$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa File: c81ecdd5-605b-3621-b645-cf3f099edbbf.roa (raw, json) Hash identifier: +ykRfJkxNb5Hls0hFJaiz+8e3herU+U3qzIV8tWvB0I= Subject key identifier: 57:5F:B9:E5:19:50:D4:F3:CF:C2:33:40:83:A1:9A:EE:03:05:3C:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECC060817C66237C931000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c0:60:81:7c:66:23:7c:93:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=d8f4d4c3-3e9d-4bfb-be33-e8c01048b696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:68:fa:99:82:26:7e:0d:c3:79:eb:4d:35: 4d:a3:05:bd:c9:cc:a5:cd:bf:d2:2a:0d:c6:c3:54: 02:7a:ed:2e:67:ca:72:45:04:82:ca:26:e3:79:19: ed:c8:ae:d2:07:ce:b0:92:62:da:9a:4b:e7:e9:42: 0c:49:51:87:39:64:13:82:4c:74:f4:74:8b:10:51: 0c:a0:f2:32:a6:f3:85:b7:99:00:b7:93:2f:76:c8: 48:8d:29:cc:8d:01:9d:4f:8c:33:02:b2:b1:e9:db: 32:d4:7b:75:5e:9f:47:70:55:e2:5b:86:86:10:27: 27:05:87:4d:16:6e:f8:f0:9f:c2:72:48:25:b9:41: 15:a8:97:e4:09:10:e9:8c:00:0b:5d:be:78:b5:8b: ca:13:0c:a3:9b:0a:64:eb:05:78:4a:d3:c5:05:93: 8e:08:4d:1f:d2:8f:91:e4:b8:4d:3c:7e:a7:42:e8: d3:0a:7a:18:10:db:1d:ef:53:db:ef:37:de:7d:3e: ce:b5:29:8c:e6:43:0c:69:4f:b0:b3:bb:c6:c9:bd: 7d:7a:b7:05:9f:fe:10:73:b6:9d:19:1f:6d:cf:29: 11:9f:9e:3a:62:9c:a3:89:d4:5f:1a:b7:6a:46:34: 2f:19:ad:9b:80:1f:a0:c5:09:1b:76:17:74:68:fb: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5F:B9:E5:19:50:D4:F3:CF:C2:33:40:83:A1:9A:EE:03:05:3C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:83:9c:ad:75:0a:b0:4b:1a:ba:bf:03:5e:16:16:50:4d:07: db:66:a9:6c:5c:70:51:25:e6:73:ef:0b:1a:f4:80:b6:e6:dc: 41:55:2e:58:24:7f:9a:8f:44:23:29:c3:93:c2:8a:d4:a5:c7: b1:98:47:48:52:60:75:7c:10:cf:28:e7:41:f1:f6:08:8d:61: 4b:c5:40:ee:f8:34:35:3a:45:fd:3b:ce:e3:73:89:bf:f3:ec: 39:69:c3:65:88:69:44:92:06:a6:33:4f:4c:32:22:19:7a:27: 25:9b:b9:ed:ea:f3:56:8f:d4:09:ed:ce:58:66:69:4f:65:71: ca:cb:c0:93:dc:f4:76:20:fb:24:32:69:98:65:ba:75:77:06: 11:5e:37:ae:77:8d:34:3d:10:45:e9:42:b4:db:fd:e3:32:44: 64:c6:9b:87:02:f9:a9:30:bd:c6:f6:c1:62:4f:7d:65:7d:7e: ab:38:a8:c6:c8:db:fc:7f:de:90:13:cd:d3:60:a2:e7:59:30: 0b:54:d7:59:87:e8:4b:c3:0b:90:24:63:0e:aa:35:92:05:92: 5d:aa:05:6d:c4:55:bb:0c:57:35:87:95:84:e4:e0:c7:c1:f3: 82:9f:63:05:09:85:5c:dd:e3:92:49:bc:f1:ed:97:e2:5c:e5: 4e:b4:5b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MBggXxmI3yTEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDhmNGQ0YzMtM2U5ZC00YmZiLWJlMzMtZThjMDEwNDhiNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8po+pmCJn4Nw3nrTTVNowW9ycylzb/SKg3G w1QCeu0uZ8pyRQSCyibjeRntyK7SB86wkmLamkvn6UIMSVGHOWQTgkx09HSLEFEM oPIypvOFt5kAt5MvdshIjSnMjQGdT4wzArKx6dsy1Ht1Xp9HcFXiW4aGECcnBYdN Fm748J/CckgluUEVqJfkCRDpjAALXb54tYvKEwyjmwpk6wV4StPFBZOOCE0f0o+R 5LhNPH6nQujTCnoYENsd71Pb7zfefT7OtSmM5kMMaU+ws7vGyb19ercFn/4Qc7ad GR9tzykRn546YpyjidRfGrdqRjQvGa2bgB+gxQkbdhd0aPsyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdfueUZUNTzz8IzQIOhmu4DBTxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzgxZWNkZDUtNjA1Yi0z NjIxLWI2NDUtY2YzZjA5OWVkYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyDnK11CrBLGrq/A14WFlBNB9tmqWxccFEl5nPvCxr0gLbm3EFVLlgk f5qPRCMpw5PCitSlx7GYR0hSYHV8EM8o50Hx9giNYUvFQO74NDU6Rf07zuNzib/z 7Dlpw2WIaUSSBqYzT0wyIhl6JyWbue3q81aP1AntzlhmaU9lccrLwJPc9HYg+yQy aZhlunV3BhFeN653jTQ9EEXpQrTb/eMyRGTGm4cC+akwvcb2wWJPfWV9fqs4qMbI 2/x/3pATzdNgoudZMAtU11mH6EvDC5AkYw6qNZIFkl2qBW3EVbsMVzWHlYTk4MfB 84KfYwUJhVzd45JJvPHtl+Jc5U60W0k= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:11 2025 by rpki-client