$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa File: 935bd29f-5047-300b-b66d-40395de7b976.roa (raw, json) Hash identifier: 6nN8kqPgOpj9fD6NQxZDhnccwOUE4JLhnmUJWGLYzJM= Subject key identifier: 5E:08:11:C3:6F:0B:88:33:C1:41:0F:D8:D0:C2:A0:0D:60:1C:2A:2B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04CC0FF40AA30DD1EE900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4c:c0:ff:40:aa:30:dd:1e:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=123ba1d7-959e-41f4-a1ea-509eab53d47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:44:3c:f4:55:4b:16:76:7f:77:bd:43:7f: 70:3e:0d:19:74:2b:b2:d2:1c:d0:b4:07:90:8f:f8: 85:20:88:35:f0:e3:47:4e:4f:62:14:4d:e1:19:c9: a5:66:e2:75:ca:99:c7:72:07:9a:6d:41:10:b8:44: 0f:8d:f7:5a:26:e3:d9:5f:be:59:f4:7a:91:79:df: f0:68:65:6d:05:b5:49:7e:09:b9:8a:ab:8d:3b:84: 33:77:c2:c4:d6:b7:c2:0e:21:03:bb:81:66:81:a6: 6f:3a:a0:88:50:43:e8:f9:71:2e:9c:2d:e7:75:71: 61:06:2d:a6:42:dc:02:fa:10:07:0f:46:1f:7f:74: e9:37:94:7d:85:de:38:2d:a9:b3:10:9f:82:0c:f9: 0b:a4:ce:3f:02:91:48:e0:4e:58:dd:97:97:8b:20: 20:cf:4b:a4:7f:32:94:85:44:ea:b2:f6:52:f1:9c: 3d:1a:e9:3e:e6:7a:13:f5:88:9e:72:95:30:d2:a2: 42:b0:18:c6:fa:fc:e6:43:ec:42:01:01:19:63:d9: 25:09:32:91:c4:03:17:82:84:4a:35:79:93:d0:d0: 6c:ec:55:1b:35:c2:72:2a:01:e7:54:ed:1b:c1:47: 65:f0:c7:1a:c9:27:0e:f5:e0:50:73:b2:75:d8:48: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:08:11:C3:6F:0B:88:33:C1:41:0F:D8:D0:C2:A0:0D:60:1C:2A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f2:f4:f6:b1:7c:6f:e0:58:55:e8:7a:e1:3e:8e:11:e2:75: 31:47:f5:aa:90:06:38:60:e5:ea:f6:f3:5e:30:8c:09:82:70: cc:d8:8d:9f:ec:8e:d9:35:b7:ac:db:94:b1:23:2f:a5:e3:e7: 30:95:4c:77:51:c4:42:cb:e1:21:4f:25:be:73:6d:9d:c8:13: b5:e6:d8:6b:2e:c3:13:7f:a0:e5:65:be:dc:c6:f1:b9:3f:15: 7b:ef:71:1c:2c:c3:05:04:15:2c:36:0e:65:02:fe:b4:96:f3: 8a:2f:69:1d:8b:e6:b6:31:03:69:35:24:a6:84:61:58:1d:56: b9:db:f1:c2:ab:00:60:3e:87:5a:db:a8:55:a1:ba:c7:03:15: 65:e4:73:b4:48:ae:af:51:53:01:90:19:99:2a:4c:a0:b1:10: f2:a5:31:28:4c:73:d1:b2:6a:0f:d9:74:f3:cd:a9:f5:ef:25: fe:4b:9f:a2:53:04:df:0f:77:4c:94:60:99:42:02:36:dd:3e: 3d:4a:16:b9:ca:ae:6d:47:d0:d3:9a:6d:18:2e:44:16:fb:6a: 7a:09:ad:ac:9e:cc:21:58:cc:ff:a8:0f:b6:aa:59:19:79:6e: a4:55:63:5e:bb:4b:1b:9d:d4:61:08:1c:a0:da:20:df:c8:6f: 42:80:04:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EzA/0CqMN0e6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTIzYmExZDctOTU5ZS00MWY0LWExZWEtNTA5ZWFiNTNkNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxZEPPRVSxZ2f3e9Q39wPg0ZdCuy0hzQtAeQ j/iFIIg18ONHTk9iFE3hGcmlZuJ1ypnHcgeabUEQuEQPjfdaJuPZX75Z9HqRed/w aGVtBbVJfgm5iquNO4Qzd8LE1rfCDiEDu4FmgaZvOqCIUEPo+XEunC3ndXFhBi2m QtwC+hAHD0Yff3TpN5R9hd44LamzEJ+CDPkLpM4/ApFI4E5Y3ZeXiyAgz0ukfzKU hUTqsvZS8Zw9Guk+5noT9YiecpUw0qJCsBjG+vzmQ+xCAQEZY9klCTKRxAMXgoRK NXmT0NBs7FUbNcJyKgHnVO0bwUdl8McayScO9eBQc7J12EjVYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4IEcNvC4gzwUEP2NDCoA1gHCorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTM1YmQyOWYtNTA0Ny0z MDBiLWI2NmQtNDAzOTVkZTdiOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDy9PaxfG/gWFXoeuE+jhHidTFH9aqQBjhg5er2814wjAmCcMzYjZ/s jtk1t6zblLEjL6Xj5zCVTHdRxELL4SFPJb5zbZ3IE7Xm2GsuwxN/oOVlvtzG8bk/ FXvvcRwswwUEFSw2DmUC/rSW84ovaR2L5rYxA2k1JKaEYVgdVrnb8cKrAGA+h1rb qFWhuscDFWXkc7RIrq9RUwGQGZkqTKCxEPKlMShMc9Gyag/ZdPPNqfXvJf5Ln6JT BN8Pd0yUYJlCAjbdPj1KFrnKrm1H0NOabRguRBb7anoJrayezCFYzP+oD7aqWRl5 bqRVY167Sxud1GEIHKDaIN/Ib0KABA4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:16 2026 by rpki-client