$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a75155-6b89-39f3-8fc5-37a37b5a2287.roa File: 92a75155-6b89-39f3-8fc5-37a37b5a2287.roa (raw, json) Hash identifier: 9IliEeof248Ry1TqvUMD3OKy3ogjgX3TAjBYm/COgxM= Subject key identifier: DE:5A:4B:70:7A:D3:79:50:C6:6B:FD:63:72:98:33:30:58:3E:53:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B0CDC2BC0BDF2D4BBE0026400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a75155-6b89-39f3-8fc5-37a37b5a2287.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 15169 IP address blocks: 172.253.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:2b:c0:bd:f2:d4:bb:e0:02:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=4094afe8-a05f-48f5-8ac2-9ed341e7035e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:49:92:d5:97:a0:1e:80:4d:29:8d:ab:c9: 0b:e5:55:ec:85:27:c5:b8:8a:b3:13:ca:be:da:35: cc:42:a6:bc:3f:52:7b:ca:22:4f:d3:dd:21:1b:73: 5c:62:34:34:fc:e1:23:e5:0f:d0:d1:1a:05:18:30: 8b:77:47:ef:8e:ab:47:f3:82:d6:42:d5:c9:9d:6a: 08:ec:1e:61:50:f2:5c:ca:93:60:b9:2d:86:72:d6: 4f:7c:d2:2b:30:b6:42:75:83:1e:34:4f:b8:d8:34: af:8a:a0:4b:8a:80:f0:35:de:a4:a9:78:2b:8a:39: 7c:89:a2:7b:b1:39:11:d3:d4:92:ef:23:93:af:d4: 33:1c:e9:40:a5:77:1d:7e:5e:79:23:c2:0d:8a:60: a8:83:a6:18:f7:4c:fc:cc:2f:38:1c:cb:2b:ab:44: ec:44:74:9d:ad:8e:e9:49:5a:1d:1f:2c:e6:5b:c5: 6d:c4:a6:f1:b2:fc:13:9c:60:79:95:28:e3:7e:15: d7:27:a5:f9:16:c0:7d:54:bd:bc:f1:5f:8e:3b:be: 18:46:cd:e3:6d:2e:0e:61:22:77:c8:38:4b:db:ae: f1:7b:23:76:1f:ae:ce:c0:20:ba:15:69:7c:d7:a7: b8:5a:20:a2:9d:47:61:7a:7f:60:12:6a:15:ae:36: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:4B:70:7A:D3:79:50:C6:6B:FD:63:72:98:33:30:58:3E:53:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a75155-6b89-39f3-8fc5-37a37b5a2287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3b:bc:4e:d2:68:2e:21:f2:3c:6a:39:38:01:2e:8a:9c:43: 3a:9d:22:31:1a:60:9c:7d:ea:4c:df:78:50:22:73:c1:a7:a2: 5a:a3:e2:2c:e2:6c:9f:8d:a0:a2:a1:74:4d:93:ec:93:3d:47: 3a:40:5b:23:2f:2c:f2:5c:98:ef:f0:79:99:18:99:77:ad:25: 02:49:d5:75:64:1e:5a:f9:9d:e4:b4:41:9c:22:dc:61:87:ee: 32:b4:13:77:80:02:63:ef:c6:f6:ae:f2:bd:d5:94:a4:86:2f: 76:72:4d:d4:e3:eb:58:f5:8a:bb:58:3f:e2:39:04:85:55:14: 94:80:25:19:46:da:7a:ce:34:3d:89:1d:9a:c5:00:72:63:cd: ed:a7:c5:73:4f:fd:1c:5a:44:8a:ac:55:8f:7a:50:57:10:92: fc:26:5c:a8:0f:a2:0d:ac:17:54:ef:22:03:1d:b3:1a:7c:8f: 0e:ad:c7:e6:6f:29:48:dc:d1:e3:5a:14:39:f6:e8:9f:88:b4: 6d:3e:b8:34:48:67:b8:9d:4f:d5:c0:96:c3:18:f2:bb:21:c2: 5e:21:22:66:e0:e8:04:79:3d:5b:d6:c4:16:31:0a:2c:9f:6e: 57:51:a4:cc:be:d5:74:e4:f6:a2:d7:d4:30:ad:32:f9:7a:93: 49:7b:74:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CvAvfLUu+ACZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NDA5NGFmZTgtYTA1Zi00OGY1LThhYzItOWVkMzQxZTcwMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWZJktWXoB6ATSmNq8kL5VXshSfFuIqzE8q+ 2jXMQqa8P1J7yiJP090hG3NcYjQ0/OEj5Q/Q0RoFGDCLd0fvjqtH84LWQtXJnWoI 7B5hUPJcypNguS2GctZPfNIrMLZCdYMeNE+42DSviqBLioDwNd6kqXgrijl8iaJ7 sTkR09SS7yOTr9QzHOlApXcdfl55I8INimCog6YY90z8zC84HMsrq0TsRHSdrY7p SVodHyzmW8VtxKbxsvwTnGB5lSjjfhXXJ6X5FsB9VL288V+OO74YRs3jbS4OYSJ3 yDhL267xeyN2H67OwCC6FWl816e4WiCinUdhen9gEmoVrjbl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5aS3B603lQxmv9Y3KYMzBYPlM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTJhNzUxNTUtNmI4OS0z OWYzLThmYzUtMzdhMzdiNWEyMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI87vE7SaC4h8jxqOTgBLoqcQzqdIjEaYJx96kzfeFAic8Gnolqj4izi bJ+NoKKhdE2T7JM9RzpAWyMvLPJcmO/weZkYmXetJQJJ1XVkHlr5neS0QZwi3GGH 7jK0E3eAAmPvxvau8r3VlKSGL3ZyTdTj61j1irtYP+I5BIVVFJSAJRlG2nrOND2J HZrFAHJjze2nxXNP/RxaRIqsVY96UFcQkvwmXKgPog2sF1TvIgMdsxp8jw6tx+Zv KUjc0eNaFDn26J+ItG0+uDRIZ7idT9XAlsMY8rshwl4hImbg6AR5PVvWxBYxCiyf bldRpMy+1XTk9qLX1DCtMvl6k0l7dP8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:24 2025 by rpki-client