$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa File: eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa (raw, json) Hash identifier: 4cvYXam6CbdPnMQ9yCawSIqug2OgxeG0qdDB3gDA18A= Subject key identifier: F5:DA:8D:08:71:94:47:74:10:D8:A0:24:A1:4E:75:2F:A5:06:13:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E428AEDE6C58FC056B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 172.253.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e4:28:ae:de:6c:58:fc:05:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=201d29f6-2711-46a5-afb6-1ac09f3fa263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:5e:68:28:a1:54:e6:d7:23:bb:34:0a:5a: 95:b3:94:e7:98:60:50:e4:fa:ba:ef:4e:2a:96:ab: 58:70:0d:fb:82:c4:8d:d7:44:cc:24:f6:4e:34:8b: 38:4a:9b:30:90:28:3e:65:52:5f:2f:a9:a0:63:bf: 69:26:fc:98:7e:0a:c4:79:71:a5:05:65:b3:de:d7: ab:23:80:06:b3:f4:2b:6e:b9:aa:8f:3d:18:71:59: 15:59:42:ee:bb:43:99:33:c3:c4:2c:38:d7:b8:86: 7e:50:ff:a4:21:54:88:59:13:57:24:93:2a:b5:71: 14:35:0c:92:9e:3d:e7:44:ba:c5:2a:1a:f7:f6:07: 75:53:14:9a:a9:e1:af:a8:ff:46:51:5a:1f:f2:80: 56:2f:a0:07:4c:12:d2:32:b7:22:4c:52:e3:ee:e7: 89:ae:5f:90:c4:0b:97:2e:a8:a4:58:5b:c5:18:8e: 19:45:ea:eb:f2:8a:be:f4:de:41:65:b1:9b:46:8a: 49:e0:cc:30:65:a0:8f:b8:6b:a7:3d:18:df:33:49: 05:dd:fc:e7:83:75:fb:49:da:6c:d3:d6:da:79:78: d2:4e:a6:48:0d:9d:70:08:74:22:cf:07:ff:34:08: 2e:3d:50:43:79:7f:6d:1e:02:f8:5b:73:b4:3e:29: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:8D:08:71:94:47:74:10:D8:A0:24:A1:4E:75:2F:A5:06:13:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5c:c6:b7:74:11:21:49:50:c1:b9:5a:48:ed:2c:6b:4d:93: 47:ca:03:be:35:4f:d5:af:e7:e0:ad:86:ad:14:49:5a:15:8f: ea:b2:fa:ea:82:ed:27:82:1b:e6:1e:9b:92:ef:36:af:4b:b0: 4a:4c:f2:84:fd:dc:3e:a4:4e:40:18:f1:a2:85:9c:2b:07:1d: 88:79:c4:20:f2:f7:95:20:4a:88:be:90:a0:57:70:72:93:3e: d9:43:2d:76:ae:a9:dc:bc:2d:5c:96:bf:67:8a:df:1c:4a:bf: 7b:98:f1:8a:a7:ba:b4:3b:6d:37:52:29:f3:17:81:72:25:81: 34:01:f4:ad:9c:8f:c9:0b:94:52:3a:23:37:d4:c0:63:32:46: 9c:82:b4:66:0e:66:e2:74:2f:6c:ed:2d:25:8d:ac:a3:ac:75: 3e:b6:69:6d:c7:3f:d3:68:ed:91:3a:d9:54:e0:03:57:20:9a: 34:d9:ff:0e:ec:ed:07:85:67:9e:ed:a3:29:5a:46:9b:8f:65: 8a:0e:0d:0f:5f:6b:26:ef:a1:6d:af:ca:24:5a:4c:fa:61:c7: b9:a9:cd:27:e9:a0:17:2d:b6:98:f2:8c:c0:28:36:ee:b8:c2: cf:6f:3a:2d:b4:87:87:43:8d:b4:0f:3f:d7:ea:29:20:ae:9a: 21:a6:b2:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OQort5sWPwFawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjAxZDI5ZjYtMjcxMS00NmE1LWFmYjYtMWFjMDlmM2ZhMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiBeaCihVObXI7s0ClqVs5TnmGBQ5Pq6704q lqtYcA37gsSN10TMJPZONIs4SpswkCg+ZVJfL6mgY79pJvyYfgrEeXGlBWWz3ter I4AGs/Qrbrmqjz0YcVkVWULuu0OZM8PELDjXuIZ+UP+kIVSIWRNXJJMqtXEUNQyS nj3nRLrFKhr39gd1UxSaqeGvqP9GUVof8oBWL6AHTBLSMrciTFLj7ueJrl+QxAuX LqikWFvFGI4ZRerr8oq+9N5BZbGbRopJ4MwwZaCPuGunPRjfM0kF3fzng3X7Sdps 09baeXjSTqZIDZ1wCHQizwf/NAguPVBDeX9tHgL4W3O0PikDuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXajQhxlEd0ENigJKFOdS+lBhOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWI5YjAyN2MtMTllZi0z MTBiLWI0ZDUtMDFhMzM1ZjQ5YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9cxrd0ESFJUMG5WkjtLGtNk0fKA741T9Wv5+Cthq0USVoVj+qy+uqC 7SeCG+Yem5LvNq9LsEpM8oT93D6kTkAY8aKFnCsHHYh5xCDy95UgSoi+kKBXcHKT PtlDLXauqdy8LVyWv2eK3xxKv3uY8YqnurQ7bTdSKfMXgXIlgTQB9K2cj8kLlFI6 IzfUwGMyRpyCtGYOZuJ0L2ztLSWNrKOsdT62aW3HP9No7ZE62VTgA1cgmjTZ/w7s 7QeFZ57toylaRpuPZYoODQ9faybvoW2vyiRaTPphx7mpzSfpoBcttpjyjMAoNu64 ws9vOi20h4dDjbQPP9fqKSCumiGmsrk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:50 2026 by rpki-client