$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa File: 733964c1-767b-3dda-a3eb-57e0e756377d.roa (raw, json) Hash identifier: 7XPZdlU6N7yF5pRkVkBt2asGaKLrnFkyzXmUS0Ekyos= Subject key identifier: DA:B9:FE:53:E7:F3:CB:65:A6:67:00:56:AB:3A:25:1B:92:56:B6:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD555144E904F569556C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:55:51:44:e9:04:f5:69:55:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8cea94fe-6110-456e-a3c9-33c1c2cca090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:7b:c7:b0:e3:ac:2f:c0:71:f8:d3:17:e0: f7:5c:c3:35:4f:61:5a:f2:0a:8b:48:ab:51:2e:6c: 48:bd:08:a3:61:2f:0a:d8:ff:d8:1e:04:f2:4e:93: da:73:d0:cb:72:f4:e1:b8:e7:3c:2a:03:ef:5e:65: 02:47:ef:c0:7d:b8:ce:41:f1:2d:9b:b9:4a:24:bb: 0d:b4:23:4c:d3:7b:f9:e0:ce:e7:58:a5:a3:4d:42: ef:8f:4a:ac:6c:86:37:5a:23:9f:3c:85:b1:5b:95: 7d:7e:ca:7b:05:12:2c:ac:11:3b:a8:6d:0f:92:17: 3c:2e:70:9c:38:85:46:e2:76:fd:dd:2c:75:93:93: 01:b7:a5:dd:b8:f2:01:02:5e:73:cc:3c:21:22:d3: 9b:1e:04:45:c8:9e:8e:b2:76:bf:15:66:90:2a:98: e6:c3:dd:ea:ff:a9:65:46:26:da:e8:2c:c6:5c:92: 5a:c2:92:04:00:1d:82:84:ef:01:7c:43:80:89:a8: c7:8e:a6:bc:13:ad:18:eb:e2:78:44:f9:c7:06:a9: 54:ef:a0:81:ed:7c:4c:64:f4:ae:33:e5:29:eb:ae: a9:cd:35:e5:00:32:27:d0:6c:78:35:ed:33:3b:fd: aa:85:23:91:71:50:68:e5:30:4a:12:9e:e3:31:81: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:FE:53:E7:F3:CB:65:A6:67:00:56:AB:3A:25:1B:92:56:B6:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733964c1-767b-3dda-a3eb-57e0e756377d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f7:e3:80:49:a0:ab:1f:0e:bc:0d:7d:f1:53:e1:e1:0b:57: e9:29:f1:9b:a7:28:9a:a6:aa:4f:c4:28:d3:ca:1c:42:77:99: 49:aa:23:f7:a3:57:f4:09:cf:c0:27:ce:97:61:34:d0:c5:b8: 3f:46:dd:33:73:93:ad:5a:64:c2:5c:ed:c5:44:e0:4f:bb:85: 11:7a:f8:0f:38:5b:7a:49:44:a0:6b:0d:c0:6a:88:bb:01:ad: 87:3f:6a:69:50:2b:22:59:fd:44:e0:10:f0:c5:ac:d3:8a:bc: e7:3a:58:6a:4c:79:7d:8f:e6:93:4d:21:24:54:7a:e6:39:41: 7c:bb:6f:f0:95:89:c5:0b:6c:d2:db:28:cf:9f:dc:bf:bf:d0: 54:e9:b2:8a:7e:2a:b3:de:b9:fa:6d:a6:21:33:7c:24:ab:95: b5:79:f5:17:c9:a7:7d:a9:23:0f:d1:37:b7:ff:0d:17:75:3a: 87:58:fc:71:f4:6b:8c:dd:23:5e:f4:71:af:82:2b:db:19:2a: 48:10:ed:cc:6a:54:9d:44:38:21:cd:55:ba:8d:af:e8:c8:4e: f4:b1:eb:4e:4a:59:3d:ff:39:aa:46:ba:a3:18:72:42:b2:cf: 0c:76:f0:ef:91:d2:fd:fa:9d:69:9d:c7:6e:8c:28:61:7b:dd: 21:fe:5c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVVRROkE9WlVbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGNlYTk0ZmUtNjExMC00NTZlLWEzYzktMzNjMWMyY2NhMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBJ7x7DjrC/AcfjTF+D3XMM1T2Fa8gqLSKtR LmxIvQijYS8K2P/YHgTyTpPac9DLcvThuOc8KgPvXmUCR+/AfbjOQfEtm7lKJLsN tCNM03v54M7nWKWjTULvj0qsbIY3WiOfPIWxW5V9fsp7BRIsrBE7qG0Pkhc8LnCc OIVG4nb93Sx1k5MBt6XduPIBAl5zzDwhItObHgRFyJ6Osna/FWaQKpjmw93q/6ll Riba6CzGXJJawpIEAB2ChO8BfEOAiajHjqa8E60Y6+J4RPnHBqlU76CB7XxMZPSu M+Up666pzTXlADIn0Gx4Ne0zO/2qhSORcVBo5TBKEp7jMYGUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq5/lPn88tlpmcAVqs6JRuSVrZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzMzOTY0YzEtNzY3Yi0z ZGRhLWEzZWItNTdlMGU3NTYzNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT344BJoKsfDrwNffFT4eELV+kp8ZunKJqmqk/EKNPKHEJ3mUmqI/ej V/QJz8AnzpdhNNDFuD9G3TNzk61aZMJc7cVE4E+7hRF6+A84W3pJRKBrDcBqiLsB rYc/amlQKyJZ/UTgEPDFrNOKvOc6WGpMeX2P5pNNISRUeuY5QXy7b/CVicULbNLb KM+f3L+/0FTpsop+KrPeufptpiEzfCSrlbV59RfJp32pIw/RN7f/DRd1OodY/HH0 a4zdI170ca+CK9sZKkgQ7cxqVJ1EOCHNVbqNr+jITvSx605KWT3/OapGuqMYckKy zwx28O+R0v36nWmdx26MKGF73SH+XLc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:45:00 2025 by rpki-client