$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa File: b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa (raw, json) Hash identifier: WrrDhzizHHbe+fAmD8Yx4l+xwZuDchyq2poWWUJmyUU= Subject key identifier: 53:FC:62:29:CF:EC:13:C2:D1:76:B6:6D:4A:4E:93:34:98:11:7F:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F266457369D16044DCE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 172.253.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f2:66:45:73:69:d1:60:44:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d02f7c4f-6964-4c86-a600-e7af3ab1fb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:c4:d3:f2:4d:0f:5a:08:74:52:9e:a2:f1: 90:0b:6e:e3:bd:3c:78:22:46:cb:13:6f:e0:27:d5: f9:c7:9b:96:7b:eb:18:c8:9b:69:38:7f:16:5d:a3: 59:cc:5b:ae:30:54:f2:b8:1d:6f:7e:ca:26:b3:65: 5d:b2:1e:d6:5d:60:0f:87:b3:57:ce:02:b9:66:6b: fa:22:f9:f8:aa:cd:e7:3f:66:ab:f2:00:d4:bb:de: 9a:39:d8:d9:87:b5:4d:04:8f:e8:04:4d:3e:d9:df: d5:6e:24:ab:02:17:c6:4b:6a:c9:f3:35:e8:82:1a: cd:e7:fa:0f:1b:f4:50:74:23:41:6f:cd:57:6f:62: 85:0a:bd:24:e8:fc:b8:11:1a:7c:1b:fa:db:d0:d1: aa:61:50:37:48:37:ba:f2:2c:cc:1d:8f:90:de:f4: 02:ce:41:e8:be:47:e4:a2:05:ce:8c:88:b6:17:0e: 8f:dc:3f:db:ed:1d:7e:2d:41:74:24:6b:a3:57:1e: 44:fe:81:7d:57:e4:7b:4a:04:a0:f3:d2:cf:4b:94: 1d:15:9a:0e:ac:08:ed:0e:d0:26:c2:5f:35:b3:2b: aa:02:20:2f:5b:e7:2f:98:4a:e0:04:58:dd:77:9f: 77:02:46:24:e4:3d:3c:59:96:3f:79:78:51:b1:41: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FC:62:29:CF:EC:13:C2:D1:76:B6:6D:4A:4E:93:34:98:11:7F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2c1f1a2-24e6-3840-a1ea-451f0625a066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:29:0a:05:39:73:cd:2f:93:ff:2b:0b:aa:6a:08:ee:17:d6: 85:24:03:4b:b2:82:9c:d2:92:7f:bd:4c:e8:38:f7:31:c6:08: a3:6b:f5:af:88:71:bc:03:06:87:78:fd:53:46:45:70:1d:44: bb:ed:ea:d5:90:f9:82:2d:65:e2:1a:93:d8:c0:ab:cb:3f:cd: 20:82:3f:d0:df:54:bb:2a:cf:99:28:13:cd:67:3a:7e:11:e2: 8a:c2:42:81:a7:2d:bb:a2:88:bd:f9:58:e7:6f:62:ab:1f:5d: 52:95:7e:cb:3d:c1:c0:57:94:03:44:d8:41:ce:25:2a:52:75: ec:b6:5a:2d:5f:7d:59:22:71:a4:4f:bb:5a:9e:ec:ef:de:8f: 1f:28:4d:78:ee:2d:5d:69:17:04:eb:c0:1d:e4:f2:7a:cd:b9: 7f:23:0b:f6:7d:2d:0c:2d:ff:52:b3:ae:d0:ac:46:9b:b1:19: 8e:86:f8:d7:83:58:77:49:c7:a2:d7:02:14:67:b0:3e:c7:d9: 1a:10:ff:08:3b:3d:57:c3:0c:9f:c6:f3:d3:3c:a9:e1:14:96: 94:ee:c8:a2:ec:16:2a:89:d7:46:22:90:34:b2:22:f5:e8:0d: 9b:01:6c:14:8c:5f:17:b3:87:6c:c9:af:31:75:5d:67:2a:ea: 86:0e:aa:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PJmRXNp0WBE3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDAyZjdjNGYtNjk2NC00Yzg2LWE2MDAtZTdhZjNhYjFmYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8HE0/JND1oIdFKeovGQC27jvTx4IkbLE2/g J9X5x5uWe+sYyJtpOH8WXaNZzFuuMFTyuB1vfsoms2Vdsh7WXWAPh7NXzgK5Zmv6 Ivn4qs3nP2ar8gDUu96aOdjZh7VNBI/oBE0+2d/VbiSrAhfGS2rJ8zXoghrN5/oP G/RQdCNBb81Xb2KFCr0k6Py4ERp8G/rb0NGqYVA3SDe68izMHY+Q3vQCzkHovkfk ogXOjIi2Fw6P3D/b7R1+LUF0JGujVx5E/oF9V+R7SgSg89LPS5QdFZoOrAjtDtAm wl81syuqAiAvW+cvmErgBFjdd593AkYk5D08WZY/eXhRsUGquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP8YinP7BPC0Xa2bUpOkzSYEX+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJjMWYxYTItMjRlNi0z ODQwLWExZWEtNDUxZjA2MjVhMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYpCgU5c80vk/8rC6pqCO4X1oUkA0uygpzSkn+9TOg49zHGCKNr9a+I cbwDBod4/VNGRXAdRLvt6tWQ+YItZeIak9jAq8s/zSCCP9DfVLsqz5koE81nOn4R 4orCQoGnLbuiiL35WOdvYqsfXVKVfss9wcBXlANE2EHOJSpSdey2Wi1ffVkicaRP u1qe7O/ejx8oTXjuLV1pFwTrwB3k8nrNuX8jC/Z9LQwt/1KzrtCsRpuxGY6G+NeD WHdJx6LXAhRnsD7H2RoQ/wg7PVfDDJ/G89M8qeEUlpTuyKLsFiqJ10YikDSyIvXo DZsBbBSMXxezh2zJrzF1XWcq6oYOqpU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:13 2026 by rpki-client