$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa File: 5a84109a-e093-3cc4-b314-e82aef89a710.roa (raw, json) Hash identifier: SrasKo1BkPVBNTa0R4u+B7diGpm/Jbi0q4x9Ih6dzSM= Subject key identifier: 5F:2B:67:2D:9E:C8:B2:40:65:80:27:E5:8E:CD:03:44:CC:13:13:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F25717029AFE7B573490 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f2:57:17:02:9a:fe:7b:57:34:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7a8815e3-dfc6-4246-ab78-679156954491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:5d:6f:e4:04:8c:36:68:a3:a0:e0:c4:a3: 2d:ce:ec:61:c5:22:9e:cb:37:3e:26:cf:35:44:8f: e7:cb:a8:c5:cd:2f:15:34:89:fd:ad:f3:c4:83:b9: 99:d7:5a:3f:b0:cb:2d:df:59:b0:01:9c:d9:33:d8: 82:90:27:cc:fb:cd:80:fb:16:8a:81:13:4f:01:ea: a3:1d:66:61:b1:a9:36:a8:f4:7a:62:4e:ff:87:d5: cb:0d:dd:a6:d2:c9:96:e0:df:7a:96:4f:41:02:6d: b4:ec:1b:33:62:e5:77:2e:46:bf:58:c5:c7:74:f1: 2d:f4:67:0a:90:0c:ea:95:b1:93:ca:a1:ec:ff:ce: f3:16:83:24:f4:40:d8:3a:9c:d2:21:c8:b5:38:a5: 04:3d:54:8e:81:03:1e:13:b6:88:f1:58:b4:46:97: a4:29:a1:0a:34:c0:1f:90:e0:5e:f9:14:00:aa:07: 49:3e:00:35:4f:57:6c:be:a4:00:b1:59:d6:96:29: db:e3:87:6e:bd:9f:2a:3b:3e:cb:bc:74:25:79:a2: ed:13:ce:3f:c8:eb:3d:74:9c:95:e4:2e:0e:f7:6f: a1:d6:d0:4a:5b:ff:e6:89:52:c7:7e:12:9c:17:1e: 27:71:29:f6:04:fe:b6:d3:de:65:ae:c9:e1:67:f7: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:67:2D:9E:C8:B2:40:65:80:27:E5:8E:CD:03:44:CC:13:13:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:a1:10:00:0b:fe:21:d2:e9:cf:7e:33:8d:7e:bf:bc:05: ab:05:e8:ec:d2:96:8c:c2:8e:61:d2:22:7f:31:65:76:1f:64: d1:0c:00:af:9f:55:a6:4f:8a:d7:e9:70:16:15:9e:62:d6:0d: 1c:49:f5:b7:65:f3:ed:b9:e3:f2:b0:c9:af:c4:10:11:98:e9: 47:aa:e9:f5:21:59:9a:79:61:6f:3e:79:03:a1:07:b8:be:85: b8:cb:7e:01:5b:67:cb:7a:7d:c6:ff:75:4f:c4:2e:4c:87:cb: 31:35:a2:c9:b0:eb:5c:cb:07:27:7f:11:f0:9e:ce:2a:58:0d: 97:98:26:e4:6d:e7:0a:94:37:2c:0f:b9:0e:7f:1e:ac:09:d5: fe:2d:5a:b4:d0:d2:cc:7c:81:24:e6:ba:ea:18:53:6d:1c:34: be:2a:68:b5:59:12:63:32:11:c4:cc:04:f1:20:f1:8c:2e:bf: 83:d7:33:52:1d:7b:f6:db:9a:b8:0c:9a:48:88:6e:0c:f1:b8: 9f:4f:73:a6:16:8d:b4:82:62:cb:62:fc:88:20:a8:82:5c:77: d0:f4:c5:96:0b:ed:a7:8b:e3:ac:9c:3d:c0:63:5a:06:f6:ae: e1:c8:6b:6a:31:12:07:35:98:1c:2a:e9:22:a7:ba:bc:52:9d: 4a:75:83:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PJXFwKa/ntXNJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2E4ODE1ZTMtZGZjNi00MjQ2LWFiNzgtNjc5MTU2OTU0NDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTldb+QEjDZoo6DgxKMtzuxhxSKeyzc+Js81 RI/ny6jFzS8VNIn9rfPEg7mZ11o/sMst31mwAZzZM9iCkCfM+82A+xaKgRNPAeqj HWZhsak2qPR6Yk7/h9XLDd2m0smW4N96lk9BAm207BszYuV3Lka/WMXHdPEt9GcK kAzqlbGTyqHs/87zFoMk9EDYOpzSIci1OKUEPVSOgQMeE7aI8Vi0RpekKaEKNMAf kOBe+RQAqgdJPgA1T1dsvqQAsVnWlinb44duvZ8qOz7LvHQleaLtE84/yOs9dJyV 5C4O92+h1tBKW//miVLHfhKcFx4ncSn2BP62095lrsnhZ/fzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8rZy2eyLJAZYAn5Y7NA0TMExNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE4NDEwOWEtZTA5My0z Y2M0LWIzMTQtZTgyYWVmODlhNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqcoRAAC/4h0unPfjONfr+8BasF6OzSlozCjmHSIn8xZXYfZNEMAK+f VaZPitfpcBYVnmLWDRxJ9bdl8+254/Kwya/EEBGY6Ueq6fUhWZp5YW8+eQOhB7i+ hbjLfgFbZ8t6fcb/dU/ELkyHyzE1osmw61zLByd/EfCezipYDZeYJuRt5wqUNywP uQ5/HqwJ1f4tWrTQ0sx8gSTmuuoYU20cNL4qaLVZEmMyEcTMBPEg8Ywuv4PXM1Id e/bbmrgMmkiIbgzxuJ9Pc6YWjbSCYsti/IggqIJcd9D0xZYL7aeL46ycPcBjWgb2 ruHIa2oxEgc1mBwq6SKnurxSnUp1g8k= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:36 2026 by rpki-client