$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa File: 9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa (raw, json) Hash identifier: 9Grh4PFxdQUl8ZFLeaWSq3NvP/pgkMHKl6xXpUBXWXw= Subject key identifier: BD:75:85:20:6B:5C:C7:A1:75:44:65:35:74:C6:93:BE:1C:24:BF:AD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2B919B6696081C6E0D681540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 15169 IP address blocks: 172.253.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:9b:66:96:08:1c:6e:0d:68:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=83a4d56f-0fbc-4cad-a27d-7643001ec154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:82:cc:07:ab:c2:bd:70:c9:1b:9d:b2:55:d2: fa:21:7d:da:8a:a2:b6:88:bc:02:40:b0:b7:70:2a: 63:26:e3:bd:74:25:ff:26:e0:6c:3c:de:08:b2:b0: 40:78:78:38:e6:dc:69:15:84:e0:b5:b4:46:5b:1d: 98:a7:15:9c:d0:d7:71:61:77:b6:aa:32:cb:ea:a0: a2:d9:bc:c0:60:6a:e1:0b:81:0e:9b:94:1c:f5:4a: 9b:a2:0b:b1:e4:4a:6e:36:13:52:b4:9a:44:23:4b: 51:a7:9d:9e:16:88:2d:52:61:d7:cd:16:86:32:e3: 94:67:59:f6:b3:25:b0:b7:79:d2:c1:61:c3:cf:54: 2e:1a:d6:e3:4a:e5:c2:83:28:a7:2e:10:60:43:ca: 9f:ef:f4:41:91:e5:ce:7d:e6:60:7c:5f:c4:77:82: 02:5e:8c:92:6a:35:21:63:fc:a6:ec:15:07:16:a2: a0:66:75:9a:64:04:29:e9:0e:f3:2a:8c:2b:10:1a: 26:1d:0f:5e:2f:a7:74:6e:9d:35:4a:44:11:78:65: df:1c:09:69:b5:d0:ce:d7:e0:09:0a:a6:a5:fd:21: 91:db:a5:01:59:13:20:f3:6c:c6:48:67:95:6e:d3: 4f:f7:e2:a7:b6:92:5b:c0:96:d5:b3:6c:b6:33:0e: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:75:85:20:6B:5C:C7:A1:75:44:65:35:74:C6:93:BE:1C:24:BF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:45:71:76:5c:db:8b:7f:e9:2f:7d:7e:a2:78:66:9b:0b:83: f0:b2:7d:fd:83:09:d9:c9:c5:77:66:ad:9f:9b:68:f8:e4:40: e1:28:d4:9a:a5:5d:25:7b:0b:0a:48:78:ea:cf:7f:9a:e1:ad: 07:7a:df:2f:06:4a:90:a1:fb:45:f2:eb:27:20:be:32:b7:fe: 17:93:0b:25:a5:93:6d:f1:79:aa:d2:ef:4f:72:70:c0:5e:45: 22:1b:41:bc:31:26:74:fb:27:33:3b:4b:96:52:f7:da:35:4c: 1d:53:dc:58:cc:e8:8c:4d:be:b2:ef:aa:0a:17:78:0b:92:38: 39:cf:9b:40:05:af:60:c2:49:a6:ce:7f:cc:da:e4:8d:ec:24: 7f:62:a0:37:16:2d:65:b5:72:fb:45:d0:26:07:f1:e6:0b:0c: 19:d7:96:8c:fd:67:e3:d4:e9:72:c8:5b:11:a8:4d:1b:c6:ea: fb:a5:bc:29:58:45:a2:93:9e:ba:04:ad:98:df:0a:1b:8a:42: 50:75:d5:34:c9:06:60:be:7e:af:7d:1a:19:81:69:cf:4b:6e: fe:1f:74:4f:6c:88:a5:77:7d:6a:b7:5b:fb:69:50:b8:f5:76: 43:6a:9a:c6:d0:46:0d:3c:e9:21:12:fe:ca:e0:ca:5c:55:26: 7e:86:86:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZtmlggcbg1oFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ODNhNGQ1NmYtMGZiYy00Y2FkLWEyN2QtNzY0MzAwMWVjMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhILMB6vCvXDJG52yVdL6IX3aiqK2iLwCQLC3 cCpjJuO9dCX/JuBsPN4IsrBAeHg45txpFYTgtbRGWx2YpxWc0NdxYXe2qjLL6qCi 2bzAYGrhC4EOm5Qc9Uqbogux5EpuNhNStJpEI0tRp52eFogtUmHXzRaGMuOUZ1n2 syWwt3nSwWHDz1QuGtbjSuXCgyinLhBgQ8qf7/RBkeXOfeZgfF/Ed4ICXoySajUh Y/ym7BUHFqKgZnWaZAQp6Q7zKowrEBomHQ9eL6d0bp01SkQReGXfHAlptdDO1+AJ Cqal/SGR26UBWRMg82zGSGeVbtNP9+KntpJbwJbVs2y2Mw7uJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL11hSBrXMehdURlNXTGk74cJL+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWJmMDU2NGItOGFkMC0z MjJkLWIzODMtZTAyMWVmMzZjMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFFcXZc24t/6S99fqJ4ZpsLg/Cyff2DCdnJxXdmrZ+baPjkQOEo1Jql XSV7CwpIeOrPf5rhrQd63y8GSpCh+0Xy6ycgvjK3/heTCyWlk23xearS709ycMBe RSIbQbwxJnT7JzM7S5ZS99o1TB1T3FjM6IxNvrLvqgoXeAuSODnPm0AFr2DCSabO f8za5I3sJH9ioDcWLWW1cvtF0CYH8eYLDBnXloz9Z+PU6XLIWxGoTRvG6vulvClY RaKTnroErZjfChuKQlB11TTJBmC+fq99GhmBac9Lbv4fdE9siKV3fWq3W/tpULj1 dkNqmsbQRg086SES/srgylxVJn6Ghpc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:03 2025 by rpki-client