$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa File: afebb486-0f96-3759-8dac-4c467b19c8de.roa (raw, json) Hash identifier: dT9SgFj5PxTFio5P30PCJCHVEaxxVlY/GwtxZ1raoVY= Subject key identifier: 6F:19:D8:69:91:FB:CD:76:FE:AB:4E:C7:03:A3:CA:72:DE:52:B7:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B4860857E02A1A7F98B1E3E20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa Signing time: Mon 22 Sep 2025 20:40:23 +0000 ROA not before: Mon 22 Sep 2025 20:40:23 +0000 ROA not after: Sun 21 Dec 2025 21:40:23 +0000 asID: 15169 IP address blocks: 172.253.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:60:85:7e:02:a1:a7:f9:8b:1e:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 22 20:40:23 2025 GMT Not After : Dec 21 21:40:23 2025 GMT Subject: CN=6331feb1-41bb-40aa-8cfd-dac116f9b60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:f8:17:72:0c:e8:1c:5e:67:50:3a:ff:c7: 74:96:cd:50:cb:7f:b9:5f:90:e1:e4:49:2a:a8:49: 44:19:df:3e:52:a4:8c:84:05:7f:13:48:33:e1:3f: 9a:71:aa:8f:98:2c:b7:ef:ad:a8:d5:64:11:05:65: 1c:b6:57:eb:07:ab:d3:2a:85:33:17:fb:aa:49:ff: cd:25:dc:9b:4f:89:88:12:59:c6:e7:8a:83:6b:a3: fe:1d:27:0b:1a:29:97:10:85:8b:be:28:bd:a5:0d: 44:ef:6f:16:11:39:3b:81:b1:f3:10:b0:b6:ee:a2: ec:da:20:e0:c5:00:d1:7e:96:06:e6:7c:71:1b:1c: ac:c6:2f:ef:2d:b7:ec:3c:84:bf:b4:6b:6b:7b:db: ec:53:24:75:7e:64:23:52:bd:26:f7:28:8e:53:4b: 54:11:d0:6f:ee:58:60:55:e1:0d:d2:58:58:23:e4: 76:ab:b9:dd:07:c5:36:b5:ac:a3:7b:7f:27:91:b3: 03:b5:5d:91:d3:6c:ee:b1:3a:4f:56:2f:ab:de:44: 02:fe:7d:96:27:90:b8:f7:1e:5e:23:c7:84:15:cd: 4d:1e:b7:31:dd:61:b5:b1:37:b0:b4:92:c5:55:d1: 52:08:10:ea:17:1a:85:e5:af:98:5e:53:69:22:ea: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:19:D8:69:91:FB:CD:76:FE:AB:4E:C7:03:A3:CA:72:DE:52:B7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a4:28:1d:6e:ca:45:a0:a9:57:9e:ec:43:6b:18:22:b6:4c: d5:b0:82:13:75:50:da:07:c3:0b:4c:08:3c:3e:57:a4:7f:5c: b7:c2:51:b0:53:a0:e2:84:44:00:61:c5:86:d4:18:f1:55:1b: 93:57:40:31:1e:c1:66:2d:2c:85:ed:82:5c:c8:7e:3e:0d:a6: 01:94:f8:cd:07:55:de:fa:59:cd:a1:de:a0:7f:4f:2b:6e:2a: 1b:94:b3:5d:44:99:63:28:83:00:bc:61:7e:00:99:b6:e9:4f: 91:09:2c:5a:b5:9f:f1:e3:65:26:0c:ba:9f:d0:21:31:4b:a9: 03:92:c6:35:bb:b9:35:b7:17:97:be:09:0d:6d:d2:14:36:32: 45:b6:78:d1:e1:d2:21:a3:72:b9:22:5f:62:3e:d4:43:05:aa: 53:d3:a9:52:a8:5d:88:6d:44:27:c6:9b:c9:d8:fc:9e:ee:92: 10:91:c6:be:f8:c2:80:f9:e1:b3:5e:46:1a:38:65:78:32:b4: b1:88:e1:fd:a5:42:e7:60:8e:d1:f1:30:c8:4f:43:0c:2c:c2: 2d:b4:f2:79:cd:c5:9a:53:ac:52:b6:9e:0f:81:22:0f:34:e6: f1:d5:95:cf:09:e2:b2:dc:1f:47:02:72:50:d1:b9:d0:83:0a: 06:68:a5:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtIYIV+AqGn+YsePiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkyMjIwNDAyM1oXDTI1MTIyMTIxNDAyM1owLzEtMCsGA1UEAxMk NjMzMWZlYjEtNDFiYi00MGFhLThjZmQtZGFjMTE2ZjliNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzan4F3IM6BxeZ1A6/8d0ls1Qy3+5X5Dh5Ekq qElEGd8+UqSMhAV/E0gz4T+acaqPmCy3762o1WQRBWUctlfrB6vTKoUzF/uqSf/N JdybT4mIElnG54qDa6P+HScLGimXEIWLvii9pQ1E728WETk7gbHzELC27qLs2iDg xQDRfpYG5nxxGxysxi/vLbfsPIS/tGtre9vsUyR1fmQjUr0m9yiOU0tUEdBv7lhg VeEN0lhYI+R2q7ndB8U2tayje38nkbMDtV2R02zusTpPVi+r3kQC/n2WJ5C49x5e I8eEFc1NHrcx3WG1sTewtJLFVdFSCBDqFxqF5a+YXlNpIuo2WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8Z2GmR+812/qtOxwOjynLeUreyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWZlYmI0ODYtMGY5Ni0z NzU5LThkYWMtNGM0NjdiMTljOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFikKB1uykWgqVee7ENrGCK2TNWwghN1UNoHwwtMCDw+V6R/XLfCUbBT oOKERABhxYbUGPFVG5NXQDEewWYtLIXtglzIfj4NpgGU+M0HVd76Wc2h3qB/Tytu KhuUs11EmWMogwC8YX4AmbbpT5EJLFq1n/HjZSYMup/QITFLqQOSxjW7uTW3F5e+ CQ1t0hQ2MkW2eNHh0iGjcrkiX2I+1EMFqlPTqVKoXYhtRCfGm8nY/J7ukhCRxr74 woD54bNeRho4ZXgytLGI4f2lQudgjtHxMMhPQwwswi208nnNxZpTrFK2ng+BIg80 5vHVlc8J4rLcH0cCclDRudCDCgZopSg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:47 2025 by rpki-client