$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa File: 52603226-b4de-3bb1-a725-54436b999c2e.roa (raw, json) Hash identifier: 4Poq/6eqJ1cBgYiJYN0/RYBubVD/KmgbIGIxCqp0IAU= Subject key identifier: 24:75:8B:E4:F2:6B:1D:17:B8:5D:7B:55:1A:13:D4:4C:9F:4B:41:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBD324678EE0DAE9A6300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bd:32:46:78:ee:0d:ae:9a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=53b62534-68ff-43c6-becb-c01e7e0f92c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:b1:f8:8c:5c:19:2a:17:cf:94:f1:fe:21: ee:8f:a3:c4:cc:01:e9:bd:0e:04:29:6c:3c:8b:95: e4:b4:88:86:9a:75:98:e3:5b:79:a7:00:99:51:66: 03:62:3d:16:58:33:32:55:4b:a3:3c:c9:17:f2:55: 4e:b6:55:5e:3a:3e:b3:9f:34:22:5b:ef:04:ca:3a: 29:9a:e6:8c:62:69:1a:e4:cc:13:e1:2c:00:36:87: 58:d5:39:94:12:df:6a:87:d1:9c:7e:c4:2b:11:2a: 7e:c8:d7:c1:12:be:45:42:07:bf:b9:59:fd:82:78: 56:d5:62:c9:f2:b0:b6:14:3a:9c:c7:bf:6c:43:dd: 83:d5:4f:9e:66:41:89:58:b4:40:8e:e1:69:c5:f3: c3:66:59:b7:d0:6a:87:f8:b3:2c:28:58:ad:7d:a5: 77:a3:04:88:85:f8:1c:7e:05:48:e4:73:dc:c4:79: 57:52:d5:46:30:62:ce:fd:5b:75:31:c0:c9:59:b1: a1:c8:65:ff:89:ed:87:59:58:f9:79:85:67:46:5f: 85:83:fa:b6:c9:db:53:a7:c4:75:8f:c1:c4:5b:33: a4:ed:b1:56:51:34:6e:52:e0:96:58:07:4b:c1:50: 43:7b:59:bc:89:4b:00:88:1b:0b:98:6b:96:14:8f: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:8B:E4:F2:6B:1D:17:B8:5D:7B:55:1A:13:D4:4C:9F:4B:41:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:76:18:64:9f:59:2a:50:95:e1:97:d6:c3:f0:ed:cd:73:d9: 99:0f:fa:79:d0:50:21:34:76:50:cf:e3:6d:9a:c9:5a:c8:40: 55:c3:0c:a9:3c:ad:0a:c7:2b:97:0f:c7:00:cb:88:af:0c:80: c9:bb:1d:79:7f:15:fd:12:35:4c:c6:1c:d6:71:b1:2a:72:d7: 09:73:c5:6f:f5:36:e0:fe:15:87:5a:de:3d:55:8c:29:8a:f8: f7:fc:d4:ac:98:b7:b4:04:b7:aa:d2:39:c4:be:8c:49:15:5b: 46:51:7c:c6:c3:97:cd:f0:6e:4b:0b:50:43:67:3c:77:14:09: 88:62:88:b4:00:ed:3b:df:aa:ba:9c:7e:2b:5f:1c:5e:82:64: 87:d9:f8:ea:9c:ef:7a:57:74:bc:11:75:66:53:bf:17:65:53: a4:91:15:d9:c2:30:88:d6:5c:cf:77:89:cd:ea:7b:2a:de:bc: 7b:6a:c4:83:35:2b:34:89:b1:62:ab:a9:f7:a3:eb:66:4b:b8: 60:ce:69:cf:7a:45:50:ee:16:6d:59:ea:f2:a8:08:9a:5e:d5: 6b:ac:14:5a:9c:fb:5f:e4:24:27:b9:8e:65:c8:e5:0e:0f:31: e7:3b:43:bb:33:5f:c1:88:89:73:55:63:85:b5:de:ba:5d:01: d9:85:f6:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L0yRnjuDa6aYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NTNiNjI1MzQtNjhmZi00M2M2LWJlY2ItYzAxZTdlMGY5MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Cx+IxcGSoXz5Tx/iHuj6PEzAHpvQ4EKWw8 i5XktIiGmnWY41t5pwCZUWYDYj0WWDMyVUujPMkX8lVOtlVeOj6znzQiW+8Eyjop muaMYmka5MwT4SwANodY1TmUEt9qh9GcfsQrESp+yNfBEr5FQge/uVn9gnhW1WLJ 8rC2FDqcx79sQ92D1U+eZkGJWLRAjuFpxfPDZlm30GqH+LMsKFitfaV3owSIhfgc fgVI5HPcxHlXUtVGMGLO/Vt1McDJWbGhyGX/ie2HWVj5eYVnRl+Fg/q2ydtTp8R1 j8HEWzOk7bFWUTRuUuCWWAdLwVBDe1m8iUsAiBsLmGuWFI/RkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR1i+Tyax0XuF17VRoT1EyfS0G4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTI2MDMyMjYtYjRkZS0z YmIxLWE3MjUtNTQ0MzZiOTk5YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF2GGSfWSpQleGX1sPw7c1z2ZkP+nnQUCE0dlDP422ayVrIQFXDDKk8 rQrHK5cPxwDLiK8MgMm7HXl/Ff0SNUzGHNZxsSpy1wlzxW/1NuD+FYda3j1VjCmK +Pf81KyYt7QEt6rSOcS+jEkVW0ZRfMbDl83wbksLUENnPHcUCYhiiLQA7Tvfqrqc fitfHF6CZIfZ+Oqc73pXdLwRdWZTvxdlU6SRFdnCMIjWXM93ic3qeyrevHtqxIM1 KzSJsWKrqfej62ZLuGDOac96RVDuFm1Z6vKoCJpe1WusFFqc+1/kJCe5jmXI5Q4P Mec7Q7szX8GIiXNVY4W13rpdAdmF9ug= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:19 2025 by rpki-client