$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa File: 41c74682-e260-397d-8267-3a4dc0e8f079.roa (raw, json) Hash identifier: raXJeGXJsVXW/WpyEsIYBJFUNRwLv+tT/KfffCG4uMs= Subject key identifier: 5F:02:58:B5:18:E3:FB:0B:C5:88:29:E8:51:08:87:0A:26:81:32:DC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D0ADB8AEBA4B070943820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:0a:db:8a:eb:a4:b0:70:94:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e37ee478-b74a-46c2-b32d-042c83350de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:66:a5:18:4d:1c:df:29:99:ab:53:d7:02:c0: 4f:c3:93:57:ac:2b:b7:ac:a7:e2:b8:06:4f:f2:7d: 56:7c:73:13:0f:33:86:d0:dc:41:b2:1b:39:cb:c4: 48:99:1c:da:cf:64:26:2f:54:2d:15:e1:75:11:e6: 7e:f5:e2:7f:ed:ea:a8:aa:0f:d3:cb:dd:a5:90:b2: 05:e8:1d:8e:ba:9a:92:b1:35:e7:c3:9a:f6:b5:ec: e6:75:9a:26:5d:77:70:74:ac:ec:73:4b:7a:ca:43: 51:bb:96:d8:fd:d5:2d:68:22:51:9c:5b:74:7b:12: 08:d5:3b:0b:0b:53:81:b0:71:79:24:09:11:98:36: 61:98:f7:ff:13:eb:93:4c:09:96:5b:5e:17:f7:8b: 39:a3:6e:17:6b:14:29:dd:b1:d3:f8:fe:e1:06:33: 15:2d:0d:86:50:8d:8d:94:a9:06:ff:e4:b5:2d:14: 0b:bc:25:87:28:21:5e:fa:ea:e7:86:c4:57:ed:63: 54:69:14:8e:c2:f7:57:62:68:87:7e:c4:98:64:d0: 79:4c:6b:92:3e:fa:db:91:d9:0c:86:b4:8d:9e:f1: e0:73:98:65:c4:63:f1:3e:68:7c:24:19:cd:a9:e2: 51:d6:b4:08:6d:d9:73:1e:5f:1e:c8:5a:cb:25:bf: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:58:B5:18:E3:FB:0B:C5:88:29:E8:51:08:87:0A:26:81:32:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:df:73:b1:c1:af:e9:b6:93:2a:a2:e6:18:59:54:73:2e:cf: b7:e1:47:fd:cf:93:ce:3c:7b:0b:c8:f8:83:0f:59:83:c2:64: a7:76:96:ad:3d:5d:cd:67:c3:02:b5:53:23:26:8c:25:7c:50: 4d:a9:67:d8:fb:91:85:5c:d2:02:81:23:4a:c7:13:07:da:72: 5d:30:02:c7:f9:33:b5:08:b3:2e:49:22:f1:12:b2:b4:f6:95: b5:ed:10:11:4a:65:8e:89:33:5c:9f:6b:4e:98:07:9b:50:df: 2a:74:c0:54:60:19:31:70:ba:37:15:4e:83:c4:30:6b:40:04: 95:67:a7:02:4b:1d:52:5b:9e:24:da:0b:7c:dc:1a:98:99:5e: 3f:66:19:c8:1d:c0:8f:d4:fa:21:e6:6a:36:11:9f:6a:e3:de: 52:ea:7f:a9:fc:03:23:e7:d0:ca:df:3f:d1:a0:fe:25:9f:d5: 5e:23:a7:da:7e:b7:6f:18:cf:a7:4f:83:45:0c:7f:82:45:48: 53:68:2e:f3:67:f6:26:10:0f:60:16:9e:56:21:74:15:c3:51: 26:d7:e5:ef:d8:0a:eb:ce:92:40:eb:53:81:31:9b:8a:9a:86: a5:aa:d1:db:1c:4a:56:41:c1:87:5b:5c:d0:22:bc:85:71:3e: 46:a3:c0:f0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JfQrbiuuksHCUOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTM3ZWU0NzgtYjc0YS00NmMyLWIzMmQtMDQyYzgzMzUwZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52alGE0c3ymZq1PXAsBPw5NXrCu3rKfiuAZP 8n1WfHMTDzOG0NxBshs5y8RImRzaz2QmL1QtFeF1EeZ+9eJ/7eqoqg/Ty92lkLIF 6B2OupqSsTXnw5r2tezmdZomXXdwdKzsc0t6ykNRu5bY/dUtaCJRnFt0exII1TsL C1OBsHF5JAkRmDZhmPf/E+uTTAmWW14X94s5o24XaxQp3bHT+P7hBjMVLQ2GUI2N lKkG/+S1LRQLvCWHKCFe+urnhsRX7WNUaRSOwvdXYmiHfsSYZNB5TGuSPvrbkdkM hrSNnvHgc5hlxGPxPmh8JBnNqeJR1rQIbdlzHl8eyFrLJb9PRQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF8CWLUY4/sLxYgp6FEIhwomgTLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDFjNzQ2ODItZTI2MC0z OTdkLTgyNjctM2E0ZGMwZThmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArP0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjt9zscGv6baTKqLmGFlUcy7Pt+FH/c+Tzjx7C8j4gw9Zg8Jkp3aWrT1d zWfDArVTIyaMJXxQTaln2PuRhVzSAoEjSscTB9pyXTACx/kztQizLkki8RKytPaV te0QEUpljokzXJ9rTpgHm1DfKnTAVGAZMXC6NxVOg8Qwa0AElWenAksdUlueJNoL fNwamJleP2YZyB3Aj9T6IeZqNhGfauPeUup/qfwDI+fQyt8/0aD+JZ/VXiOn2n63 bxjPp0+DRQx/gkVIU2gu82f2JhAPYBaeViF0FcNRJtfl79gK686SQOtTgTGbipqG parR2xxKVkHBh1tc0CK8hXE+RqPA8A== -----END CERTIFICATE-----Generated at Sat Sep 26 07:52:56 2026 by rpki-client