$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa File: 63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa (raw, json) Hash identifier: ixQMxlRt056MIMz7n+rirgIipWiaBoOW6nzxAmsV8mg= Subject key identifier: 89:6F:2D:92:69:53:BE:A4:4F:2B:81:CE:EB:05:9A:33:0B:36:85:81 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D18B4E50D662D3DBD7F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 172.253.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:18:b4:e5:0d:66:2d:3d:bd:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0a43a50-c21b-47d4-a5d9-8656c9a2b2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:89:33:4a:bf:10:70:2a:d1:e9:f8:f4:58: 2d:5f:f3:7d:f6:73:8a:04:ad:d4:10:36:0a:64:92: fb:98:e1:46:71:a9:39:2d:75:62:c2:99:dc:46:d9: 5d:c4:3d:4c:00:85:22:f3:79:2e:68:cb:62:f0:06: 7e:ed:32:f8:17:ad:27:c8:af:05:6d:37:fc:34:f1: 04:17:c2:88:40:ae:44:bc:7e:ad:2c:8b:24:b7:34: 85:bb:d7:cc:16:1a:82:f8:b0:80:b2:41:18:ab:61: 36:00:20:8b:c5:a3:92:f2:18:e1:91:d6:af:b0:5e: 58:78:d6:98:3c:63:cb:3f:0f:9c:57:fb:82:60:c2: 64:8b:cd:27:08:86:71:f4:8a:e4:d7:9a:2e:00:68: e1:fb:cf:a0:fe:45:08:57:79:f2:94:2e:71:22:7e: c2:20:33:34:50:d0:3b:34:55:26:b7:2d:cc:95:96: e3:41:0a:9b:fd:fe:3f:00:0d:af:77:2e:5d:24:b8: 83:e6:fc:4d:d1:36:29:c5:7f:5a:e8:bb:c1:8b:c5: 93:d2:6e:8b:85:08:e9:53:57:72:45:a5:37:7f:4e: b2:2e:65:d8:26:10:a3:de:78:c9:59:53:fa:ca:bc: 37:1d:ac:9b:c8:23:d4:a5:39:70:e9:3b:c0:2e:db: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:2D:92:69:53:BE:A4:4F:2B:81:CE:EB:05:9A:33:0B:36:85:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63a4b0e8-a1f5-3fcc-a5f7-b58c2bfeda25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:db:e4:91:bd:73:3a:a1:bc:e6:37:10:d6:29:84:83:22:30: 79:1b:a2:96:74:ff:e1:98:1a:2f:95:6e:33:52:88:a6:5e:49: a5:be:15:a6:9a:95:d8:cb:1f:b2:d1:19:61:1c:f6:67:87:1a: ac:6d:09:63:2f:4e:1f:73:69:97:24:24:30:46:3e:95:e9:73: f5:c5:4b:ae:39:ea:f2:de:89:14:dc:75:ac:c2:bc:7f:1c:6e: 40:fc:00:20:94:db:a2:b6:2d:99:32:75:99:c9:d9:86:e4:e4: 37:da:bb:49:72:0d:dd:29:6f:a8:65:92:18:86:2b:55:88:4d: 32:cb:6c:96:c2:b6:37:5c:72:54:e2:5a:d0:66:b5:ba:a6:44: 77:e7:26:07:d6:dc:5b:de:2c:f9:96:73:78:e7:70:0f:ae:50: ca:18:d6:b1:80:a2:50:c9:01:d7:3a:fb:4a:8b:8d:70:90:ba: 07:7b:e6:e1:3f:2c:65:8e:1e:52:20:08:20:2e:6a:bc:5a:a4: 1b:c5:9b:0d:7d:5d:74:b9:2d:de:53:42:89:5f:72:d3:b4:3e: 9c:fd:f4:15:9f:61:a5:fb:4d:c6:6f:ee:6d:cf:bf:b2:80:2b: d4:12:e7:22:58:44:34:f5:21:66:c5:b7:44:48:70:8b:d8:42: cd:56:be:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRi05Q1mLT29f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBhNDNhNTAtYzIxYi00N2Q0LWE1ZDktODY1NmM5YTJiMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFCJM0q/EHAq0en49FgtX/N99nOKBK3UEDYK ZJL7mOFGcak5LXViwpncRtldxD1MAIUi83kuaMti8AZ+7TL4F60nyK8FbTf8NPEE F8KIQK5EvH6tLIsktzSFu9fMFhqC+LCAskEYq2E2ACCLxaOS8hjhkdavsF5YeNaY PGPLPw+cV/uCYMJki80nCIZx9Irk15ouAGjh+8+g/kUIV3nylC5xIn7CIDM0UNA7 NFUmty3MlZbjQQqb/f4/AA2vdy5dJLiD5vxN0TYpxX9a6LvBi8WT0m6LhQjpU1dy RaU3f06yLmXYJhCj3njJWVP6yrw3HaybyCPUpTlw6TvALtvXqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlvLZJpU76kTyuBzusFmjMLNoWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNhNGIwZTgtYTFmNS0z ZmNjLWE1ZjctYjU4YzJiZmVkYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnb5JG9czqhvOY3ENYphIMiMHkbopZ0/+GYGi+VbjNSiKZeSaW+Faaa ldjLH7LRGWEc9meHGqxtCWMvTh9zaZckJDBGPpXpc/XFS6456vLeiRTcdazCvH8c bkD8ACCU26K2LZkydZnJ2Ybk5Dfau0lyDd0pb6hlkhiGK1WITTLLbJbCtjdcclTi WtBmtbqmRHfnJgfW3FveLPmWc3jncA+uUMoY1rGAolDJAdc6+0qLjXCQugd75uE/ LGWOHlIgCCAuarxapBvFmw19XXS5Ld5TQolfctO0Ppz99BWfYaX7TcZv7m3Pv7KA K9QS5yJYRDT1IWbFt0RIcIvYQs1WvqA= -----END CERTIFICATE-----Generated at Fri Sep 25 20:23:45 2026 by rpki-client