$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa File: c87c6bc1-87e9-3fd3-9602-ac677580c521.roa (raw, json) Hash identifier: f/6Nurvnr3a+bzg3HDtS77YCcncFusreldQ/+DU0fY4= Subject key identifier: 7E:0C:F7:F7:C5:36:46:72:71:17:DC:44:C5:4C:1C:06:64:4C:FC:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5F8380207A60E12F6880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5f:83:80:20:7a:60:e1:2f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c2c22694-86a1-4fca-8592-be89c56ef59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:42:da:0a:80:b7:3d:b5:28:0a:56:a8:0a: ce:cc:60:80:e2:d6:bb:4d:8c:55:4d:f9:1f:31:45: 9b:69:c8:b1:bd:e3:81:f4:8b:f6:ef:2b:1b:f5:d5: c8:c1:46:f9:4f:e4:02:70:ae:5f:97:73:0b:5b:bb: ea:50:43:30:6c:e4:af:06:50:81:46:14:88:5a:be: e8:c9:2d:30:9b:57:5b:4b:43:a7:0f:17:a9:37:d6: 58:cd:e5:c3:56:38:02:66:8c:49:40:47:01:49:b5: 50:d5:4e:0d:ef:99:8e:e9:91:9e:95:f8:7a:b5:a1: 0b:f8:61:90:37:82:c2:18:3e:a7:83:c3:30:7c:29: ff:8d:4c:94:3d:c2:f0:cd:a2:89:38:fe:1f:95:c6: 18:9c:11:c5:e8:a6:68:2d:d4:09:1b:6c:af:4f:dc: 98:79:db:06:02:6c:60:8f:76:ba:03:90:d5:51:a6: 8f:7c:e5:fe:5f:12:84:da:80:13:63:8c:3d:30:b7: d8:34:b7:4c:c2:42:ef:23:4d:1a:9c:fb:9a:5c:f2: f8:e3:37:ce:a7:5b:a5:6b:41:67:9a:55:3f:fa:0d: 7a:44:d7:b5:1f:eb:9d:46:7a:db:69:4f:d2:59:9e: 22:13:3c:19:3d:17:2f:c3:db:c8:58:37:24:16:e6: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0C:F7:F7:C5:36:46:72:71:17:DC:44:C5:4C:1C:06:64:4C:FC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:91:17:0d:be:45:c5:61:dc:6b:64:f3:f0:38:87:6d:a4:f5: 51:07:2c:b4:22:f9:13:cc:31:cc:31:3f:84:3f:7f:b6:df:2e: a9:94:00:2b:3a:66:3f:03:8f:c4:82:bb:f4:93:3a:34:e8:c5: 30:73:cf:9b:33:fd:2a:af:44:ac:59:92:37:2c:f8:5d:5d:32: f5:ec:bb:53:25:82:11:f0:4b:d8:d8:13:eb:cd:cb:d5:76:82: 05:53:0c:42:23:3e:b0:43:95:9b:15:a9:de:92:d6:ed:a1:75: 73:bf:6e:44:fb:ec:22:21:4d:91:6f:50:68:b5:54:8b:98:3c: 5e:4f:03:af:85:da:3e:e7:4e:9c:ca:e6:ef:1f:d8:90:91:79: 35:24:66:75:81:03:88:2f:64:1f:8b:e9:79:92:b9:b2:1b:82: a7:27:8a:51:8b:2f:5e:df:2d:8f:61:d0:11:b5:83:28:de:15: cd:2d:5a:8e:ad:f8:d0:cc:35:32:42:60:f1:97:d5:8e:a5:b1: 7b:81:a9:20:5e:60:12:90:4c:59:65:36:06:db:0a:4a:f4:66: 0d:73:2b:ca:e4:89:b5:7c:0d:7e:11:d9:4a:ad:32:73:af:42: 04:ee:04:84:7a:2c:26:a0:da:57:1a:a9:9c:72:c1:ae:be:78: 32:db:3d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzV+DgCB6YOEvaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzJjMjI2OTQtODZhMS00ZmNhLTg1OTItYmU4OWM1NmVmNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOpC2gqAtz21KApWqArOzGCA4ta7TYxVTfkf MUWbacixveOB9Iv27ysb9dXIwUb5T+QCcK5fl3MLW7vqUEMwbOSvBlCBRhSIWr7o yS0wm1dbS0OnDxepN9ZYzeXDVjgCZoxJQEcBSbVQ1U4N75mO6ZGelfh6taEL+GGQ N4LCGD6ng8MwfCn/jUyUPcLwzaKJOP4flcYYnBHF6KZoLdQJG2yvT9yYedsGAmxg j3a6A5DVUaaPfOX+XxKE2oATY4w9MLfYNLdMwkLvI00anPuaXPL44zfOp1ula0Fn mlU/+g16RNe1H+udRnrbaU/SWZ4iEzwZPRcvw9vIWDckFuZ8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4M9/fFNkZycRfcRMVMHAZkTPwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzg3YzZiYzEtODdlOS0z ZmQzLTk2MDItYWM2Nzc1ODBjNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECRFw2+RcVh3Gtk8/A4h22k9VEHLLQi+RPMMcwxP4Q/f7bfLqmUACs6 Zj8Dj8SCu/STOjToxTBzz5sz/SqvRKxZkjcs+F1dMvXsu1MlghHwS9jYE+vNy9V2 ggVTDEIjPrBDlZsVqd6S1u2hdXO/bkT77CIhTZFvUGi1VIuYPF5PA6+F2j7nTpzK 5u8f2JCReTUkZnWBA4gvZB+L6XmSubIbgqcnilGLL17fLY9h0BG1gyjeFc0tWo6t +NDMNTJCYPGX1Y6lsXuBqSBeYBKQTFllNgbbCkr0Zg1zK8rkibV8DX4R2UqtMnOv QgTuBIR6LCag2lcaqZxywa6+eDLbPSg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:04 2025 by rpki-client