$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa File: 75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json) Hash identifier: 0HHOInunm0o7dh0TBw7K2O2JtRVrWVm+oDrfOmCN60s= Subject key identifier: BC:5F:9A:C9:82:E9:27:A2:9C:27:D8:B5:57:CF:BC:CF:7C:27:1F:CC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0381A6A1969EBF20E9400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:38:1a:6a:19:69:eb:f2:0e:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cd56c538-44a0-4c07-9556-9b7622a919d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:d8:c6:9e:3a:f9:ab:27:e4:29:bf:6f:e5: 36:7b:9e:c2:42:3d:4c:9c:2e:14:01:93:47:9e:c9: ae:7b:0f:ba:98:f5:f8:48:e3:9e:61:ba:bb:c2:87: eb:10:ec:db:75:2a:b8:d1:cf:4a:a1:ac:d6:90:46: a1:62:a7:fd:94:69:0d:df:cf:60:96:15:66:6b:90: fd:d1:33:97:72:12:78:37:c1:9a:e4:3d:7a:bc:d2: b5:84:51:f1:3a:7a:f0:11:89:e6:74:e5:c0:08:76: 33:ce:95:86:fa:52:2f:12:db:9f:c1:4e:32:26:87: e0:92:22:75:42:d0:38:8b:c1:07:a0:57:7f:99:44: 22:5f:96:b0:13:05:a3:98:24:b7:d0:b9:32:fa:db: 2e:84:38:24:a7:a5:03:56:e4:af:af:7b:41:f0:7a: b6:d5:56:0d:63:24:99:11:f7:f9:44:59:ea:b1:b3: 43:c7:6b:2b:f2:0e:91:63:5a:dc:08:48:e5:9d:6b: a8:0a:a6:fd:82:ff:e7:cf:c2:b9:d4:47:0b:37:09: 9b:98:8b:33:4b:3b:38:13:3e:14:e7:99:40:0d:b8: 87:b5:dc:96:46:8c:d3:16:5d:6d:18:e0:59:36:e5: 10:6f:e3:e1:9b:0b:e0:35:7e:58:8d:a2:72:b0:5d: ee:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5F:9A:C9:82:E9:27:A2:9C:27:D8:B5:57:CF:BC:CF:7C:27:1F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:79:44:52:97:ff:2b:77:9f:e6:ee:3d:04:99:d7:0b:ce:07: 07:c0:22:32:fc:1f:90:dc:37:25:4a:ba:56:f2:5d:83:9b:2f: 76:ce:e5:23:52:d5:8b:e8:e8:f3:b9:cd:8e:57:71:b4:01:42: d6:61:54:5e:9c:52:1c:01:7a:27:0c:82:e3:71:9b:d1:78:79: e5:73:4f:37:40:48:9a:c4:20:44:a1:9f:22:0b:01:34:02:b9: 21:9b:2f:a9:7f:7a:3c:66:d9:b2:48:e8:da:f1:d3:ae:51:28: e4:98:b9:47:a5:db:c8:3b:c6:d9:5a:ee:7c:28:dc:6a:07:86: 7b:2b:dc:17:24:08:fc:a3:39:97:ec:23:5a:52:5a:f6:50:07: da:4b:fb:0a:31:47:7a:e2:0c:9c:f7:3a:1e:c0:d3:f4:81:c3: 3f:24:86:8a:26:f1:02:85:6f:2f:ee:2f:23:51:46:ee:82:73: a8:f0:0c:12:7b:e1:78:95:6b:dc:27:2c:ff:4d:4a:d8:9d:da: 67:26:b4:79:70:aa:95:44:f3:7f:5e:a3:74:cf:39:a9:9d:a7: 2a:4a:96:63:27:16:e8:bb:54:91:dc:9c:f7:42:a3:e1:24:0f: b2:02:dc:55:3d:5d:8b:66:39:a2:81:7b:1c:04:ab:e3:a6:57: 32:c1:2e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Dgaahlp6/IOlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2Q1NmM1MzgtNDRhMC00YzA3LTk1NTYtOWI3NjIyYTkxOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDYxp46+asn5Cm/b+U2e57CQj1MnC4UAZNH nsmuew+6mPX4SOOeYbq7wofrEOzbdSq40c9KoazWkEahYqf9lGkN389glhVma5D9 0TOXchJ4N8Ga5D16vNK1hFHxOnrwEYnmdOXACHYzzpWG+lIvEtufwU4yJofgkiJ1 QtA4i8EHoFd/mUQiX5awEwWjmCS30Lky+tsuhDgkp6UDVuSvr3tB8Hq21VYNYySZ Eff5RFnqsbNDx2sr8g6RY1rcCEjlnWuoCqb9gv/nz8K51EcLNwmbmIszSzs4Ez4U 55lADbiHtdyWRozTFl1tGOBZNuUQb+PhmwvgNX5YjaJysF3u/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxfmsmC6SeinCfYtVfPvM98Jx/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzVlYjYxYjItYTdhZS0z YTY2LWI2NDItYTExMmJmOTIwNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG95RFKX/yt3n+buPQSZ1wvOBwfAIjL8H5DcNyVKulbyXYObL3bO5SNS 1Yvo6PO5zY5XcbQBQtZhVF6cUhwBeicMguNxm9F4eeVzTzdASJrEIEShnyILATQC uSGbL6l/ejxm2bJI6Nrx065RKOSYuUel28g7xtla7nwo3GoHhnsr3BckCPyjOZfs I1pSWvZQB9pL+woxR3riDJz3Oh7A0/SBwz8khoom8QKFby/uLyNRRu6Cc6jwDBJ7 4XiVa9wnLP9NStid2mcmtHlwqpVE839eo3TPOamdpypKlmMnFui7VJHcnPdCo+Ek D7IC3FU9XYtmOaKBexwEq+OmVzLBLuY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:17 2026 by rpki-client