$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa File: 9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa (raw, json) Hash identifier: AJkiQlsi76s7IdOeU/V5gka/m11WhEGdkkuMk2zmSr0= Subject key identifier: 19:E7:43:CB:68:52:9A:8A:88:2D:66:4C:86:46:48:2E:67:8F:36:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5AE1EBB39BA18CFC8E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5a:e1:eb:b3:9b:a1:8c:fc:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1a99f300-56ad-415c-9205-303e5f443ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:55:2d:19:21:59:fc:f3:a2:f0:95:47:1b: 5c:ef:d8:3f:88:d2:98:0b:7c:ef:7b:4b:76:40:f6: f0:a7:23:29:a3:13:eb:40:72:93:c4:cb:23:c1:30: 86:bb:aa:45:48:0a:07:94:f8:75:01:c7:51:5e:e5: 85:de:f6:02:76:d8:3c:85:12:19:8a:f3:bf:60:ab: 5c:66:29:08:3a:ed:00:c4:c6:f9:da:13:ed:d9:5c: 89:10:3f:e2:57:4f:12:0a:50:13:e4:71:bd:19:8d: 3b:e6:bb:f5:f6:75:a8:db:94:6e:e6:88:6b:10:18: 2d:7c:f5:36:e9:b5:9c:b8:1c:6e:f9:45:d1:4b:0a: 79:6e:0c:9b:ea:9c:c3:a5:d8:42:0b:ad:d1:c5:50: 33:98:b6:ea:29:55:02:8b:a7:b4:a0:44:56:a2:b7: 9d:7f:06:ec:d7:f0:b4:16:d5:71:90:e5:be:75:16: f2:40:52:52:3b:61:b5:60:fd:ff:c4:ef:05:bb:92: 5d:15:5d:fa:dd:f7:c9:99:ba:42:44:98:d5:56:1a: 23:18:a4:15:41:02:87:36:42:93:29:d6:bf:77:72: 27:f0:76:17:41:9a:b7:96:9e:d6:e7:0e:39:98:a4: dc:d2:02:ca:37:5d:5b:fd:f0:b5:75:92:be:dc:73: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E7:43:CB:68:52:9A:8A:88:2D:66:4C:86:46:48:2E:67:8F:36:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e568d11-bc1e-34d8-a7db-0dfab9001d20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:73:f0:e3:36:23:bc:ff:d6:8b:bd:03:8e:68:90:5b:dd:b3: 0e:37:f6:87:9b:16:a3:bb:3c:97:b6:a7:bf:54:32:71:dc:ca: e5:4b:1c:cc:59:87:ed:ed:83:f5:52:4b:19:03:43:f4:e3:2b: 8f:65:e6:fa:8c:62:fb:57:f6:55:81:b9:0d:d9:c0:51:29:94: c2:08:bf:3d:8a:a3:68:33:1a:58:e8:95:4e:0b:e7:c9:ab:09: f5:39:f3:12:30:36:17:15:00:97:c6:3f:ee:3e:32:a9:43:06: 5c:a3:ee:e1:a8:0c:c0:2f:31:f3:46:5c:d8:60:aa:fc:67:32: 96:83:33:8b:b9:c9:8b:30:ca:ba:e6:46:e0:42:13:6c:4a:65: 64:c2:02:2b:03:e1:77:56:8c:3d:92:b6:0b:12:4a:0b:82:34: 93:e7:a8:bf:95:1d:df:44:d3:2d:96:31:bb:bf:ac:d4:bb:8c: 46:82:2b:fe:06:8d:09:1a:18:1b:88:05:e2:8b:cb:1b:97:fa: c8:20:28:06:36:33:8b:d3:f3:ec:85:1b:0f:b4:77:2b:1e:e9: 41:62:e3:aa:78:dd:21:6f:1f:dd:97:40:b3:19:21:d6:01:e2: 3e:90:ec:90:ab:b0:73:66:db:17:05:bd:59:c2:9d:8e:61:03: 2f:76:aa:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVrh67OboYz8jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWE5OWYzMDAtNTZhZC00MTVjLTkyMDUtMzAzZTVmNDQzZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqBVLRkhWfzzovCVRxtc79g/iNKYC3zve0t2 QPbwpyMpoxPrQHKTxMsjwTCGu6pFSAoHlPh1AcdRXuWF3vYCdtg8hRIZivO/YKtc ZikIOu0AxMb52hPt2VyJED/iV08SClAT5HG9GY075rv19nWo25Ru5ohrEBgtfPU2 6bWcuBxu+UXRSwp5bgyb6pzDpdhCC63RxVAzmLbqKVUCi6e0oERWoredfwbs1/C0 FtVxkOW+dRbyQFJSO2G1YP3/xO8Fu5JdFV363ffJmbpCRJjVVhojGKQVQQKHNkKT Kda/d3In8HYXQZq3lp7W5w45mKTc0gLKN11b/fC1dZK+3HMp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnnQ8toUpqKiC1mTIZGSC5njzYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1NjhkMTEtYmMxZS0z NGQ4LWE3ZGItMGRmYWI5MDAxZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5z8OM2I7z/1ou9A45okFvdsw439oebFqO7PJe2p79UMnHcyuVLHMxZ h+3tg/VSSxkDQ/TjK49l5vqMYvtX9lWBuQ3ZwFEplMIIvz2Ko2gzGljolU4L58mr CfU58xIwNhcVAJfGP+4+MqlDBlyj7uGoDMAvMfNGXNhgqvxnMpaDM4u5yYswyrrm RuBCE2xKZWTCAisD4XdWjD2StgsSSguCNJPnqL+VHd9E0y2WMbu/rNS7jEaCK/4G jQkaGBuIBeKLyxuX+sggKAY2M4vT8+yFGw+0dyse6UFi46p43SFvH92XQLMZIdYB 4j6Q7JCrsHNm2xcFvVnCnY5hAy92qtU= -----END CERTIFICATE-----Generated at Fri Oct 17 10:46:56 2025 by rpki-client