$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa File: 9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa (raw, json) Hash identifier: nOn/ctvnz1D9lIKQ0b9uHPv2QLjIQmA/K0OBIvLteyg= Subject key identifier: 73:D9:B6:59:21:94:E1:59:3E:16:6A:92:A2:EA:D3:0C:A6:9A:FF:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D19B4D3F5CFB9A9B0790709C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d3:f5:cf:b9:a9:b0:79:07:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=73c81ede-bae4-482f-a82a-c5b5c93d126f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:9c:3f:57:84:38:9d:10:94:22:46:42:4e: d9:7a:75:34:65:ea:b0:f8:c7:66:a2:b7:96:c6:13: f0:e2:7b:42:ea:3e:e1:ee:b0:7c:23:52:10:1b:80: de:e7:d1:a9:c7:ac:a2:8b:44:67:ee:6e:c9:39:5f: ca:10:6f:cf:d0:25:37:6f:7c:06:54:d7:06:fe:80: 91:b0:99:e3:06:d4:3c:d5:59:48:91:b7:ac:44:d8: 4b:af:3f:87:06:c0:a4:b7:38:1d:db:3b:ca:93:20: e0:b4:90:c4:c5:c1:5f:81:a1:2b:b4:01:e4:93:51: 81:d4:dd:d5:2f:33:84:78:ba:d3:4d:7b:da:9e:2c: ed:c6:1e:8c:40:78:59:83:b1:10:37:ab:5a:8e:9a: 80:a8:0f:46:ed:4b:6c:9f:18:0f:b2:de:69:53:01: fb:54:06:70:ca:48:a8:d8:85:44:48:f5:04:4b:b5: 66:31:a8:f8:44:28:b3:6f:f0:5a:b2:82:97:96:b1: 8b:01:b3:c2:d6:83:82:85:02:eb:7b:de:78:e6:c4: 0e:c2:15:fd:cd:a0:99:2d:ae:90:8b:b3:8d:1b:09: d6:d3:b0:e3:46:3b:69:32:88:1e:77:81:6a:b6:3d: 74:d0:55:f4:26:e3:f0:ae:15:dc:db:b7:f4:3c:d9: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D9:B6:59:21:94:E1:59:3E:16:6A:92:A2:EA:D3:0C:A6:9A:FF:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e4:e1:dd:06:28:f1:9a:c5:d6:e8:fa:7e:5c:11:e6:38:67: dd:5d:4b:4f:87:a8:33:ec:67:74:0e:70:90:c0:92:09:28:c5: ed:2d:61:e0:8f:67:be:85:8b:d6:c8:37:ad:b9:47:cf:86:19: f2:54:7c:f4:c0:e7:8b:fd:53:24:6a:0c:46:2d:eb:21:c7:ab: 3f:09:3c:67:fe:6d:16:cb:96:ba:89:fb:99:b0:d9:12:54:e4: f8:d8:2c:e9:56:b3:80:8d:fa:0f:e4:b5:3b:8a:ec:7a:11:36: 37:e8:02:38:77:11:61:47:1d:e3:d9:da:ea:8c:5f:c7:ff:25: 79:9b:79:9b:9d:b8:5f:f5:26:c6:8b:bc:16:b0:7b:95:6d:19: 6b:10:5c:1f:f0:80:51:fb:4f:d0:24:d2:70:58:31:de:ad:3a: 48:ea:3e:40:08:7b:1c:77:39:0c:1a:08:ce:cc:b6:73:0f:27: 5b:29:9d:be:0f:dd:23:19:bf:f8:be:d9:dc:61:65:54:24:f7: 35:ca:ce:f5:11:09:49:5e:02:59:cb:de:13:b1:63:22:21:3f: 76:8a:9b:bb:bb:49:61:a8:28:9f:a7:c2:d2:53:dc:e6:bf:1b: 4b:1d:64:17:8b:dc:d3:50:12:87:56:d3:6f:a7:bd:f1:dc:f5: 8d:ee:37:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNP1z7mpsHkHCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NzNjODFlZGUtYmFlNC00ODJmLWE4MmEtYzViNWM5M2QxMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOScP1eEOJ0QlCJGQk7ZenU0Zeqw+MdmoreW xhPw4ntC6j7h7rB8I1IQG4De59Gpx6yii0Rn7m7JOV/KEG/P0CU3b3wGVNcG/oCR sJnjBtQ81VlIkbesRNhLrz+HBsCktzgd2zvKkyDgtJDExcFfgaErtAHkk1GB1N3V LzOEeLrTTXvaniztxh6MQHhZg7EQN6tajpqAqA9G7UtsnxgPst5pUwH7VAZwykio 2IVESPUES7VmMaj4RCizb/BasoKXlrGLAbPC1oOChQLre9545sQOwhX9zaCZLa6Q i7ONGwnW07DjRjtpMoged4Fqtj100FX0JuPwrhXc27f0PNnp7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPZtlkhlOFZPhZqkqLq0wymmv+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEwYjBiMWMtNTEzZC0z ODc1LTgxYmEtNWJmZDc2MmQwNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbk4d0GKPGaxdbo+n5cEeY4Z91dS0+HqDPsZ3QOcJDAkgkoxe0tYeCP Z76Fi9bIN625R8+GGfJUfPTA54v9UyRqDEYt6yHHqz8JPGf+bRbLlrqJ+5mw2RJU 5PjYLOlWs4CN+g/ktTuK7HoRNjfoAjh3EWFHHePZ2uqMX8f/JXmbeZuduF/1JsaL vBawe5VtGWsQXB/wgFH7T9Ak0nBYMd6tOkjqPkAIexx3OQwaCM7MtnMPJ1spnb4P 3SMZv/i+2dxhZVQk9zXKzvURCUleAlnL3hOxYyIhP3aKm7u7SWGoKJ+nwtJT3Oa/ G0sdZBeL3NNQEodW02+nvfHc9Y3uN1w= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:53 2026 by rpki-client