$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa File: 0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa (raw, json) Hash identifier: Upl4TAd8iayb9i/IwrvkqG++K0qv/fi/NpvrorbToUE= Subject key identifier: 2F:63:C5:F0:03:DE:B6:1E:8E:9E:70:43:15:2A:83:54:A5:01:65:1E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79E9BB6772CD90F5A50E740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:9b:b6:77:2c:d9:0f:5a:50:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=55f6391b-215a-4b14-8994-3fac135bc040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:6a:a7:0e:cc:82:9a:04:bf:2d:80:93:90: 89:0d:a8:f5:08:ef:35:3c:93:9f:18:bc:25:6a:1e: 39:f0:59:21:03:5b:07:a1:4d:6d:d5:9f:e8:a5:6a: 88:f7:a2:9d:63:fd:e9:e7:04:46:27:98:4c:81:81: 97:eb:53:49:f5:58:fd:50:e9:9a:8d:ff:6c:3b:5a: dc:66:4b:4d:fd:34:b5:e2:4f:aa:d4:95:5a:ff:37: a0:63:da:ac:b9:99:0e:11:f9:9f:7d:18:10:64:e4: 6b:f0:e2:01:15:cc:39:b0:67:1c:47:d7:fa:4c:64: 57:7f:42:e5:7a:ff:13:02:60:0e:08:d3:72:ff:fc: 87:90:23:8b:dd:35:d3:13:83:ae:5a:eb:8e:2a:b8: 8b:9e:d4:05:3f:92:f1:fe:48:42:9f:70:ea:5e:36: 70:85:cb:78:18:aa:63:d5:2e:8b:1c:74:6e:96:a3: b2:ce:37:77:37:84:a7:77:d7:df:22:89:be:86:4a: b1:e5:a8:f8:96:38:0f:6d:73:61:9e:96:13:eb:a4: a9:52:96:fd:06:f0:b6:1d:db:12:c9:32:be:c2:84: b9:92:9c:ed:d9:58:27:2c:f3:18:ed:2d:9c:ae:65: 5f:2b:a1:1c:9f:0d:fe:e2:52:04:1a:1a:b9:4b:e9: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:63:C5:F0:03:DE:B6:1E:8E:9E:70:43:15:2A:83:54:A5:01:65:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:09:55:94:51:75:24:04:48:64:23:0c:3e:c7:97:5c:a7:e4: 70:c7:7a:91:81:a8:81:34:f7:22:3b:d6:56:28:25:b1:44:81: 09:c3:b4:bc:1c:84:d2:23:14:20:24:6b:ae:62:53:a6:91:16: eb:41:92:42:30:bd:58:f1:ad:18:74:8f:14:75:d8:a2:b8:71: e0:c0:27:e8:c8:a5:60:9e:6a:28:09:54:55:5b:25:6e:d1:f4: 39:a2:fa:33:fb:71:b6:5d:11:64:a7:b2:8b:03:6f:c2:53:fd: 97:cf:e7:8c:60:90:2d:52:c8:e1:12:f1:66:bc:2e:1b:88:12: ad:c3:14:7c:17:ab:ee:42:e4:28:85:c1:74:98:0e:43:4b:a5: 67:61:c8:0c:8a:52:14:cf:24:ba:1e:de:47:37:d8:da:6b:a3: 63:a5:ae:d0:d8:83:98:2b:89:30:0a:0c:df:3a:94:97:35:23: c5:8b:e7:19:2d:3b:d4:9f:90:94:db:3c:f2:57:3d:ed:ea:ea: bb:af:db:04:a2:5f:a5:3e:48:c7:7d:1a:9c:1d:51:6d:99:ae: 66:cf:39:a4:ff:e4:f4:83:87:7d:79:1e:d7:7e:c5:a5:17:36: 0e:b1:10:3e:29:81:7e:e5:e4:9c:b4:dd:eb:58:b9:55:0c:ce: 54:82:b3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnpu2dyzZD1pQ50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTVmNjM5MWItMjE1YS00YjE0LTg5OTQtM2ZhYzEzNWJjMDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t1qpw7MgpoEvy2Ak5CJDaj1CO81PJOfGLwl ah458FkhA1sHoU1t1Z/opWqI96KdY/3p5wRGJ5hMgYGX61NJ9Vj9UOmajf9sO1rc ZktN/TS14k+q1JVa/zegY9qsuZkOEfmffRgQZORr8OIBFcw5sGccR9f6TGRXf0Ll ev8TAmAOCNNy//yHkCOL3TXTE4OuWuuOKriLntQFP5Lx/khCn3DqXjZwhct4GKpj 1S6LHHRulqOyzjd3N4Snd9ffIom+hkqx5aj4ljgPbXNhnpYT66SpUpb9BvC2HdsS yTK+woS5kpzt2VgnLPMY7S2crmVfK6Ecnw3+4lIEGhq5S+kWrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9jxfAD3rYejp5wQxUqg1SlAWUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIyMTQ4NGItZjBmMi0z Y2E0LWJjZTUtN2U1YTY1YWE0MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgJVZRRdSQESGQjDD7Hl1yn5HDHepGBqIE09yI71lYoJbFEgQnDtLwc hNIjFCAka65iU6aRFutBkkIwvVjxrRh0jxR12KK4ceDAJ+jIpWCeaigJVFVbJW7R 9Dmi+jP7cbZdEWSnsosDb8JT/ZfP54xgkC1SyOES8Wa8LhuIEq3DFHwXq+5C5CiF wXSYDkNLpWdhyAyKUhTPJLoe3kc32Npro2OlrtDYg5griTAKDN86lJc1I8WL5xkt O9SfkJTbPPJXPe3q6ruv2wSiX6U+SMd9GpwdUW2ZrmbPOaT/5PSDh315Htd+xaUX Ng6xED4pgX7l5Jy03etYuVUMzlSCsws= -----END CERTIFICATE-----Generated at Fri Aug 7 21:47:14 2026 by rpki-client