$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa File: 2c82a951-058b-3b7b-89b6-010786c16010.roa (raw, json) Hash identifier: lPnpHlv9fD9L219hp4rUCFw6tzN3vcMUGjJ7UZb7Uvk= Subject key identifier: 42:C1:2D:DC:D9:5D:48:95:7C:BF:E0:7E:47:EA:87:71:BF:90:F9:FC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EA100F4CC1D435FCEA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ea:10:0f:4c:c1:d4:35:fc:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9712d857-f225-4275-bfc4-69811367c169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:30:61:2d:da:ac:ae:7f:2e:f2:f9:1c:84: bd:d7:ff:36:28:4c:a1:a7:83:7c:43:ca:e6:88:6a: f3:22:1e:30:63:e6:06:85:bf:a1:7c:cc:b1:60:61: 7f:b8:6d:35:9d:41:de:cf:d7:cf:de:74:e4:21:ac: 96:64:1d:a1:64:b8:47:22:53:b7:98:fa:c8:77:4b: 55:36:a5:81:01:8f:86:0c:6a:25:79:4e:a1:4f:09: 4f:09:51:49:7f:c2:ef:cc:bc:32:db:d7:6e:1e:d8: 94:cd:ef:ea:01:1a:e7:eb:26:9a:11:c2:51:e4:f4: 23:f8:32:26:54:df:5f:2c:c9:3d:e0:33:c5:6b:4c: aa:ef:55:9f:da:72:a9:b6:12:08:94:2d:7b:95:ea: 56:7a:c9:8d:53:d8:a1:c1:5d:f3:a0:25:b8:84:26: 35:2d:4d:ba:d4:9c:cf:a4:30:39:7d:34:c0:3c:b1: 02:49:4c:c7:58:57:dd:ab:9c:ea:80:03:e6:7e:07: 45:06:00:09:20:5e:6a:2d:63:43:49:e2:e4:8f:ff: 8e:6f:c8:77:61:e4:58:e4:84:cb:cb:e3:36:08:c0: ee:ea:eb:9a:ae:86:1b:34:ac:8a:5a:a2:c7:e1:1f: bc:cf:49:db:d4:0d:13:bc:3f:95:89:03:d9:6e:cb: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C1:2D:DC:D9:5D:48:95:7C:BF:E0:7E:47:EA:87:71:BF:90:F9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:59:3e:8b:17:71:f9:5d:e6:f0:12:74:82:7c:6f:da:2c:a5: bc:d4:5e:f4:e7:02:84:d6:85:fd:79:86:b1:33:5a:77:c8:6c: 46:f6:6c:4b:c8:d6:f9:2e:f8:7a:04:51:02:6c:6b:11:0a:1f: 5b:76:ea:b2:e9:e1:07:41:e2:42:7b:8d:32:c5:8a:90:94:a6: f7:63:c5:35:1d:e2:8e:bd:52:4a:c7:55:6b:a8:32:b4:e4:7f: 13:36:77:56:de:e8:c8:01:bc:c3:43:13:f4:65:ed:16:52:95: b6:75:78:7b:a1:20:f6:ea:4b:b8:11:d7:49:e5:01:c4:1c:58: b8:e6:f9:59:5b:c4:00:c6:95:30:6d:8c:a9:82:cc:31:af:1d: 6f:cc:a9:53:2a:e9:23:73:cc:8b:9f:98:86:fd:f7:6e:91:75: 0f:ad:9b:86:13:99:e1:2d:5e:77:be:2a:13:88:18:2c:6c:e1: 1d:f4:ca:12:51:52:b2:9f:b3:fd:f9:95:84:83:66:54:e7:35: 0e:16:c4:95:c7:40:81:f2:ec:35:bc:d4:a2:5a:e9:e7:09:68: 80:c6:48:6d:27:d0:92:de:3d:6b:79:aa:3e:2a:fe:6e:1a:24: 9a:99:c3:0d:7b:90:8b:33:82:35:ee:26:13:ad:a2:1b:0e:5d: 55:4c:78:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OoQD0zB1DX86oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTcxMmQ4NTctZjIyNS00Mjc1LWJmYzQtNjk4MTEzNjdjMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm4wYS3arK5/LvL5HIS91/82KEyhp4N8Q8rm iGrzIh4wY+YGhb+hfMyxYGF/uG01nUHez9fP3nTkIayWZB2hZLhHIlO3mPrId0tV NqWBAY+GDGoleU6hTwlPCVFJf8LvzLwy29duHtiUze/qARrn6yaaEcJR5PQj+DIm VN9fLMk94DPFa0yq71Wf2nKpthIIlC17lepWesmNU9ihwV3zoCW4hCY1LU261JzP pDA5fTTAPLECSUzHWFfdq5zqgAPmfgdFBgAJIF5qLWNDSeLkj/+Ob8h3YeRY5ITL y+M2CMDu6uuaroYbNKyKWqLH4R+8z0nb1A0TvD+ViQPZbsu2/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELBLdzZXUiVfL/gfkfqh3G/kPn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM4MmE5NTEtMDU4Yi0z YjdiLTg5YjYtMDEwNzg2YzE2MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZZPosXcfld5vASdIJ8b9ospbzUXvTnAoTWhf15hrEzWnfIbEb2bEvI 1vku+HoEUQJsaxEKH1t26rLp4QdB4kJ7jTLFipCUpvdjxTUd4o69UkrHVWuoMrTk fxM2d1be6MgBvMNDE/Rl7RZSlbZ1eHuhIPbqS7gR10nlAcQcWLjm+VlbxADGlTBt jKmCzDGvHW/MqVMq6SNzzIufmIb9926RdQ+tm4YTmeEtXne+KhOIGCxs4R30yhJR UrKfs/35lYSDZlTnNQ4WxJXHQIHy7DW81KJa6ecJaIDGSG0n0JLePWt5qj4q/m4a JJqZww17kIszgjXuJhOtohsOXVVMeNw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:13 2026 by rpki-client