$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa File: 43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa (raw, json) Hash identifier: 8bptqbE1CmGh/rNyVCnDRds7L5qi+628wxMwTf761Nc= Subject key identifier: 88:D9:69:2A:49:58:74:69:95:C1:F8:54:F2:4F:A3:75:9D:7F:9D:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D0A126AF4D0E5278520B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 172.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:0a:12:6a:f4:d0:e5:27:85:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e4755bef-b38c-4347-8377-b9df1a0baa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:0b:49:e6:90:3c:2c:4a:a9:6c:ef:4f:81: 1e:00:73:c6:05:9a:1f:7e:ef:64:99:0c:ed:53:49: 69:09:de:e5:d0:a0:af:25:83:b8:be:fa:3a:e6:74: 9c:2f:22:89:fa:e2:03:26:9e:25:bd:26:5d:61:a7: 9a:64:84:0d:63:29:3c:53:cc:01:bc:c3:0e:c6:be: 59:32:b2:09:c7:86:96:e3:68:e1:d0:61:97:ae:8f: 5e:7f:d7:3f:22:68:21:76:f8:cc:c2:b9:c9:ff:10: c8:06:72:14:1b:8b:60:20:5b:02:32:7d:05:52:48: 68:b2:e8:e4:2b:6d:8a:1a:a6:d5:ec:3f:73:74:ca: e4:1b:17:67:d5:55:a0:e8:86:d3:4f:d8:aa:8f:b4: b4:bf:85:99:0b:71:bb:31:65:13:1b:fc:0e:63:d1: 8c:56:0e:02:ea:82:54:cb:78:58:23:fb:a9:2c:a3: 10:a0:fb:31:d8:38:79:da:e8:e5:58:c2:fb:b9:90: c4:a0:e3:73:73:8f:c7:2f:e7:81:54:cc:0a:07:fe: 13:56:1d:09:70:bd:e1:7b:2a:58:70:50:17:b3:0b: fa:cd:33:c5:42:94:fd:a1:93:7d:79:1b:04:4a:cc: a1:73:72:5d:a0:52:b2:57:ef:ed:61:e4:da:b6:65: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D9:69:2A:49:58:74:69:95:C1:F8:54:F2:4F:A3:75:9D:7F:9D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:d9:e1:ad:cd:9d:3b:ce:25:c9:52:ab:08:65:71:c3:9c: 6f:6f:80:05:0b:89:14:2e:46:fb:2f:b4:c6:a9:b9:c4:e4:7f: d8:01:fd:50:a0:f8:50:f7:74:ab:24:9c:24:f6:4b:d9:ea:03: 9a:6c:b8:ac:bb:a4:67:eb:77:c9:99:4f:f3:53:11:db:f1:9d: 3c:02:8d:ae:1b:90:72:47:f3:af:2f:43:f8:8c:cf:1d:6a:e8: f2:d6:2f:16:42:99:4e:46:44:a9:a3:71:bf:b7:d0:5a:3a:3e: a7:93:ac:ee:cf:9c:5b:32:c2:4f:9b:fb:d4:cc:65:5d:cb:82: 03:4d:71:0e:a3:22:0a:d5:3a:cb:ae:6a:f7:bc:c3:24:e3:7f: 2c:af:56:9b:d9:5e:c7:5d:22:39:64:79:56:e3:e2:7c:27:01: 6b:5c:c6:55:ab:a6:39:3c:6e:31:23:2c:17:a9:0f:70:87:c1: 7d:a9:48:df:69:df:30:ec:f6:20:d5:41:90:23:aa:06:7d:4b: c0:a4:55:c2:93:b5:8b:27:b7:8d:ea:af:67:bf:18:b3:01:ee: 71:fc:bb:89:0e:9e:51:65:53:e4:a0:32:ce:11:be:3f:b1:d1: d8:56:35:64:5d:3b:e8:34:da:7d:41:a1:16:34:48:56:9c:04: ab:7e:3d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQoSavTQ5SeFILAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTQ3NTViZWYtYjM4Yy00MzQ3LTgzNzctYjlkZjFhMGJhYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+cLSeaQPCxKqWzvT4EeAHPGBZoffu9kmQzt U0lpCd7l0KCvJYO4vvo65nScLyKJ+uIDJp4lvSZdYaeaZIQNYyk8U8wBvMMOxr5Z MrIJx4aW42jh0GGXro9ef9c/ImghdvjMwrnJ/xDIBnIUG4tgIFsCMn0FUkhosujk K22KGqbV7D9zdMrkGxdn1VWg6IbTT9iqj7S0v4WZC3G7MWUTG/wOY9GMVg4C6oJU y3hYI/upLKMQoPsx2Dh52ujlWML7uZDEoONzc4/HL+eBVMwKB/4TVh0JcL3heypY cFAXswv6zTPFQpT9oZN9eRsESsyhc3JdoFKyV+/tYeTatmWtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjZaSpJWHRplcH4VPJPo3Wdf507MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNhOWYzZmYtZWQ0Yi0z YjUxLWI4ODEtZmFjMTlkMjE5M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZM2eGtzZ07ziXJUqsIZXHDnG9vgAULiRQuRvsvtMapucTkf9gB/VCg +FD3dKsknCT2S9nqA5psuKy7pGfrd8mZT/NTEdvxnTwCja4bkHJH868vQ/iMzx1q 6PLWLxZCmU5GRKmjcb+30Fo6PqeTrO7PnFsywk+b+9TMZV3LggNNcQ6jIgrVOsuu ave8wyTjfyyvVpvZXsddIjlkeVbj4nwnAWtcxlWrpjk8bjEjLBepD3CHwX2pSN9p 3zDs9iDVQZAjqgZ9S8CkVcKTtYsnt43qr2e/GLMB7nH8u4kOnlFlU+SgMs4Rvj+x 0dhWNWRdO+g02n1BoRY0SFacBKt+PZ4= -----END CERTIFICATE-----Generated at Fri Sep 25 14:49:54 2026 by rpki-client