$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json) Hash identifier: bmk5xhSStnLcLD7/PWWzjmjLADvscSXBqWtwT5XtOjo= Subject key identifier: 8E:44:92:8A:8F:53:B9:48:87:A7:86:DD:64:36:29:B1:69:36:01:0B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBE2EDD9917D49C5E8C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:be:2e:dd:99:17:d4:9c:5e:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=8341aa87-6530-410b-b290-fbcb817caadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:d8:be:49:c9:48:98:d3:20:5c:67:eb:0b: 2a:37:06:47:82:98:c9:3d:70:63:06:66:82:23:52: 76:ab:75:c9:cf:9b:79:bc:c9:6f:21:f7:d1:3c:f6: b2:9f:ac:10:75:a0:f1:1c:58:82:d6:27:5a:15:dc: 3f:b5:b3:bd:98:48:4b:25:58:f5:44:6e:0e:1f:30: 2c:a1:cc:93:5a:a8:15:45:c3:33:71:03:f3:67:a8: 29:6c:97:97:15:93:a0:ea:f3:ae:87:d5:bc:49:53: d2:e1:a3:56:ad:d8:48:ef:a3:ff:8c:2d:6b:5f:59: c1:e8:0b:01:22:5c:49:48:db:85:34:83:be:1d:82: df:25:81:c3:62:02:3e:c4:90:12:ab:13:14:92:a5: e4:6c:9b:b7:6f:83:e3:86:41:89:09:32:56:ed:07: e2:09:06:cb:d7:e0:47:ff:68:5a:f5:15:f4:d1:b8: 30:28:ec:ad:c9:91:09:82:5a:bc:a6:76:ff:cc:5d: f9:f6:8b:45:33:91:4d:53:8a:98:3d:17:3c:b0:56: 9b:ad:38:44:b1:9f:de:c5:a0:6f:39:66:40:bb:7e: d0:9a:33:f4:71:23:dc:49:36:85:0f:69:d8:15:db: 7d:14:dd:83:99:49:8a:a6:bd:bc:f2:44:ed:c8:d8: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:44:92:8A:8F:53:B9:48:87:A7:86:DD:64:36:29:B1:69:36:01:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c2:bf:fc:c5:38:80:e5:9c:34:fa:79:ff:ca:b2:f3:f6:3e: b5:27:e1:3e:3a:96:57:a9:07:0a:a5:3e:9a:96:cc:89:5a:11: c0:6f:69:dd:d0:9a:07:04:79:6d:30:b6:b7:74:52:f6:2e:09: 69:8a:99:33:19:5b:cc:e5:dc:af:b3:a5:27:b8:d4:79:2e:33: 7b:db:2c:4b:45:17:cc:35:df:cb:e1:4a:46:fb:15:f4:b4:99: 61:5b:7f:29:45:76:c3:77:f0:6d:f3:52:23:e4:ee:6e:13:3c: 68:66:2b:aa:88:39:b8:1f:53:02:a9:55:00:31:4f:29:ad:99: 96:ec:55:8c:23:75:c4:35:cf:2d:6e:3b:2f:06:8b:a6:00:dc: 29:92:21:54:c7:9a:00:27:e5:83:3d:cf:db:52:22:5b:b9:d0: 1a:2a:a7:01:53:b5:74:9c:f2:3f:a7:d7:0f:78:49:04:bd:5b: f4:9f:4d:e3:3c:7a:45:bc:de:20:1f:a1:0f:2e:30:48:5e:22: e2:0e:98:25:f6:1e:c7:7a:c2:15:bf:ac:6a:16:b6:bb:9e:87: 55:f9:7f:1c:81:86:91:a0:22:5d:4e:65:07:49:ac:e6:92:b6: c0:b9:24:36:2d:17:6e:8d:e0:f7:d6:23:1b:18:fe:f3:17:44: cc:9d:6b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L4u3ZkX1JxejIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ODM0MWFhODctNjUzMC00MTBiLWIyOTAtZmJjYjgxN2NhYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKPYvknJSJjTIFxn6wsqNwZHgpjJPXBjBmaC I1J2q3XJz5t5vMlvIffRPPayn6wQdaDxHFiC1idaFdw/tbO9mEhLJVj1RG4OHzAs ocyTWqgVRcMzcQPzZ6gpbJeXFZOg6vOuh9W8SVPS4aNWrdhI76P/jC1rX1nB6AsB IlxJSNuFNIO+HYLfJYHDYgI+xJASqxMUkqXkbJu3b4PjhkGJCTJW7QfiCQbL1+BH /2ha9RX00bgwKOytyZEJglq8pnb/zF359otFM5FNU4qYPRc8sFabrThEsZ/exaBv OWZAu37QmjP0cSPcSTaFD2nYFdt9FN2DmUmKpr288kTtyNhsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5EkoqPU7lIh6eG3WQ2KbFpNgELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhmMzZkOTItNDc5OS0z ZTcxLWFjMjYtNGY4OTczOTMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/Cv/zFOIDlnDT6ef/KsvP2PrUn4T46llepBwqlPpqWzIlaEcBvad3Q mgcEeW0wtrd0UvYuCWmKmTMZW8zl3K+zpSe41HkuM3vbLEtFF8w138vhSkb7FfS0 mWFbfylFdsN38G3zUiPk7m4TPGhmK6qIObgfUwKpVQAxTymtmZbsVYwjdcQ1zy1u Oy8Gi6YA3CmSIVTHmgAn5YM9z9tSIlu50BoqpwFTtXSc8j+n1w94SQS9W/SfTeM8 ekW83iAfoQ8uMEheIuIOmCX2Hsd6whW/rGoWtrueh1X5fxyBhpGgIl1OZQdJrOaS tsC5JDYtF26N4PfWIxsY/vMXRMyda4g= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:44 2025 by rpki-client