$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa File: e8ad7381-6239-3390-b529-574e6606e15f.roa (raw, json) Hash identifier: P+v08GpDA7AWvpuIibKYYJ8G32zLn1o1LfWlynvgKiI= Subject key identifier: 05:52:FD:42:1C:C5:CD:FF:57:AF:48:1D:99:DE:AE:1D:0A:D5:78:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B8A7CD0042338543A7346C400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 15169 IP address blocks: 172.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d0:04:23:38:54:3a:73:46:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=5be978f5-ee06-4a37-a94b-d8362bc463f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:db:13:fb:5f:74:51:ed:c9:97:df:8e:3c: da:63:8e:4d:67:bc:2f:b0:cf:33:8e:c4:0b:9a:3d: 95:8e:ec:c1:b3:20:db:bc:5b:41:ee:26:47:24:01: 08:7c:4f:b3:85:ee:1e:05:54:e7:96:b3:bc:7c:00: f5:45:3e:c9:33:dd:12:36:59:68:62:e3:ac:a6:c7: 66:0f:77:75:92:77:c7:2a:f4:81:b5:9b:cb:71:b0: 25:0d:a6:ac:8c:02:89:1b:f6:93:58:e7:66:48:92: 19:39:46:7a:06:0e:0e:89:2d:03:a7:60:53:be:93: 39:24:7f:39:fc:69:13:e1:b2:3e:e5:c9:17:b9:db: 82:5c:6b:2a:4b:64:20:c4:c1:1e:50:f8:1d:21:70: 08:81:ef:3c:38:77:0a:83:32:e3:da:9e:38:6c:ee: 20:e7:ff:62:26:0c:28:3d:df:c5:31:e3:92:e2:5f: e9:7c:ac:bd:15:5b:a9:11:cf:50:84:4c:ef:59:27: 15:02:1a:1d:9f:d6:44:3c:0f:79:af:c7:87:87:df: e4:ee:57:71:ac:65:eb:c1:0b:5a:f5:64:3f:10:e3: f0:60:62:41:a7:d0:be:ee:34:2c:16:84:4b:86:12: f7:30:cd:6f:da:54:64:c0:d9:38:77:6f:1a:f0:05: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:52:FD:42:1C:C5:CD:FF:57:AF:48:1D:99:DE:AE:1D:0A:D5:78:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:59:f3:a3:73:26:be:9b:b0:f2:f5:92:8c:1a:4c:da:34:51: 51:f7:75:46:b6:10:bb:d1:e9:c5:a4:5d:6b:18:25:d0:7d:77: a4:bb:b2:c8:e3:8f:49:dd:33:d6:ed:45:6d:3d:e8:77:00:fd: ba:94:85:6f:64:aa:7b:7a:9c:e4:33:9e:69:3c:ec:07:62:84: 71:18:af:40:12:9f:da:4d:8d:ec:73:77:d5:a7:b7:16:f4:6e: 2e:88:45:60:c6:e0:b4:4c:a2:98:30:53:3d:d1:f7:60:4f:8a: aa:ae:69:cd:1b:6f:26:22:c7:31:a4:18:e2:5f:d7:5f:22:ed: 33:fa:9c:aa:54:ce:31:70:f6:7e:02:46:41:fa:fa:11:ad:45: 3b:0a:e5:42:98:c9:c8:57:fb:52:1a:8b:42:9e:a7:d4:79:04: d5:6f:d8:50:f1:5d:99:60:1a:0e:c8:6a:48:08:84:46:7e:ef: ed:be:40:66:f2:a4:8a:ef:13:39:7f:53:85:26:27:dc:18:01: 3c:bb:e9:f7:04:ce:cc:fa:fb:5b:36:94:ab:a0:48:5b:75:e5: f1:ab:bd:53:20:41:2a:04:a3:6e:1c:de:00:3a:76:ec:2b:2b: 6b:e7:0f:88:f7:2a:17:c8:74:86:fe:bc:cf:94:89:8e:cf:d9: 68:b5:b4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNAEIzhUOnNGxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk NWJlOTc4ZjUtZWUwNi00YTM3LWE5NGItZDgzNjJiYzQ2M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXHbE/tfdFHtyZffjjzaY45NZ7wvsM8zjsQL mj2VjuzBsyDbvFtB7iZHJAEIfE+zhe4eBVTnlrO8fAD1RT7JM90SNlloYuOspsdm D3d1knfHKvSBtZvLcbAlDaasjAKJG/aTWOdmSJIZOUZ6Bg4OiS0Dp2BTvpM5JH85 /GkT4bI+5ckXuduCXGsqS2QgxMEeUPgdIXAIge88OHcKgzLj2p44bO4g5/9iJgwo Pd/FMeOS4l/pfKy9FVupEc9QhEzvWScVAhodn9ZEPA95r8eHh9/k7ldxrGXrwQta 9WQ/EOPwYGJBp9C+7jQsFoRLhhL3MM1v2lRkwNk4d28a8AXiwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVS/UIcxc3/V69IHZnerh0K1XjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZThhZDczODEtNjIzOS0z MzkwLWI1MjktNTc0ZTY2MDZlMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFZ86NzJr6bsPL1kowaTNo0UVH3dUa2ELvR6cWkXWsYJdB9d6S7ssjj j0ndM9btRW096HcA/bqUhW9kqnt6nOQznmk87AdihHEYr0ASn9pNjexzd9Wntxb0 bi6IRWDG4LRMopgwUz3R92BPiqquac0bbyYixzGkGOJf118i7TP6nKpUzjFw9n4C RkH6+hGtRTsK5UKYychX+1Iai0Kep9R5BNVv2FDxXZlgGg7IakgIhEZ+7+2+QGby pIrvEzl/U4UmJ9wYATy76fcEzsz6+1s2lKugSFt15fGrvVMgQSoEo24c3gA6duwr K2vnD4j3KhfIdIb+vM+UiY7P2Wi1tAk= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:21 2025 by rpki-client