$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa File: 571948d2-8027-3582-930f-2b7b5ed13980.roa (raw, json) Hash identifier: HOBtp2GqTUsgGej58Yv/xlGfVcRnaLUS5Yn/dOasIL0= Subject key identifier: 6C:4A:90:89:87:D8:F8:68:2B:F4:F1:8E:40:43:99:20:71:C5:BB:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498526D2BAE81C82B5D19C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 172.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:26:d2:ba:e8:1c:82:b5:d1:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c545ed63-7790-430f-a331-b3d180547169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:2e:c1:68:ee:6c:b1:e2:1f:f0:2a:68:7f: d9:8a:0c:d5:1e:26:91:5f:91:7b:9e:b4:92:7d:da: 0a:cc:53:34:a5:34:c7:45:46:1c:e0:26:c1:5d:cb: 90:6e:7e:a1:cc:b2:9f:6b:60:92:3f:55:b6:c0:73: fb:9d:d6:b6:07:06:3d:2a:c3:b8:d0:be:0f:87:ad: ee:80:82:b2:42:19:b5:a6:2a:6a:c8:86:64:0f:d9: 08:aa:9c:2f:32:91:46:59:d9:54:d1:74:fa:24:10: a3:d8:60:13:74:0a:f0:7a:fe:34:85:30:9d:43:4e: 7e:05:ee:4e:03:fd:3c:10:ea:0a:5e:41:b8:c8:f9: 74:98:07:f8:1a:29:48:b8:48:e4:94:bb:27:20:7d: 16:55:07:a3:f8:9e:cf:43:33:37:e2:19:15:9a:55: f2:f0:0c:28:f1:f8:29:86:fc:b2:ed:6b:00:82:c9: 71:62:a3:22:6c:6e:35:de:74:fa:dc:8d:2d:39:55: 1b:4a:ab:92:6c:55:42:f4:6f:68:df:a6:8c:2d:f0: bc:8d:b2:5d:c2:b3:a2:81:a2:14:de:f3:db:44:27: 00:53:aa:f6:49:a8:4b:e1:75:fc:71:e6:32:98:83: 41:a6:61:0e:dd:68:77:18:06:5e:b1:33:a2:ad:a0: b1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4A:90:89:87:D8:F8:68:2B:F4:F1:8E:40:43:99:20:71:C5:BB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c2:46:ab:33:1b:2f:b1:ad:47:1d:51:27:f2:d9:1a:e4:e9: f2:cb:25:87:a6:6e:96:01:1b:9f:46:ba:04:52:dd:b5:9e:ef: 5c:e1:43:26:32:5a:69:93:b8:1f:f0:50:ab:7c:d4:2b:0f:96: 6d:8b:f5:de:d3:f7:fe:f5:bf:36:f0:79:c3:7f:89:e5:56:d9: 7d:92:f9:85:1d:75:73:28:ad:a9:84:d9:4c:0f:79:de:91:71: 34:66:b9:3d:ec:e6:f7:5e:d2:20:5e:d9:a5:cc:4b:71:54:c9: 6a:8b:0b:be:54:d9:6d:3d:cd:04:7f:43:d3:f7:db:b8:42:3d: 98:ac:fe:bc:b0:be:7e:d4:c9:ef:5a:cb:02:48:34:4d:12:0d: 7b:fb:e1:95:bb:eb:64:cc:b5:53:c7:2d:4e:11:2a:fb:51:47: bc:72:bc:05:da:cc:bb:d1:96:07:24:a7:34:66:ca:9c:aa:26: 4f:1e:34:eb:e9:aa:62:20:08:5d:93:7f:98:bf:4e:44:71:71: 60:63:02:02:f3:f5:b5:40:44:7a:6c:1b:7f:cd:c9:68:3e:35: 59:e6:5f:af:8b:f3:47:2f:f6:d0:c4:7e:15:96:15:60:3b:a1: ab:2e:21:87:83:9e:c7:d9:07:a4:13:d4:e5:c9:62:24:e5:a9: 91:42:e1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhSbSuugcgrXRnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzU0NWVkNjMtNzc5MC00MzBmLWEzMzEtYjNkMTgwNTQ3MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYUuwWjubLHiH/AqaH/ZigzVHiaRX5F7nrSS fdoKzFM0pTTHRUYc4CbBXcuQbn6hzLKfa2CSP1W2wHP7nda2BwY9KsO40L4Ph63u gIKyQhm1pipqyIZkD9kIqpwvMpFGWdlU0XT6JBCj2GATdArwev40hTCdQ05+Be5O A/08EOoKXkG4yPl0mAf4GilIuEjklLsnIH0WVQej+J7PQzM34hkVmlXy8Awo8fgp hvyy7WsAgslxYqMibG413nT63I0tOVUbSquSbFVC9G9o36aMLfC8jbJdwrOigaIU 3vPbRCcAU6r2SahL4XX8ceYymINBpmEO3Wh3GAZesTOiraCx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxKkImH2PhoK/TxjkBDmSBxxbuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTcxOTQ4ZDItODAyNy0z NTgyLTkzMGYtMmI3YjVlZDEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfCRqszGy+xrUcdUSfy2Rrk6fLLJYembpYBG59GugRS3bWe71zhQyYy WmmTuB/wUKt81CsPlm2L9d7T9/71vzbwecN/ieVW2X2S+YUddXMoramE2UwPed6R cTRmuT3s5vde0iBe2aXMS3FUyWqLC75U2W09zQR/Q9P327hCPZis/rywvn7Uye9a ywJINE0SDXv74ZW762TMtVPHLU4RKvtRR7xyvAXazLvRlgckpzRmypyqJk8eNOvp qmIgCF2Tf5i/TkRxcWBjAgLz9bVARHpsG3/NyWg+NVnmX6+L80cv9tDEfhWWFWA7 oasuIYeDnsfZB6QT1OXJYiTlqZFC4Rs= -----END CERTIFICATE-----Generated at Fri Sep 25 14:54:27 2026 by rpki-client