$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa File: 733964c1-767b-3dda-a3eb-57e0e756377d.roa (raw, json) Hash identifier: mrZRnwVt1VTknRew9WAmmU7bzGQGcTrwq9arbWg0N5c= Subject key identifier: 0A:2F:F1:10:FF:52:9D:E7:8E:11:BA:A1:18:17:00:B7:D7:42:82:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E031AE3C7D4A586A626080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:31:ae:3c:7d:4a:58:6a:62:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7f6aa065-6ea2-4c54-b46f-4ca50335f3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:16:07:d3:42:00:d3:c8:52:d4:eb:b0:4e: b6:66:f2:33:4b:0a:08:75:e2:a8:4a:55:40:97:ce: a2:50:14:7a:3a:ae:39:7c:e7:c9:31:84:12:14:3a: 49:e2:84:7a:50:8b:a0:b7:41:6a:ad:8b:d1:4c:3e: e3:4d:7b:1b:bb:f4:4c:6a:f3:74:4a:27:db:51:52: ba:e6:be:82:69:57:88:0a:ba:b2:e6:b8:5e:8a:ff: 09:fa:d3:c6:a8:64:8b:85:b2:26:38:7d:ea:e4:b8: f0:3f:20:c4:f8:25:2d:1c:fa:75:70:1b:37:1d:1a: 8e:26:7b:ba:97:12:1c:09:f8:85:93:f7:b5:77:f5: a1:66:d5:b3:dc:4f:11:88:86:c4:fb:7d:30:52:19: e3:4a:cc:2b:f6:d9:14:91:c1:c6:d1:22:79:d8:62: f6:31:e8:99:72:9f:2f:b0:81:12:f4:41:53:0d:7f: c3:93:48:62:cc:4d:7f:a7:d6:74:b4:0f:bb:69:e1: 80:d6:40:2b:77:e4:ee:cd:24:4a:13:32:62:57:01: 3f:8a:20:00:c4:3f:03:e2:8c:0c:35:b5:8a:00:17: c5:10:3f:df:d7:97:b2:cd:15:a0:aa:ae:ff:cc:26: a4:f3:38:8d:47:0f:ea:0a:8e:02:ce:8c:bd:95:89: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:F1:10:FF:52:9D:E7:8E:11:BA:A1:18:17:00:B7:D7:42:82:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ae:1a:30:11:36:4f:c5:ce:0c:69:98:c7:d7:aa:c2:a0:42: ac:71:1c:4f:0d:bd:51:4f:e4:d1:93:12:e2:71:bc:a1:64:0d: a1:6a:6c:4e:9d:99:1f:7a:6e:e8:69:5f:75:eb:8d:58:a5:8e: 49:c3:ab:69:0b:ce:73:94:26:6e:47:b4:09:4a:15:91:a8:82: 9f:74:f8:f5:05:d2:78:89:f3:8c:60:22:a2:20:ef:97:69:33: 0f:60:a4:09:05:0f:a3:94:16:8e:5c:f3:7c:c6:ac:c6:e2:82: eb:88:71:97:66:88:c9:bb:6b:ef:a5:20:ea:6a:aa:c5:de:74: a5:c1:8d:5e:49:c0:3e:1a:c2:d0:03:02:72:68:01:d3:e7:67: c6:2e:ec:ad:3d:6e:30:a0:99:ed:ee:5a:70:f1:43:15:74:52: 9e:b3:88:d0:0b:37:fb:81:3e:d6:c1:a6:87:58:bd:05:8f:be: e3:92:be:71:61:70:11:e6:f2:4e:79:60:25:0a:23:f2:14:12: 97:5c:ec:26:e4:21:e3:60:fa:f5:4b:ca:da:cc:45:b9:14:c7: 88:38:9e:c4:61:a0:bf:b7:a2:a9:50:e3:5a:75:8a:d8:ef:81: 2b:e7:fa:7b:8b:b7:e5:32:19:eb:f0:c3:9a:c4:42:94:d6:16: ff:c6:21:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DGuPH1KWGpiYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2Y2YWEwNjUtNmVhMi00YzU0LWI0NmYtNGNhNTAzMzVmM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd4WB9NCANPIUtTrsE62ZvIzSwoIdeKoSlVA l86iUBR6Oq45fOfJMYQSFDpJ4oR6UIugt0FqrYvRTD7jTXsbu/RMavN0SifbUVK6 5r6CaVeICrqy5rheiv8J+tPGqGSLhbImOH3q5LjwPyDE+CUtHPp1cBs3HRqOJnu6 lxIcCfiFk/e1d/WhZtWz3E8RiIbE+30wUhnjSswr9tkUkcHG0SJ52GL2MeiZcp8v sIES9EFTDX/Dk0hizE1/p9Z0tA+7aeGA1kArd+TuzSRKEzJiVwE/iiAAxD8D4owM NbWKABfFED/f15eyzRWgqq7/zCak8ziNRw/qCo4Czoy9lYluPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAov8RD/Up3njhG6oRgXALfXQoKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzMzOTY0YzEtNzY3Yi0z ZGRhLWEzZWItNTdlMGU3NTYzNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuuGjARNk/FzgxpmMfXqsKgQqxxHE8NvVFP5NGTEuJxvKFkDaFqbE6d mR96buhpX3XrjViljknDq2kLznOUJm5HtAlKFZGogp90+PUF0niJ84xgIqIg75dp Mw9gpAkFD6OUFo5c83zGrMbiguuIcZdmiMm7a++lIOpqqsXedKXBjV5JwD4awtAD AnJoAdPnZ8Yu7K09bjCgme3uWnDxQxV0Up6ziNALN/uBPtbBpodYvQWPvuOSvnFh cBHm8k55YCUKI/IUEpdc7CbkIeNg+vVLytrMRbkUx4g4nsRhoL+3oqlQ41p1itjv gSvn+nuLt+UyGevww5rEQpTWFv/GIdM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:51 2026 by rpki-client