$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa File: 63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa (raw, json) Hash identifier: BlMZ5gyP3m9Z8xm8kOgGD06r4jByoutRHcweApQJVko= Subject key identifier: 9A:E1:A2:BA:FA:17:56:79:B4:43:02:B5:E7:FA:4C:93:7D:2A:1C:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6A49B5F984247D7E8E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 172.253.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6a:49:b5:f9:84:24:7d:7e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=35830332-bb6d-4c56-aead-1588ded00821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:fe:f0:42:c8:38:98:4b:51:2f:e4:db:34: b3:6d:6d:34:f7:53:ef:7f:59:92:78:58:d5:d2:16: 7a:f4:6b:73:2a:1a:67:81:ff:03:91:7a:58:b9:a7: 2b:40:08:10:e1:d2:11:9e:0a:c5:ce:87:8e:8d:38: c4:43:2e:3a:8b:89:43:1a:10:99:b5:32:2a:c4:72: b0:33:86:17:19:d8:fa:6c:a3:c4:9a:9a:27:a7:0d: 03:2a:56:32:8e:69:35:aa:69:eb:0e:f9:39:6a:b8: 33:7b:a9:fa:72:86:22:4b:1b:5f:ee:ec:69:37:ed: 17:27:50:b7:99:50:b8:11:8a:52:50:f7:ce:4c:e1: 29:27:e8:45:83:20:93:08:7d:0c:ac:0e:4f:b1:cf: e9:98:98:8c:fd:84:cd:5b:f2:9e:7e:ef:a6:52:40: 6e:cd:91:f5:b9:f6:bc:ef:b2:57:59:bc:8c:3d:a4: e1:2e:88:2a:4f:3f:0e:af:66:38:85:82:7c:87:a9: 34:b4:54:3b:93:f5:e8:d6:f1:83:d2:84:ae:75:22: f4:b6:70:09:c0:27:e7:75:2e:0a:58:00:96:70:5c: cc:43:6b:77:39:d3:e5:86:46:28:2c:31:c6:98:dd: f1:89:46:bc:83:57:65:c9:67:86:c6:69:36:b2:e4: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E1:A2:BA:FA:17:56:79:B4:43:02:B5:E7:FA:4C:93:7D:2A:1C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:84:16:3e:a9:75:95:06:25:8e:9a:ac:5a:ce:b4:19:a1:05: 6e:70:d6:65:9f:74:1a:d0:5c:49:c7:5e:3c:bc:4a:79:41:45: ec:3f:4f:4d:29:33:ad:5e:e0:df:d6:62:bd:51:0e:52:20:85: ec:c2:b4:c1:b6:a5:8a:1b:ea:82:a8:10:18:44:50:e6:32:47: fe:3d:3c:79:e8:bc:c7:48:e0:c2:90:c4:f0:81:d6:1b:12:00: 0a:84:d5:5e:87:64:fc:42:a3:9a:24:5d:ae:4f:87:4d:ca:72: 96:6c:32:42:96:7e:bf:37:62:63:a9:5b:98:cf:4d:c2:3b:be: fb:be:86:4e:6c:f7:6b:26:a2:b2:6f:0e:a3:f1:1d:9a:4c:00: ef:9b:60:20:69:4e:d9:5e:b5:0d:f5:a8:9c:de:57:cd:e3:cb: e9:6f:5f:66:9d:4f:25:d2:5c:7b:f8:09:69:20:f1:91:9c:7f: be:56:27:3c:96:66:87:32:6b:84:51:a9:8d:74:b8:f4:ea:6d: 35:57:4b:c2:42:4b:0f:a5:fc:ee:aa:13:4a:d6:fb:0f:8a:2c: f0:50:0e:03:84:ca:4e:79:fd:3a:ff:7f:1f:1a:56:ce:11:4d: 32:95:a8:b4:29:fe:3e:65:14:56:84:36:bc:5c:07:bb:09:96: d3:94:44:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWpJtfmEJH1+jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzU4MzAzMzItYmI2ZC00YzU2LWFlYWQtMTU4OGRlZDAwODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WD+8ELIOJhLUS/k2zSzbW0091Pvf1mSeFjV 0hZ69GtzKhpngf8DkXpYuacrQAgQ4dIRngrFzoeOjTjEQy46i4lDGhCZtTIqxHKw M4YXGdj6bKPEmponpw0DKlYyjmk1qmnrDvk5argze6n6coYiSxtf7uxpN+0XJ1C3 mVC4EYpSUPfOTOEpJ+hFgyCTCH0MrA5Psc/pmJiM/YTNW/Kefu+mUkBuzZH1ufa8 77JXWbyMPaThLogqTz8Or2Y4hYJ8h6k0tFQ7k/Xo1vGD0oSudSL0tnAJwCfndS4K WACWcFzMQ2t3OdPlhkYoLDHGmN3xiUa8g1dlyWeGxmk2suQGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrhorr6F1Z5tEMCtef6TJN9KhwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNhNGIwZTgtYTFmNS0z ZmNjLWE1ZjctYjU4YzJiZmVkYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuEFj6pdZUGJY6arFrOtBmhBW5w1mWfdBrQXEnHXjy8SnlBRew/T00p M61e4N/WYr1RDlIghezCtMG2pYob6oKoEBhEUOYyR/49PHnovMdI4MKQxPCB1hsS AAqE1V6HZPxCo5okXa5Ph03KcpZsMkKWfr83YmOpW5jPTcI7vvu+hk5s92smorJv DqPxHZpMAO+bYCBpTtletQ31qJzeV83jy+lvX2adTyXSXHv4CWkg8ZGcf75WJzyW Zocya4RRqY10uPTqbTVXS8JCSw+l/O6qE0rW+w+KLPBQDgOEyk55/Tr/fx8aVs4R TTKVqLQp/j5lFFaENrxcB7sJltOURAM= -----END CERTIFICATE-----Generated at Fri Oct 17 10:49:08 2025 by rpki-client