$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa File: e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa (raw, json) Hash identifier: RhMfN5neVH/4inEJLTwbwj+p/3Xx5uEbn/53GHujH/4= Subject key identifier: 70:70:64:30:74:76:03:7E:21:F9:4B:C5:04:7D:B1:F1:57:36:3B:BA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2742CCEA3F0339B1BB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:27:42:cc:ea:3f:03:39:b1:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=aae4edc6-4c49-40fd-a6cb-11f2c636e34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:de:6a:65:a2:9c:2f:72:78:c6:32:66:ca: d4:88:52:69:79:1a:48:ea:4c:47:eb:ae:5a:b7:40: e3:97:17:ea:41:02:e5:5d:21:d8:5e:47:d6:92:f2: 18:22:08:72:eb:98:55:e1:df:93:59:b1:57:22:26: c6:32:99:eb:da:70:02:23:8e:9b:fd:80:10:3f:9a: 14:d9:ef:57:e7:ce:e4:e0:1a:d5:13:6a:26:14:16: 2b:6a:42:ec:29:d2:cc:10:5f:f1:d8:79:0b:bf:d9: de:28:15:bb:19:13:8a:8a:fb:c8:e2:8f:9e:6f:38: c3:c3:b8:c1:92:04:3a:ba:17:d5:6c:c5:a9:e7:48: 38:d5:5c:94:da:d5:db:b8:fc:55:72:57:c4:da:23: 04:48:66:c9:e7:79:38:58:40:0b:b2:2f:bd:22:f0: af:93:a9:54:5a:fa:be:c3:54:40:7c:d7:b5:03:bb: 6a:c8:64:19:aa:c7:9e:f8:f5:24:bd:bf:17:61:8d: ba:eb:a3:b6:5d:25:2f:6a:8b:26:e5:fc:0f:74:bc: 8e:49:7c:55:45:b9:16:27:32:bc:de:4f:f2:45:58: 7b:b3:0b:a5:90:0b:95:a1:5c:05:cf:04:6b:37:67: ed:33:be:12:9f:f8:be:06:4b:87:ec:ee:44:75:1a: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:64:30:74:76:03:7E:21:F9:4B:C5:04:7D:B1:F1:57:36:3B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d8:83:8f:6c:8f:32:b3:56:f4:45:89:11:1a:c9:49:59:b9: 27:b8:67:76:c5:8f:5e:5a:69:e0:66:1c:1a:41:d9:31:71:a2: 57:82:f0:e5:78:9a:1c:88:b6:fc:8c:be:b5:9c:d4:4d:66:f4: ab:fe:bf:3b:ea:f5:c0:5d:45:e9:e7:c3:ce:71:fe:66:4f:bc: 3b:10:0d:0a:54:04:34:e8:56:c6:23:d7:d9:06:06:f0:8c:dd: b0:9e:75:f0:5f:49:f9:b6:3e:5c:32:62:ff:79:51:46:da:4b: 18:34:a5:bf:77:29:70:11:fb:3a:a8:cf:36:5b:17:65:50:33: b4:5e:f0:2c:b7:6f:b0:e9:16:71:a1:c9:5a:22:d3:f5:88:c6: 8a:f6:82:8f:9e:db:25:ef:95:b6:19:86:da:e3:79:b3:82:6e: 72:ee:83:54:8d:41:1d:ef:94:1a:73:cb:8a:82:d7:de:f2:10: a0:d0:e1:91:c6:e9:b6:11:94:67:b2:d1:f6:26:79:71:33:b4: 41:77:76:d0:92:df:a9:e0:80:df:d9:fc:ae:02:9f:7d:12:27: 14:60:f3:e5:7d:83:7d:65:b4:c1:7a:c2:cb:cf:bf:6d:4d:39: 64:b2:9d:96:bb:56:52:b1:86:80:d4:cd:26:4e:89:8b:b6:47: 33:77:8f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzidCzOo/AzmxuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWFlNGVkYzYtNGM0OS00MGZkLWE2Y2ItMTFmMmM2MzZlMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61reamWinC9yeMYyZsrUiFJpeRpI6kxH665a t0DjlxfqQQLlXSHYXkfWkvIYIghy65hV4d+TWbFXIibGMpnr2nACI46b/YAQP5oU 2e9X587k4BrVE2omFBYrakLsKdLMEF/x2HkLv9neKBW7GROKivvI4o+ebzjDw7jB kgQ6uhfVbMWp50g41VyU2tXbuPxVclfE2iMESGbJ53k4WEALsi+9IvCvk6lUWvq+ w1RAfNe1A7tqyGQZqsee+PUkvb8XYY2666O2XSUvaosm5fwPdLyOSXxVRbkWJzK8 3k/yRVh7swulkAuVoVwFzwRrN2ftM74Sn/i+BkuH7O5EdRrtWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBwZDB0dgN+IflLxQR9sfFXNju6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTkxZWYzYTktZTdhMi0z NTA3LTlmMzMtMjRiMDA1M2VhM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrYg49sjzKzVvRFiREayUlZuSe4Z3bFj15aaeBmHBpB2TFxoleC8OV4 mhyItvyMvrWc1E1m9Kv+vzvq9cBdRennw85x/mZPvDsQDQpUBDToVsYj19kGBvCM 3bCedfBfSfm2PlwyYv95UUbaSxg0pb93KXAR+zqozzZbF2VQM7Re8Cy3b7DpFnGh yVoi0/WIxor2go+e2yXvlbYZhtrjebOCbnLug1SNQR3vlBpzy4qC197yEKDQ4ZHG 6bYRlGey0fYmeXEztEF3dtCS36nggN/Z/K4Cn30SJxRg8+V9g31ltMF6wsvPv21N OWSynZa7VlKxhoDUzSZOiYu2RzN3j/E= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:25 2025 by rpki-client