe:f9:65:7c:8d:22:16:58:f4:7d:79:00:c0:8f:cd:15:e2: ce:e6:2b:70:11:98:20:8c:76:c9:ca:ba:23:1b:27:4a:bd:2f: 63:d6:c0:ea:74:3a:4d:9d:cb:ab:66:71:a2:fa:3e:3c:c3:1b: ad:76:a8:6e:f1:59:be:fc:fe:3b:12:60:fa:04:48:8e:3e:9a: a8:0a:13:58:5e:20:8e:c0:24:2c:52:7f:0b:82:ae:5b:e5:34: 3f:c1:2d:e0:2f:0b:ba:f9:47:c9:3e:47:66:c0:cd:b7:08:20: 48:aa:6a:ad:47:98:f7:05:1a:78:84:3a:50:3d:bc:f2:29:0f: a7:ee:df:ed:00:1b:e2:26:a1:dc:8a:d1:3c:99:13:25:a3:a5: 63:0b:25:51:6d:17:64:f6:3b:e9:f9:08:d2:07:6b:6c:53:30: 5f:d7:6d:7c:99:f2:b4:02:2e:14:ae:46:5b:87:50:60:08:7f: fc:8e:c4:f9:a3:59:9d:5a:e7:26:f8:c9:e8:74:89:69:d3:05: 41:55:6b:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Lb1NbMsNbZjH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MzdlMzg1M2YtZmJhYy00OTRiLTk5NDUtZmRkOTg4NWFiMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pQ/V+eT+h3ARSgcLEVqiUfybmDRo24X/SZm ficYJRF6pT7H37Mya6yTnG83ZEc+VYlkD8nB1GufgC7mdSTAetNzF6yvxu817phZ DojS4jJKNOt1IW5FgxnlFl2SIPQihjDqIU6qtdR7LqNKPwM1mA2WlfChAOQlu2VW pvwyE8qGCmnxdqTgfyi91srDi6qvtmLNbgBM8ZbRys0U4zbegPXxKrvGmpaLT63Q rzokMcatZxvJSz13z3OkE3gzbrqooT6ZlJlltCApmyB1G0eMvPZ6kKlS6hlBF5IZ wx7PKWRECMFAUnVOaWxd8MXPNQdYzcMHGogyv3VaUra20t8hDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFdLPw1PFVtBs5VSUrN58a4pU6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZmZTEwMDgtNTZiMy0z ZDk1LWIzZWEtZTc5ZGUxNDBhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvel/qh8/xmZPRJsOERpgTo4pPPZQv83JiwcwXbcqNYLsm+I3c29T6I Jwp9aabmq1wnmcj9Ief++WV8jSIWWPR9eQDAj80V4s7mK3ARmCCMdsnKuiMbJ0q9 L2PWwOp0Ok2dy6tmcaL6PjzDG612qG7xWb78/jsSYPoESI4+mqgKE1heII7AJCxS fwuCrlvlND/BLeAvC7r5R8k+R2bAzbcIIEiqaq1HmPcFGniEOlA9vPIpD6fu3+0A G+ImodyK0TyZEyWjpWMLJVFtF2T2O+n5CNIHa2xTMF/XbXyZ8rQCLhSuRluHUGAI f/yOxPmjWZ1a5yb4yeh0iWnTBUFVazY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:06 2025 by rpki-client