$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa File: 2c82a951-058b-3b7b-89b6-010786c16010.roa (raw, json) Hash identifier: TFOBypoOun7cZVh7kuk1TPg4UFBB/YUXkqyWMEW0oBU= Subject key identifier: 53:6F:FB:DA:46:F8:DD:AA:BF:74:0F:5D:34:30:3C:1B:28:5F:F7:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498500BF3D6ADEFF8B9D9F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:00:bf:3d:6a:de:ff:8b:9d:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2cdb5855-1952-4510-94df-aad1b1956f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:a8:fe:c9:fc:be:a9:94:9c:f8:77:c9:e8: bd:59:67:1c:7e:00:28:a1:60:69:de:39:c8:32:a1: 44:07:97:df:ae:d9:9b:59:60:ad:83:21:eb:b0:35: ae:90:8e:ee:39:93:12:cf:41:c4:fc:85:c1:12:47: 82:11:c8:f5:bf:97:8e:68:9a:27:38:7b:68:6b:ff: 8b:d7:bb:6a:32:a8:dd:f3:8b:b0:fc:4c:d7:f1:15: 64:04:7b:ce:3d:91:4f:db:a4:65:52:99:e7:70:31: 66:9e:e8:0e:e7:2c:82:5b:0a:04:b7:22:28:48:18: c5:88:54:e2:8e:7d:3b:7a:1b:aa:44:5e:c0:07:61: 3a:51:27:91:a8:f5:a5:08:e5:1f:7a:28:01:d3:4f: 72:0b:b2:3f:46:2d:97:d6:62:de:20:1d:42:cc:9e: 51:ed:09:26:d3:bc:7e:c2:af:a6:24:79:50:88:f8: 77:cf:db:1e:a0:fa:28:a1:fb:80:ec:dc:3e:44:97: 75:7e:53:ed:a0:21:f1:53:c0:3f:58:17:39:a5:51: fb:73:21:9c:04:8f:ed:d6:76:94:6d:21:7c:3c:e8: 0e:9e:99:74:9e:da:15:28:20:d5:df:5f:e7:0d:65: dc:68:17:1e:5e:ab:af:84:37:0f:1c:61:28:22:e2: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6F:FB:DA:46:F8:DD:AA:BF:74:0F:5D:34:30:3C:1B:28:5F:F7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c82a951-058b-3b7b-89b6-010786c16010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:dd:b3:c1:97:9f:86:b5:97:3e:ad:4b:94:14:04:b4:ea:8b: 8f:fc:16:c0:70:a4:8f:41:a9:c9:d0:9b:df:7b:e3:0b:81:e3: e2:e6:84:cc:da:52:e2:44:8c:ec:7e:0d:6f:f4:f9:66:35:17: 7a:92:64:25:76:a4:d1:08:26:8f:2b:4f:13:a0:9f:92:a1:5b: 6a:46:81:8f:26:da:89:4f:15:20:72:d9:19:36:47:4b:f7:4f: 0e:d2:0c:bc:28:6c:2f:e9:b9:0e:ce:57:2d:23:57:ee:70:49: 25:8a:48:28:98:26:8d:bf:3c:68:89:c7:d5:12:ee:f1:36:c5: 49:4b:cf:10:5b:53:74:e6:68:ed:fe:22:c3:49:d9:09:41:bc: e9:d0:7a:0c:44:ac:f9:31:c9:87:3c:ce:f8:19:77:1b:da:65: 34:01:ef:b8:3a:60:4e:fb:75:46:9b:5d:93:39:ef:fb:d6:12: 7c:03:f8:84:a4:05:f1:67:1e:99:78:5a:61:d4:47:f3:ff:b5: 85:b1:84:0d:c2:5d:82:c9:be:b7:fc:9f:b6:43:f8:3e:cf:db: d1:08:47:d2:51:78:b8:5a:58:6b:7e:05:f4:e9:63:f9:74:59: 93:c6:76:98:ef:39:e3:0e:3c:f6:0e:58:93:00:9b:c5:6a:ef: 78:54:2c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQC/PWre/4udn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmNkYjU4NTUtMTk1Mi00NTEwLTk0ZGYtYWFkMWIxOTU2ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruGo/sn8vqmUnPh3yei9WWccfgAooWBp3jnI MqFEB5ffrtmbWWCtgyHrsDWukI7uOZMSz0HE/IXBEkeCEcj1v5eOaJonOHtoa/+L 17tqMqjd84uw/EzX8RVkBHvOPZFP26RlUpnncDFmnugO5yyCWwoEtyIoSBjFiFTi jn07ehuqRF7AB2E6USeRqPWlCOUfeigB009yC7I/Ri2X1mLeIB1CzJ5R7Qkm07x+ wq+mJHlQiPh3z9seoPooofuA7Nw+RJd1flPtoCHxU8A/WBc5pVH7cyGcBI/t1naU bSF8POgOnpl0ntoVKCDV31/nDWXcaBceXquvhDcPHGEoIuJj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNv+9pG+N2qv3QPXTQwPBsoX/c3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM4MmE5NTEtMDU4Yi0z YjdiLTg5YjYtMDEwNzg2YzE2MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXds8GXn4a1lz6tS5QUBLTqi4/8FsBwpI9BqcnQm9974wuB4+LmhMza UuJEjOx+DW/0+WY1F3qSZCV2pNEIJo8rTxOgn5KhW2pGgY8m2olPFSBy2Rk2R0v3 Tw7SDLwobC/puQ7OVy0jV+5wSSWKSCiYJo2/PGiJx9US7vE2xUlLzxBbU3TmaO3+ IsNJ2QlBvOnQegxErPkxyYc8zvgZdxvaZTQB77g6YE77dUabXZM57/vWEnwD+ISk BfFnHpl4WmHUR/P/tYWxhA3CXYLJvrf8n7ZD+D7P29EIR9JReLhaWGt+BfTpY/l0 WZPGdpjvOeMOPPYOWJMAm8Vq73hULIQ= -----END CERTIFICATE-----Generated at Sat Sep 26 23:52:06 2026 by rpki-client