$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa File: a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa (raw, json) Hash identifier: hgCvlMkj0UVgBX1po32YJWtDzthLLrnrWb4c8066d80= Subject key identifier: 9B:75:A4:FE:ED:1E:73:BE:AE:AD:3F:A7:48:C8:CF:15:4A:73:99:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E029669598EE38F3E79E60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:29:66:95:98:ee:38:f3:e7:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3bafed92-0320-43f9-af55-be59a6414344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:ff:aa:b6:8e:72:fe:41:82:e9:74:e0:69: 92:92:6b:df:bd:e0:32:1f:c6:f0:04:1c:59:b8:fb: 64:ac:00:56:ab:67:03:32:29:cd:c2:25:96:d4:05: 05:8c:26:da:ed:5a:74:a2:a7:32:b5:43:77:6c:14: 09:10:bb:0f:ba:f7:f8:a9:cf:df:d9:c6:75:3d:d6: cf:ac:9b:24:a4:36:49:e1:bf:24:5d:05:b0:ec:6d: 3a:b8:36:ee:5e:c8:af:ad:40:e9:36:1b:eb:e2:06: b9:5b:39:21:0b:42:fa:51:40:00:6d:52:c1:a8:2e: 91:c9:4c:ca:98:47:d5:3c:4b:d3:7b:aa:1e:d2:1c: c2:3e:00:96:94:7e:59:9a:a8:1e:d2:f1:70:80:ca: b0:28:2e:21:c3:d7:0a:19:a6:97:73:84:37:d8:c3: 20:da:6f:39:22:9d:f3:20:ad:d9:01:03:a0:d6:3a: 55:73:f2:21:b9:96:11:47:ef:95:92:3f:71:09:5a: d8:87:f1:d3:ae:0f:8c:46:52:23:3c:be:f6:98:56: 37:01:90:fe:11:57:a5:d5:71:56:3e:ce:b2:dd:21: a3:3d:31:f1:72:c7:e0:3b:6a:a4:fe:74:03:6c:aa: 9d:e5:15:31:5a:52:df:a9:87:ad:c6:a5:20:c9:ed: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:75:A4:FE:ED:1E:73:BE:AE:AD:3F:A7:48:C8:CF:15:4A:73:99:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8e:21:7b:a4:63:40:fa:84:4c:a8:ea:de:07:6a:f2:08:24: ee:06:0c:e1:7a:51:13:b0:88:3c:72:e1:fa:86:b6:6a:df:e0: bd:46:c5:69:87:43:8d:c9:fb:a0:4f:ff:9d:23:07:14:21:67: fc:3a:9b:08:ce:1a:85:a9:b8:be:ee:61:ca:6d:85:1a:52:f7: 42:4b:87:1a:56:2e:73:4e:33:16:66:91:54:2f:30:c9:67:bf: 33:c3:1a:05:9f:f5:56:0d:04:f7:a2:03:73:d6:d5:af:4b:c1: b9:5b:be:7c:45:5b:01:65:22:f8:f9:e7:ca:8a:bf:93:42:82: 38:69:e4:8a:4a:f7:e4:7c:e4:9b:db:95:70:25:18:b5:c5:ec: 3c:b4:ed:c3:97:b3:3b:05:08:41:41:a4:03:e3:7b:3c:b8:52: 70:6a:fd:a7:23:a2:cb:ea:87:89:da:02:43:4e:d6:5b:8c:ad: 66:92:a0:c0:92:66:72:12:9b:b7:e8:b9:46:cd:e8:d4:b0:74: a9:9c:5e:47:27:85:4b:fa:9f:70:98:99:8e:3d:4e:17:ed:3c: f3:68:13:4f:c2:4e:81:5a:56:9a:a4:85:e3:e6:0c:15:7c:04: 6b:d7:f8:3e:e1:c2:8c:24:e8:ef:ae:e5:c7:ab:fb:1b:4a:29: 74:a5:2f:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ClmlZjuOPPnnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2JhZmVkOTItMDMyMC00M2Y5LWFmNTUtYmU1OWE2NDE0MzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPX/qraOcv5Bgul04GmSkmvfveAyH8bwBBxZ uPtkrABWq2cDMinNwiWW1AUFjCba7Vp0oqcytUN3bBQJELsPuvf4qc/f2cZ1PdbP rJskpDZJ4b8kXQWw7G06uDbuXsivrUDpNhvr4ga5WzkhC0L6UUAAbVLBqC6RyUzK mEfVPEvTe6oe0hzCPgCWlH5Zmqge0vFwgMqwKC4hw9cKGaaXc4Q32MMg2m85Ip3z IK3ZAQOg1jpVc/IhuZYRR++Vkj9xCVrYh/HTrg+MRlIjPL72mFY3AZD+EVel1XFW Ps6y3SGjPTHxcsfgO2qk/nQDbKqd5RUxWlLfqYetxqUgye2/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt1pP7tHnO+rq0/p0jIzxVKc5kUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQ5NTc1MjAtOTM5Ny0z N2JiLWIwMmYtYmUyZTBlOWU0ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6OIXukY0D6hEyo6t4HavIIJO4GDOF6UROwiDxy4fqGtmrf4L1GxWmH Q43J+6BP/50jBxQhZ/w6mwjOGoWpuL7uYcpthRpS90JLhxpWLnNOMxZmkVQvMMln vzPDGgWf9VYNBPeiA3PW1a9LwblbvnxFWwFlIvj558qKv5NCgjhp5IpK9+R85Jvb lXAlGLXF7Dy07cOXszsFCEFBpAPjezy4UnBq/acjosvqh4naAkNO1luMrWaSoMCS ZnISm7fouUbN6NSwdKmcXkcnhUv6n3CYmY49ThftPPNoE0/CToFaVpqkhePmDBV8 BGvX+D7hwowk6O+u5cer+xtKKXSlL1k= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:33 2026 by rpki-client