$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa File: 0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa (raw, json) Hash identifier: j1AY2EV6VPCFqYv1UO2I3MI7zjTzfCKMcg0m278t1Lc= Subject key identifier: 8E:B7:E1:A3:11:B1:72:AE:26:7C:2F:4B:D6:B3:56:2F:95:56:19:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7870AA57C8841258C9A0220 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:0a:a5:7c:88:41:25:8c:9a:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0e4e5488-9d51-44e8-8452-6f8958af583d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:17:ad:f5:85:c4:7a:19:73:dd:8b:58:11: be:83:6f:de:d9:80:b5:d1:f9:c3:44:bf:97:56:f2: d5:37:2c:ae:2f:dd:ad:9b:2e:e6:34:92:f6:99:28: 57:69:ce:03:87:22:fb:eb:5c:fc:10:b6:e1:d6:1c: 5e:9a:73:78:df:e6:db:41:f4:1a:20:58:4b:ef:91: a3:41:01:9a:57:d1:80:6e:96:d4:b3:c1:a0:89:26: aa:33:8a:fc:a3:42:98:bd:85:b5:43:63:04:e4:5f: ea:fe:34:04:54:5a:54:1e:6c:22:de:5a:80:c2:13: a3:ca:9b:4a:a8:3f:72:4d:a4:f4:00:41:c8:6e:19: bd:ae:9b:fd:83:dd:0f:17:7b:b1:9d:4b:0e:a0:44: 8e:c5:2a:d0:82:9c:75:d8:82:13:fe:2c:f3:aa:4b: 20:f4:03:5e:db:5f:c9:6b:48:b4:db:ea:95:a9:d5: 81:ab:c4:f3:5f:2e:3d:77:42:7c:19:b4:47:a3:f2: 92:22:3d:2d:64:50:6d:c0:b7:2e:9c:5f:c7:11:08: c9:74:6e:d6:b6:7c:19:e8:3a:73:f0:a0:d0:c2:a5: 2a:49:46:a1:27:12:d6:61:b0:9f:9c:0d:24:df:50: ba:84:62:42:e9:79:ea:00:e5:92:cd:63:33:1e:eb: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B7:E1:A3:11:B1:72:AE:26:7C:2F:4B:D6:B3:56:2F:95:56:19:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0b4fb10c-9992-3a7a-8a50-94b8c21acdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:09:51:6a:8a:2e:48:6c:36:66:e6:98:5f:0a:bc:d9:a7:1e: a4:f3:c5:7b:06:f8:ab:c0:b0:ca:82:4d:ff:1a:17:4c:42:62: 77:9a:03:d3:9d:0c:5b:06:7c:59:dc:00:66:2e:83:b8:1e:0b: b8:0c:8e:28:0f:79:b1:c5:64:10:a3:46:dc:e9:47:dc:62:4e: 75:2f:82:b2:2e:10:4b:e0:00:97:7c:e8:cb:f2:d4:e2:08:55: 37:30:3e:1d:96:e6:92:f5:d5:e6:9d:c9:5c:f1:26:fa:af:f9: 88:f3:cb:f5:f4:06:84:a3:ad:82:84:c4:3d:8d:8f:3b:19:8b: d2:0d:ac:b2:7d:5c:ef:68:db:ec:44:2a:ee:fe:fd:ac:0c:fc: 80:32:1c:58:44:a0:c0:4e:46:e8:6c:bb:51:45:4d:44:cf:76: a6:b9:36:f6:e1:1d:a2:b6:d7:f5:f5:16:ae:b9:36:0e:34:9a: fb:41:0e:a0:30:26:cd:fc:9d:7d:74:e1:a3:6a:da:73:ad:fb: 81:c2:f7:2c:83:17:76:d6:e7:64:e9:67:f1:6d:ed:d3:09:3c: 49:1a:e7:75:0c:62:33:65:2f:9d:8b:15:64:48:fc:9f:e7:c5: 35:1a:6e:51:11:63:7d:a1:47:e7:ff:b0:56:93:20:6b:78:25: 5c:7e:c5:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwqlfIhBJYyaAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGU0ZTU0ODgtOWQ1MS00NGU4LTg0NTItNmY4OTU4YWY1ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9kXrfWFxHoZc92LWBG+g2/e2YC10fnDRL+X VvLVNyyuL92tmy7mNJL2mShXac4DhyL761z8ELbh1hxemnN43+bbQfQaIFhL75Gj QQGaV9GAbpbUs8GgiSaqM4r8o0KYvYW1Q2ME5F/q/jQEVFpUHmwi3lqAwhOjyptK qD9yTaT0AEHIbhm9rpv9g90PF3uxnUsOoESOxSrQgpx12IIT/izzqksg9ANe21/J a0i02+qVqdWBq8TzXy49d0J8GbRHo/KSIj0tZFBtwLcunF/HEQjJdG7WtnwZ6Dpz 8KDQwqUqSUahJxLWYbCfnA0k31C6hGJC6XnqAOWSzWMzHuuXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI634aMRsXKuJnwvS9azVi+VVhkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGI0ZmIxMGMtOTk5Mi0z YTdhLThhNTAtOTRiOGMyMWFjZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8JUWqKLkhsNmbmmF8KvNmnHqTzxXsG+KvAsMqCTf8aF0xCYneaA9Od DFsGfFncAGYug7geC7gMjigPebHFZBCjRtzpR9xiTnUvgrIuEEvgAJd86Mvy1OII VTcwPh2W5pL11eadyVzxJvqv+Yjzy/X0BoSjrYKExD2NjzsZi9INrLJ9XO9o2+xE Ku7+/awM/IAyHFhEoMBORuhsu1FFTUTPdqa5NvbhHaK21/X1Fq65Ng40mvtBDqAw Js38nX104aNq2nOt+4HC9yyDF3bW52TpZ/Ft7dMJPEka53UMYjNlL52LFWRI/J/n xTUablERY32hR+f/sFaTIGt4JVx+xXs= -----END CERTIFICATE-----Generated at Fri Aug 7 21:45:59 2026 by rpki-client