$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa File: 52603226-b4de-3bb1-a725-54436b999c2e.roa (raw, json) Hash identifier: 5dSsSrwOSSvU1aPC8YswyC0JGlS0h0ItX5Lc9PAZQf0= Subject key identifier: F0:72:A9:7A:17:56:03:8D:F6:68:E1:92:85:6A:90:04:80:CC:24:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F62930755544E0C5A8E37A180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:55:54:4e:0c:5a:8e:37:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d9647121-7bf3-4534-aa4f-e6a4a1ec4f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:05:79:8c:07:78:9d:95:b5:65:88:13:b6: e8:57:6c:f0:0b:1d:9d:5a:49:0c:df:ee:93:f1:5d: 64:61:f5:53:15:f6:6a:23:56:87:05:a0:ac:c3:45: 3d:04:b2:8e:9c:8a:7f:a9:eb:d3:82:b7:c2:ed:6f: ab:fc:c1:af:2f:82:d5:7a:1a:37:62:44:66:99:b3: 02:a5:c7:88:88:f3:66:f6:73:9f:c4:05:5f:82:8f: 9b:50:eb:41:95:b3:a0:2c:d3:39:b0:a5:7e:a1:5d: df:a0:2b:8f:9d:73:30:97:96:ff:28:20:31:c2:d6: ec:23:d8:3b:a9:70:08:33:fa:25:5a:31:73:96:20: da:fd:94:a9:e6:93:35:b3:3c:21:78:3a:6e:b6:46: f4:7f:8c:21:01:78:00:91:02:75:c8:22:e0:17:07: ac:4e:55:16:60:1c:51:d0:25:7e:57:a6:fb:9d:00: e0:19:39:6c:54:9a:e3:28:b9:b4:f8:dd:a9:5f:f2: b0:76:42:00:7f:72:21:5f:c2:33:13:b8:52:dd:c6: 65:b7:4f:5a:d1:e0:b1:f9:a1:c5:40:13:b3:cb:99: dc:9e:c9:39:ef:e1:91:bd:e5:38:c6:44:33:f5:d5: ac:64:23:66:b1:3f:ca:e0:6e:c9:2c:b5:c1:c6:c4: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:A9:7A:17:56:03:8D:F6:68:E1:92:85:6A:90:04:80:CC:24:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ec:fb:09:36:96:69:26:b3:cb:f2:8b:a4:51:90:76:b3:86: 3e:de:98:d5:16:01:bd:b1:30:9e:e7:4d:72:d2:e9:29:a6:a8: 21:46:da:64:8c:0d:89:b9:4c:20:0d:be:3f:94:b4:6a:cf:e6: 83:ef:fc:08:16:83:5d:0d:4b:48:ff:23:ed:70:65:db:f6:6b: 7c:cc:30:f4:a8:3d:ae:27:b2:bd:81:76:ec:58:3c:fa:9d:fe: 9a:3a:92:83:38:ff:ea:25:15:4c:4f:9c:a0:46:a5:1e:9d:20: 80:03:c4:1e:68:91:44:0a:da:08:db:14:a6:e6:f7:70:03:b1: c7:71:31:55:34:88:04:07:53:2d:a6:eb:28:7c:d3:9c:18:f7: 73:4d:a8:25:6e:7b:3c:c4:e3:31:ce:8b:3d:ff:41:68:47:b0: ca:e4:89:25:2d:c4:b5:70:12:a8:fb:63:20:7b:7e:24:6d:08: 42:dc:56:f4:b8:94:c2:24:1d:72:09:fe:79:87:cd:ec:e8:7c: df:09:0f:f8:71:74:cc:46:ca:e1:d8:a4:fe:bd:40:40:5b:7c: b2:50:75:8e:93:43:6e:d6:f7:fc:45:b3:70:c7:31:6b:c4:e3: 4c:dc:63:8e:61:77:42:88:6e:93:2e:8c:b3:65:6c:86:f9:da: bc:ab:70:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwdVVE4MWo43oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDk2NDcxMjEtN2JmMy00NTM0LWFhNGYtZTZhNGExZWM0ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBcFeYwHeJ2VtWWIE7boV2zwCx2dWkkM3+6T 8V1kYfVTFfZqI1aHBaCsw0U9BLKOnIp/qevTgrfC7W+r/MGvL4LVeho3YkRmmbMC pceIiPNm9nOfxAVfgo+bUOtBlbOgLNM5sKV+oV3foCuPnXMwl5b/KCAxwtbsI9g7 qXAIM/olWjFzliDa/ZSp5pM1szwheDputkb0f4whAXgAkQJ1yCLgFwesTlUWYBxR 0CV+V6b7nQDgGTlsVJrjKLm0+N2pX/KwdkIAf3IhX8IzE7hS3cZlt09a0eCx+aHF QBOzy5ncnsk57+GRveU4xkQz9dWsZCNmsT/K4G7JLLXBxsRttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPByqXoXVgON9mjhkoVqkASAzCQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTI2MDMyMjYtYjRkZS0z YmIxLWE3MjUtNTQ0MzZiOTk5YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXs+wk2lmkms8vyi6RRkHazhj7emNUWAb2xMJ7nTXLS6SmmqCFG2mSM DYm5TCANvj+UtGrP5oPv/AgWg10NS0j/I+1wZdv2a3zMMPSoPa4nsr2BduxYPPqd /po6koM4/+olFUxPnKBGpR6dIIADxB5okUQK2gjbFKbm93ADscdxMVU0iAQHUy2m 6yh805wY93NNqCVuezzE4zHOiz3/QWhHsMrkiSUtxLVwEqj7YyB7fiRtCELcVvS4 lMIkHXIJ/nmHzezofN8JD/hxdMxGyuHYpP69QEBbfLJQdY6TQ27W9/xFs3DHMWvE 40zcY45hd0KIbpMujLNlbIb52ryrcI0= -----END CERTIFICATE-----Generated at Sun Nov 15 15:40:09 2026 by rpki-client