$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9872c8c4-6b5e-325b-833b-7e0158c7a00c.roa File: 9872c8c4-6b5e-325b-833b-7e0158c7a00c.roa (raw, json) Hash identifier: jEcdQ34yN0AwHN9rTQQh6LVqio2l2RCoFHoUj+b4sUs= Subject key identifier: 02:38:CC:C6:63:B0:13:C0:A0:86:3A:FF:36:08:CE:06:46:6D:95:8D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B543F8DC54F7A684C95785CE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9872c8c4-6b5e-325b-833b-7e0158c7a00c.roa Signing time: Sat 27 Sep 2025 02:43:39 +0000 ROA not before: Sat 27 Sep 2025 02:43:39 +0000 ROA not after: Fri 26 Dec 2025 03:43:39 +0000 asID: 15169 IP address blocks: 172.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:3f:8d:c5:4f:7a:68:4c:95:78:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 27 02:43:39 2025 GMT Not After : Dec 26 03:43:39 2025 GMT Subject: CN=a65dd653-a365-4760-a937-1f28aa067223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bd:1b:32:0d:d2:6b:d6:41:4f:68:5b:71:37: a4:49:ff:ed:03:07:a4:ee:a4:1f:6b:b4:ad:e6:50: 92:3f:97:a3:05:3b:8d:01:c5:b3:a8:d4:21:1f:21: 9a:c3:17:fc:b9:a8:55:41:c6:41:d3:e2:5d:04:da: e1:16:66:e1:a6:ff:f2:b7:93:2d:bc:1f:c4:c4:ec: 40:80:b6:89:58:94:38:03:66:69:68:38:ab:ac:a1: 0c:c2:20:a6:49:08:09:ea:5f:d9:6e:e0:1a:51:21: 39:4c:7e:dc:e8:54:c1:26:67:ac:af:25:c8:f7:c6: a1:42:e1:fd:32:bb:21:56:28:88:3e:e2:27:2e:34: f0:b9:fd:9f:7c:c2:3d:c6:5c:08:13:8e:c8:1a:3e: e9:70:4e:10:1c:2b:dc:d7:cc:6a:a3:04:9e:0e:25: d3:13:7c:07:f5:4b:f4:de:9b:d5:e6:22:6f:b4:30: 28:64:30:26:e7:38:6e:af:76:15:28:e6:cc:f6:de: 34:89:72:71:3d:6d:ba:06:45:25:12:5b:cd:cd:ec: 85:bf:e3:06:e0:2c:d5:98:3e:fd:f0:c6:88:0a:66: 51:ed:50:59:db:c3:52:58:e4:1e:05:a6:14:4c:26: aa:35:18:41:6e:b3:dc:e6:24:04:1e:26:aa:c3:51: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:CC:C6:63:B0:13:C0:A0:86:3A:FF:36:08:CE:06:46:6D:95:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9872c8c4-6b5e-325b-833b-7e0158c7a00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:82:f3:ee:28:44:a1:52:06:92:3e:71:33:1f:85:44:83:b1: 84:78:b6:70:08:d0:c6:c0:74:36:b5:da:a9:47:fc:78:6c:14: 6c:ff:6e:1c:d7:3a:7e:af:65:6a:5a:87:cc:76:95:ab:5a:43: b4:88:ae:07:2e:ca:f4:e6:e3:ee:a9:e7:22:7b:bc:c1:48:e2: 47:50:41:68:d7:91:cd:62:64:d0:22:4d:15:02:6a:51:6d:91: cd:86:e3:a1:15:44:a2:fd:34:68:49:73:32:3a:e8:d3:6e:fb: 07:ca:eb:0c:0f:38:d2:68:83:56:2c:37:82:5b:a8:40:2e:60: d2:bd:75:60:03:1b:67:03:3d:aa:ce:c9:c1:20:fd:92:be:c7: 90:5b:ee:d1:f4:3b:f2:62:9c:11:17:c1:10:28:fd:ee:2c:5a: 7c:4c:19:a6:80:07:6d:62:85:df:66:34:ab:6d:4a:57:69:13: b6:25:14:21:ac:98:85:53:6d:67:95:56:6d:de:5c:eb:27:e4: 14:d0:09:34:91:e4:b9:63:47:e1:77:90:a3:8e:09:99:b9:40: c6:60:a0:c1:85:7c:5a:42:f1:73:c2:16:de:83:4e:bf:5e:25: 99:fe:d9:fb:9a:3e:6f:d1:7d:54:d2:e0:45:51:81:85:32:d2: 16:73:50:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUP43FT3poTJV4XOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkyNzAyNDMzOVoXDTI1MTIyNjAzNDMzOVowLzEtMCsGA1UEAxMk YTY1ZGQ2NTMtYTM2NS00NzYwLWE5MzctMWYyOGFhMDY3MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb0bMg3Sa9ZBT2hbcTekSf/tAwek7qQfa7St 5lCSP5ejBTuNAcWzqNQhHyGawxf8uahVQcZB0+JdBNrhFmbhpv/yt5MtvB/ExOxA gLaJWJQ4A2ZpaDirrKEMwiCmSQgJ6l/ZbuAaUSE5TH7c6FTBJmesryXI98ahQuH9 MrshViiIPuInLjTwuf2ffMI9xlwIE47IGj7pcE4QHCvc18xqowSeDiXTE3wH9Uv0 3pvV5iJvtDAoZDAm5zhur3YVKObM9t40iXJxPW26BkUlElvNzeyFv+MG4CzVmD79 8MaICmZR7VBZ28NSWOQeBaYUTCaqNRhBbrPc5iQEHiaqw1EShwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI4zMZjsBPAoIY6/zYIzgZGbZWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTg3MmM4YzQtNmI1ZS0z MjViLTgzM2ItN2UwMTU4YzdhMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiC8+4oRKFSBpI+cTMfhUSDsYR4tnAI0MbAdDa12qlH/HhsFGz/bhzX On6vZWpah8x2lataQ7SIrgcuyvTm4+6p5yJ7vMFI4kdQQWjXkc1iZNAiTRUCalFt kc2G46EVRKL9NGhJczI66NNu+wfK6wwPONJog1YsN4JbqEAuYNK9dWADG2cDParO ycEg/ZK+x5Bb7tH0O/JinBEXwRAo/e4sWnxMGaaAB21ihd9mNKttSldpE7YlFCGs mIVTbWeVVm3eXOsn5BTQCTSR5LljR+F3kKOOCZm5QMZgoMGFfFpC8XPCFt6DTr9e JZn+2fuaPm/RfVTS4EVRgYUy0hZzUM8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:52 2025 by rpki-client