$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa File: 571948d2-8027-3582-930f-2b7b5ed13980.roa (raw, json) Hash identifier: SSSZcabBTY9hJ18AaQYLcaGsskKw8ybAuIKoIYrZqaI= Subject key identifier: D8:A0:A0:FB:C7:E0:18:C3:A9:DB:C5:D9:4C:8D:41:57:2D:3B:0A:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2458D6CDBCD07577C9C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 172.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:24:58:d6:cd:bc:d0:75:77:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ad4588b3-97a4-4b70-aec2-65e15f4ce928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:c8:4d:44:96:d4:f9:7b:dd:8b:27:ea:d7: 94:f6:b3:6f:f0:42:83:5d:fe:70:00:cf:bb:8d:27: db:85:2a:52:03:18:e8:7e:96:4a:83:dd:25:5c:c1: ee:2d:3f:9b:9e:c6:9b:9c:5f:89:97:03:3e:09:4b: f0:61:3c:86:c2:cb:72:44:d4:6b:fe:0c:70:19:09: 36:7d:ad:e6:64:b3:ca:e3:79:5b:45:2a:68:ec:07: 43:a7:85:98:ae:76:34:eb:60:6a:41:cf:32:14:e4: 21:02:85:ba:30:bf:01:63:0a:d1:2c:9b:9e:ff:1d: eb:54:e2:c7:04:18:39:68:ea:21:69:41:b1:ff:f2: b1:ec:42:13:99:a4:36:0f:53:b7:c5:a0:33:97:52: d8:e4:18:d2:81:fb:dd:cd:0c:2e:2f:9d:5c:a8:ca: 9e:71:b2:73:52:c9:e9:5a:0c:6b:c2:14:fa:54:50: 93:d6:48:41:d1:30:fa:a5:66:a3:d7:fe:e5:c0:2d: 59:07:46:e4:26:49:36:e9:8c:b9:3f:3a:86:3d:cb: b5:80:c0:10:7e:28:c9:10:86:a6:80:00:00:f9:64: 71:db:f8:cd:13:4f:b5:c1:fd:ad:a6:3c:2d:34:bd: 17:48:95:20:ff:97:d4:6c:28:c4:e4:c7:23:6a:17: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:A0:FB:C7:E0:18:C3:A9:DB:C5:D9:4C:8D:41:57:2D:3B:0A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c6:dc:4b:f9:fd:b0:fc:f3:15:16:60:35:29:7c:2d:8d:c4: 74:99:d1:64:ff:e1:67:ed:63:4e:75:b7:cb:d2:2a:3b:82:99: 82:5b:ae:d0:b0:d6:3d:20:2b:d0:41:6a:9c:58:47:c0:4a:80: 07:b8:61:6b:9f:68:d6:7b:bb:26:5d:51:af:9b:ef:d9:31:75: 2a:2b:3b:6a:bb:1d:4c:a7:fb:da:2e:d9:5d:68:51:c2:c8:3a: f6:e6:77:f6:d5:25:04:ac:13:a6:45:e3:dd:76:3a:37:32:54: f8:ca:13:a3:62:6e:33:b4:00:5a:2f:2e:80:fb:32:9f:7b:c9: 70:98:65:c7:1b:d1:03:ec:6d:b5:00:7a:af:d7:fd:7f:bf:c8: c2:5b:71:6b:d8:d7:f0:13:39:9d:b5:bd:31:1b:6b:32:a6:fc: 44:00:b2:2d:b4:13:97:a8:01:46:4e:7c:c5:1d:aa:a1:a4:41: 88:8b:60:b9:e2:22:ee:b4:7f:0a:fc:62:55:d3:e4:a4:5b:70: d2:27:1f:32:ec:da:53:94:2b:5b:64:d0:e1:70:98:b2:e7:fe: a5:41:86:6a:1f:56:0c:f5:b4:ed:b1:3d:e3:de:11:29:8f:97: 1b:bf:f7:9b:61:71:21:ac:ad:27:60:14:24:28:53:cf:db:5d: 30:64:67:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziRY1s280HV3ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWQ0NTg4YjMtOTdhNC00YjcwLWFlYzItNjVlMTVmNGNlOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVHITUSW1Pl73Ysn6teU9rNv8EKDXf5wAM+7 jSfbhSpSAxjofpZKg90lXMHuLT+bnsabnF+JlwM+CUvwYTyGwstyRNRr/gxwGQk2 fa3mZLPK43lbRSpo7AdDp4WYrnY062BqQc8yFOQhAoW6ML8BYwrRLJue/x3rVOLH BBg5aOohaUGx//Kx7EITmaQ2D1O3xaAzl1LY5BjSgfvdzQwuL51cqMqecbJzUsnp WgxrwhT6VFCT1khB0TD6pWaj1/7lwC1ZB0bkJkk26Yy5PzqGPcu1gMAQfijJEIam gAAA+WRx2/jNE0+1wf2tpjwtNL0XSJUg/5fUbCjE5Mcjahd1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNigoPvH4BjDqdvF2UyNQVctOwoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTcxOTQ4ZDItODAyNy0z NTgyLTkzMGYtMmI3YjVlZDEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjG3Ev5/bD88xUWYDUpfC2NxHSZ0WT/4WftY051t8vSKjuCmYJbrtCw 1j0gK9BBapxYR8BKgAe4YWufaNZ7uyZdUa+b79kxdSorO2q7HUyn+9ou2V1oUcLI Ovbmd/bVJQSsE6ZF4912OjcyVPjKE6NibjO0AFovLoD7Mp97yXCYZccb0QPsbbUA eq/X/X+/yMJbcWvY1/ATOZ21vTEbazKm/EQAsi20E5eoAUZOfMUdqqGkQYiLYLni Iu60fwr8YlXT5KRbcNInHzLs2lOUK1tk0OFwmLLn/qVBhmofVgz1tO2xPePeESmP lxu/95thcSGsrSdgFCQoU8/bXTBkZ7k= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:12 2025 by rpki-client