$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa File: 0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa (raw, json) Hash identifier: QLwPZeJANUYNbXsyZpwcMxv/eHwem5UDH5FaeIXPUgg= Subject key identifier: F7:8C:22:A3:6E:CB:A6:28:DC:83:26:85:64:68:BF:09:FB:81:E3:52 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CF04944DD5DC4DD73C540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:f0:49:44:dd:5d:c4:dd:73:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=63dc40a2-7e18-4976-acc7-97d378fe34f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:da:79:db:17:11:f1:13:09:b6:53:22:87: 91:9f:52:12:f7:fa:b4:cc:b0:ee:8d:1a:44:33:e5: 4e:9d:17:25:8a:62:48:08:e9:8e:36:8d:de:e0:db: fc:29:3e:2a:c9:0a:05:0a:9f:1f:5d:52:a6:79:7d: 73:1f:89:1c:c7:f7:4a:1f:83:45:ba:5c:5a:38:0f: 26:37:dd:9e:f5:70:58:42:18:1c:da:c1:28:9c:e3: 11:77:bd:f8:1a:13:3d:fd:05:53:93:48:18:6f:46: 65:21:63:38:46:a6:5e:8c:d5:57:de:45:81:bb:b1: 19:78:ef:5e:3b:d3:e8:e7:17:a8:00:ad:8c:a8:26: ff:59:84:0c:93:61:72:3b:cf:ea:48:89:e9:23:d1: 00:fe:8c:53:0b:1d:2f:1c:a2:04:d0:f7:4d:0c:36: b5:d8:b7:fb:87:22:07:a1:22:4f:c0:14:43:3d:1c: 75:99:bf:fc:0f:62:42:fe:5e:c8:6b:25:80:b6:84: 0b:df:30:94:d4:4b:30:e2:cb:5e:c0:c0:29:f1:e8: 14:bd:f0:29:b1:cd:e7:9b:87:01:c3:14:7b:c5:36: 0f:13:90:32:c6:06:79:ed:79:f7:b5:61:d2:ac:68: 9a:85:9b:8e:4c:32:39:6f:36:a0:6f:98:3e:d5:0f: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8C:22:A3:6E:CB:A6:28:DC:83:26:85:64:68:BF:09:FB:81:E3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:68:9c:a2:70:c1:e4:3c:33:d1:ad:4e:f5:9b:c1:cf:06:b7: c7:2d:28:37:77:6a:bb:a6:8b:8e:47:88:49:41:4c:50:de:ac: 55:91:e1:55:8d:77:4b:dc:c7:49:e5:72:99:64:08:76:66:64: 15:86:f0:f7:a6:ee:6b:be:da:e5:82:00:b6:01:28:bd:58:42: 92:9d:0c:e6:29:24:1d:92:7b:eb:2d:66:94:82:9e:b6:f4:b1: 2f:c9:eb:15:ba:01:5b:21:54:9c:ee:ba:eb:51:c9:b4:dd:3c: bc:bc:71:fe:f8:4d:77:45:b5:2c:4e:86:67:c2:30:0c:ec:fc: ab:ff:62:0c:16:5f:4e:59:80:d1:71:6e:ce:94:87:d5:a7:ce: 08:fb:58:86:f6:37:c1:1c:58:72:42:62:61:36:ef:d2:07:2b: 7b:8d:ea:e2:ca:cc:b0:6d:d6:58:6f:eb:b9:30:49:da:1f:b6: 79:cb:7d:d4:2d:ea:c3:29:e3:39:da:dc:2a:b1:23:57:9c:d5: ff:d1:68:57:0e:7c:d8:bd:22:fb:a3:21:40:e9:43:97:f8:e2: 16:a4:4b:18:14:7a:aa:70:ee:91:f7:8f:a4:62:aa:1f:07:4b: 65:ef:ab:8e:eb:33:6c:d3:f5:28:b6:86:aa:b5:69:cc:99:4c: d5:f8:d3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPBJRN1dxN1zxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjNkYzQwYTItN2UxOC00OTc2LWFjYzctOTdkMzc4ZmUzNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qnaedsXEfETCbZTIoeRn1IS9/q0zLDujRpE M+VOnRclimJICOmONo3e4Nv8KT4qyQoFCp8fXVKmeX1zH4kcx/dKH4NFulxaOA8m N92e9XBYQhgc2sEonOMRd734GhM9/QVTk0gYb0ZlIWM4RqZejNVX3kWBu7EZeO9e O9Po5xeoAK2MqCb/WYQMk2FyO8/qSInpI9EA/oxTCx0vHKIE0PdNDDa12Lf7hyIH oSJPwBRDPRx1mb/8D2JC/l7IayWAtoQL3zCU1Esw4stewMAp8egUvfApsc3nm4cB wxR7xTYPE5AyxgZ57Xn3tWHSrGiahZuOTDI5bzagb5g+1Q9f/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeMIqNuy6Yo3IMmhWRovwn7geNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIyMTQ4NGItZjBmMi0z Y2E0LWJjZTUtN2U1YTY1YWE0MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFponKJwweQ8M9GtTvWbwc8Gt8ctKDd3arumi45HiElBTFDerFWR4VWN d0vcx0nlcplkCHZmZBWG8Pem7mu+2uWCALYBKL1YQpKdDOYpJB2Se+stZpSCnrb0 sS/J6xW6AVshVJzuuutRybTdPLy8cf74TXdFtSxOhmfCMAzs/Kv/YgwWX05ZgNFx bs6Uh9Wnzgj7WIb2N8EcWHJCYmE279IHK3uN6uLKzLBt1lhv67kwSdoftnnLfdQt 6sMp4zna3CqxI1ec1f/RaFcOfNi9IvujIUDpQ5f44hakSxgUeqpw7pH3j6Riqh8H S2Xvq47rM2zT9Si2hqq1acyZTNX40xE= -----END CERTIFICATE-----Generated at Fri Sep 25 14:54:19 2026 by rpki-client