$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa File: 12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa (raw, json) Hash identifier: UsRd+RzmXzDCCgh+COBpHB/2JSntL07GoTHagQCIS1c= Subject key identifier: 83:9C:9B:F2:00:F3:2B:CE:EE:3B:D1:3C:7C:93:E3:7F:89:6E:66:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FC466977420B0658BE237F980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:97:74:20:b0:65:8b:e2:37:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=7b708d5d-3f62-419b-abf1-d39c5f6ea382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:3f:67:71:d5:74:88:ec:31:eb:43:97:0a: 6e:96:65:76:f3:bf:47:0c:93:55:60:d8:7a:af:ab: a1:64:1f:ab:51:2d:73:fb:30:e1:d0:a4:f4:ea:e3: 14:1e:e4:c4:f5:84:8d:79:7f:37:34:37:dd:9b:c7: fe:48:22:5a:1d:e3:4c:ef:8f:9c:ab:91:aa:8c:63: 05:a9:65:a2:33:77:f7:d4:7e:d9:54:00:ff:e4:6c: 50:fe:cf:66:ce:78:ca:1f:42:c8:73:e5:e8:1f:6c: f9:9d:75:8e:a2:b2:83:a4:b5:7c:54:2e:99:b9:77: 15:4f:6c:a4:e7:88:48:80:17:d6:55:06:21:a9:fc: 77:55:db:e2:69:22:ff:e4:28:a2:1d:b8:d2:af:58: 4d:db:91:24:af:d0:b8:0d:7d:0b:a6:80:cd:fa:ae: d6:3d:66:d6:4d:c8:88:59:69:48:58:c1:e3:b5:fc: d0:96:b2:d5:21:b4:39:0c:bd:80:9e:a2:78:a3:a8: 57:7b:7e:da:c4:bb:8b:84:95:0d:61:12:92:90:98: 8c:fb:18:a3:03:42:1a:bc:1d:5a:10:b6:15:7c:7a: e7:e4:19:f8:7f:e3:e4:67:94:f4:65:ce:c1:c7:19: c5:ca:68:10:7e:9d:b0:d4:3f:1d:f8:92:73:50:f6: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:9B:F2:00:F3:2B:CE:EE:3B:D1:3C:7C:93:E3:7F:89:6E:66:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:68:3b:68:95:f9:86:5a:f5:fc:40:c7:e3:08:01:2c:eb:fe: 08:f8:48:32:6d:ab:52:c8:e4:2a:ba:9f:75:1c:f8:63:47:f3: b9:6e:75:d2:31:68:9b:c4:79:ba:ab:db:59:30:a8:b0:3d:b8: c5:47:b8:0b:43:48:a4:05:9f:c9:c4:ba:a7:a7:7c:5e:55:4a: c6:60:db:f2:fb:5c:c2:af:84:40:8d:d7:7d:46:13:43:27:ba: 08:5e:92:31:a4:38:12:25:b4:03:e2:be:34:67:0c:52:34:cb: 31:3d:dd:2c:14:39:de:e1:96:87:90:c8:c0:ba:99:4f:1d:61: ca:c0:41:2d:50:a8:2e:11:9a:8a:a0:43:af:01:ba:c6:b4:52: 99:50:56:b0:65:aa:d8:ec:ae:3a:58:e2:1f:3f:7c:84:67:60: e9:9d:00:f6:2e:10:cd:09:f9:c9:43:2c:f1:ea:c8:e1:0c:e3: d9:79:2d:bd:63:11:e7:ec:36:45:66:15:d7:1a:61:66:35:20: f2:e2:07:63:08:fa:af:e8:89:0e:71:9b:ec:15:2a:4c:1f:45: a1:90:87:02:ee:e3:0c:8a:16:a5:41:9b:69:6e:a3:12:34:29: 40:08:61:74:9e:e8:c1:68:12:69:c0:c7:f2:11:c7:1a:30:fa: 84:b8:13:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZpd0ILBli+I3+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk N2I3MDhkNWQtM2Y2Mi00MTliLWFiZjEtZDM5YzVmNmVhMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnk/Z3HVdIjsMetDlwpulmV2879HDJNVYNh6 r6uhZB+rUS1z+zDh0KT06uMUHuTE9YSNeX83NDfdm8f+SCJaHeNM74+cq5GqjGMF qWWiM3f31H7ZVAD/5GxQ/s9mznjKH0LIc+XoH2z5nXWOorKDpLV8VC6ZuXcVT2yk 54hIgBfWVQYhqfx3VdviaSL/5CiiHbjSr1hN25Ekr9C4DX0LpoDN+q7WPWbWTciI WWlIWMHjtfzQlrLVIbQ5DL2AnqJ4o6hXe37axLuLhJUNYRKSkJiM+xijA0IavB1a ELYVfHrn5Bn4f+PkZ5T0Zc7BxxnFymgQfp2w1D8d+JJzUPb6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOcm/IA8yvO7jvRPHyT43+JbmbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTJkNjQwMGMtNGVmMC0z ZTk2LThlYWEtNzFmNTBmMjY2YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVoO2iV+YZa9fxAx+MIASzr/gj4SDJtq1LI5Cq6n3Uc+GNH87luddIx aJvEebqr21kwqLA9uMVHuAtDSKQFn8nEuqenfF5VSsZg2/L7XMKvhECN131GE0Mn ughekjGkOBIltAPivjRnDFI0yzE93SwUOd7hloeQyMC6mU8dYcrAQS1QqC4Rmoqg Q68Busa0UplQVrBlqtjsrjpY4h8/fIRnYOmdAPYuEM0J+clDLPHqyOEM49l5Lb1j EefsNkVmFdcaYWY1IPLiB2MI+q/oiQ5xm+wVKkwfRaGQhwLu4wyKFqVBm2luoxI0 KUAIYXSe6MFoEmnAx/IRxxow+oS4E+s= -----END CERTIFICATE-----Generated at Tue Nov 10 21:26:07 2026 by rpki-client