$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61a5b483-3131-3374-bf5e-2f7d4cbba62d.roa File: 61a5b483-3131-3374-bf5e-2f7d4cbba62d.roa (raw, json) Hash identifier: zbD3gu6WauvmosaH/44HZQcGTCd53pJ4tQJZx12MP8M= Subject key identifier: F9:02:A9:6C:18:DC:7A:93:39:BE:F5:A3:88:F2:D9:1B:65:61:83:2B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D07ACED27EA7C72059D482400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61a5b483-3131-3374-bf5e-2f7d4cbba62d.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.253.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ed:27:ea:7c:72:05:9d:48:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=d99e588b-ec6d-42e9-b680-34c7222cb4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:2a:68:7e:6f:4a:ba:67:50:f1:96:37:50: ed:1a:b1:69:38:55:44:be:c4:f0:20:9e:34:76:2d: 03:65:66:1a:50:43:3c:2b:d8:fb:a5:4d:ac:33:0f: 83:0f:c7:05:3f:93:43:dc:e8:13:84:3e:a8:fe:cc: 73:24:e8:6c:c6:d2:78:87:ff:63:3c:0b:e8:a9:95: 16:a0:c2:2c:d4:b3:6e:61:4f:74:2f:40:61:72:58: e0:aa:23:b3:0b:7f:34:66:43:24:db:a2:6c:dc:fb: 82:64:41:ab:f9:0d:63:ae:6e:48:36:ff:54:db:94: 20:04:2a:56:50:cd:8f:a1:fe:61:85:e6:c4:35:54: 85:67:f2:3f:bd:4c:a7:04:5c:76:17:8f:38:40:70: 24:c7:56:e7:dc:97:66:9e:92:0b:b0:17:f5:bd:7c: d2:72:21:7f:08:a4:d0:54:43:79:ac:ae:0f:cd:4a: 38:9c:83:ab:10:14:d1:bd:b4:1d:98:08:ab:53:5e: 9b:22:9e:9b:80:60:d9:43:b2:43:71:6a:26:ee:08: 32:55:93:c6:f1:16:17:22:f4:53:34:88:dd:20:0a: f8:fd:2b:98:80:70:82:33:8a:77:f8:c8:25:38:6c: fb:89:31:17:87:15:74:9f:bd:0a:a0:b0:3b:12:fe: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:02:A9:6C:18:DC:7A:93:39:BE:F5:A3:88:F2:D9:1B:65:61:83:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61a5b483-3131-3374-bf5e-2f7d4cbba62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d0:7b:1e:40:f2:18:65:39:3d:06:00:fa:90:c6:f8:85:f5: 47:fb:54:24:e4:21:94:e7:3d:f5:91:bc:90:4d:2b:37:94:0d: 73:ab:e3:04:2c:0c:3d:fb:75:39:39:6c:d8:57:0f:72:da:49: 1c:0e:d6:bc:04:c5:83:4f:81:15:3e:e4:6f:8a:0c:e1:47:8e: 7b:ea:44:b8:13:aa:0c:18:1b:a4:55:89:81:0a:ab:15:a2:e1: dd:3b:ca:f7:36:22:e2:2b:95:5e:b6:10:cd:5e:29:e4:4c:3a: e2:f6:1a:24:7e:90:a7:65:fa:3a:ed:a6:46:f5:31:09:4e:92: 5d:2d:cc:25:5a:0c:e4:40:68:01:13:53:b5:b4:54:97:bd:10: 0a:93:56:d4:af:95:d4:b5:71:de:ad:6d:47:5d:b2:e0:e8:48: 2f:cc:e2:8b:73:48:0e:33:3b:4b:c0:65:a6:75:73:46:c6:e2: 2f:f4:35:e9:ee:67:2c:9f:51:19:fe:7d:f0:10:e1:3d:d4:73: 2a:a0:15:b9:37:a4:ac:23:ee:9c:5d:d1:57:39:77:0c:e9:80: 41:19:52:d8:4b:de:6f:bc:13:85:06:d8:df:13:33:ff:c5:a0: 37:8b:78:76:12:b9:29:a7:a2:73:29:ba:0f:69:d7:7b:dd:cb: f4:48:39:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrO0n6nxyBZ1IJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDk5ZTU4OGItZWM2ZC00MmU5LWI2ODAtMzRjNzIyMmNiNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbkqaH5vSrpnUPGWN1DtGrFpOFVEvsTwIJ40 di0DZWYaUEM8K9j7pU2sMw+DD8cFP5ND3OgThD6o/sxzJOhsxtJ4h/9jPAvoqZUW oMIs1LNuYU90L0BhcljgqiOzC380ZkMk26Js3PuCZEGr+Q1jrm5INv9U25QgBCpW UM2Pof5hhebENVSFZ/I/vUynBFx2F484QHAkx1bn3JdmnpILsBf1vXzSciF/CKTQ VEN5rK4PzUo4nIOrEBTRvbQdmAirU16bIp6bgGDZQ7JDcWom7ggyVZPG8RYXIvRT NIjdIAr4/SuYgHCCM4p3+MglOGz7iTEXhxV0n70KoLA7Ev4qUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkCqWwY3HqTOb71o4jy2RtlYYMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjFhNWI0ODMtMzEzMS0z Mzc0LWJmNWUtMmY3ZDRjYmJhNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjQex5A8hhlOT0GAPqQxviF9Uf7VCTkIZTnPfWRvJBNKzeUDXOr4wQs DD37dTk5bNhXD3LaSRwO1rwExYNPgRU+5G+KDOFHjnvqRLgTqgwYG6RViYEKqxWi 4d07yvc2IuIrlV62EM1eKeRMOuL2GiR+kKdl+jrtpkb1MQlOkl0tzCVaDORAaAET U7W0VJe9EAqTVtSvldS1cd6tbUddsuDoSC/M4otzSA4zO0vAZaZ1c0bG4i/0Nenu ZyyfURn+ffAQ4T3UcyqgFbk3pKwj7pxd0Vc5dwzpgEEZUthL3m+8E4UG2N8TM//F oDeLeHYSuSmnonMpug9p13vdy/RIOV8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:36 2026 by rpki-client