$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa File: 856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa (raw, json) Hash identifier: bVNrawBaPKUkqtrC1bhO3T3hme61cFZ7DYUqqwCWl1o= Subject key identifier: 3A:D0:76:5E:F4:30:08:C5:0E:DE:FD:81:C4:2B:C9:F8:E1:8A:6F:BE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D948AA928A93BB3A0BC219800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa Signing time: Tue 21 Apr 2026 13:00:31 +0000 ROA not before: Tue 21 Apr 2026 13:00:31 +0000 ROA not after: Mon 20 Jul 2026 13:00:31 +0000 asID: 15169 IP address blocks: 172.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8a:a9:28:a9:3b:b3:a0:bc:21:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 21 13:00:31 2026 GMT Not After : Jul 20 13:00:31 2026 GMT Subject: CN=fa8e8d7a-eb88-4e5c-84b9-4b2d777e2585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:52:fd:fa:5b:3d:2b:a1:49:42:1c:36:52: 73:4b:63:1e:94:8f:0b:be:40:cf:0e:57:85:6e:98: 34:3d:49:52:17:6e:cb:c1:d7:f6:19:00:70:a7:53: 87:73:ae:ac:4e:3a:86:7e:8d:c9:da:de:32:d0:09: 55:a0:07:2a:04:37:aa:25:58:df:ff:9c:23:02:df: db:e5:28:e5:2d:d9:a1:3b:d2:b7:b9:ed:af:a2:7e: c7:7a:a3:e2:ed:a8:90:7c:1d:55:3b:e6:f3:07:04: 83:33:0c:39:58:9f:fc:4e:31:fd:e3:18:58:a9:2d: 88:34:73:b7:e8:59:4c:19:44:6b:20:91:9e:ab:e6: 14:4f:7f:00:56:22:a3:72:34:26:18:ed:d3:05:62: 92:9b:91:62:60:5c:39:f8:05:b4:2d:6f:5d:d1:26: 13:61:8c:37:78:4e:fb:fc:7a:95:35:34:5a:ff:39: 01:63:5f:d0:7b:2f:d7:ba:2f:82:26:d9:e7:95:e5: 03:61:a9:60:12:3d:e3:ca:ad:94:cf:3c:e9:00:c7: 05:39:83:10:f3:88:f2:e8:57:b9:2f:80:55:a0:08: 08:47:39:92:fc:be:a8:7a:20:03:65:67:37:b1:4c: 43:3b:56:b3:dd:f8:20:db:3c:02:83:96:93:29:1c: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:76:5E:F4:30:08:C5:0E:DE:FD:81:C4:2B:C9:F8:E1:8A:6F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d7:9b:72:f8:2e:cb:8a:da:2f:2f:0f:6f:74:73:29:20:7c: 13:0d:b7:d0:08:68:0b:b2:82:6f:37:b4:06:cc:d4:86:9c:a5: 5d:66:2f:5e:49:9f:64:85:01:62:0a:56:64:8e:97:70:ee:f0: 06:2b:23:fc:60:78:89:da:a3:09:36:27:81:83:ee:da:68:c8: 1e:21:12:d8:95:03:89:df:03:b6:dc:8f:b9:0c:64:95:f0:72: 3d:43:79:c0:fe:7c:6d:ba:c3:72:51:ec:48:5f:2b:0c:d3:f6: 9b:85:2b:8a:ed:1d:ed:6c:6b:26:60:07:3e:b1:56:1a:5c:ff: ec:dc:e8:44:58:88:e2:7b:f0:1e:f8:a2:27:20:cd:53:d8:c0: c9:a8:4a:11:32:cf:06:ac:df:41:0f:36:a7:03:03:54:46:79: 9b:43:9c:24:e4:94:df:1a:e9:97:19:31:a4:73:40:db:ca:33: ce:16:59:93:c0:bc:8d:dc:5e:46:3a:39:79:db:28:9d:9e:93: f9:c9:98:fa:e7:a4:0d:0c:8d:55:c1:04:d2:0a:c8:dd:e0:f1: 3b:62:30:4a:97:c6:74:61:99:08:65:62:0f:60:a9:1d:9b:31: f6:74:77:2a:29:63:49:d7:b3:cf:ec:5b:65:f5:1c:17:89:75: 6b:7f:81:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UiqkoqTuzoLwhmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk ZmE4ZThkN2EtZWI4OC00ZTVjLTg0YjktNGIyZDc3N2UyNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkllS/fpbPSuhSUIcNlJzS2MelI8LvkDPDleF bpg0PUlSF27Lwdf2GQBwp1OHc66sTjqGfo3J2t4y0AlVoAcqBDeqJVjf/5wjAt/b 5SjlLdmhO9K3ue2von7HeqPi7aiQfB1VO+bzBwSDMww5WJ/8TjH94xhYqS2INHO3 6FlMGURrIJGeq+YUT38AViKjcjQmGO3TBWKSm5FiYFw5+AW0LW9d0SYTYYw3eE77 /HqVNTRa/zkBY1/Qey/Xui+CJtnnleUDYalgEj3jyq2UzzzpAMcFOYMQ84jy6Fe5 L4BVoAgIRzmS/L6oeiADZWc3sUxDO1az3fgg2zwCg5aTKRyvXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrQdl70MAjFDt79gcQryfjhim++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU2YTYyYjMtZWVkYS0z YWNkLWI3ZDUtYmU3ZDhhOWY5Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXXm3L4LsuK2i8vD290cykgfBMNt9AIaAuygm83tAbM1IacpV1mL15J n2SFAWIKVmSOl3Du8AYrI/xgeInaowk2J4GD7tpoyB4hEtiVA4nfA7bcj7kMZJXw cj1DecD+fG26w3JR7EhfKwzT9puFK4rtHe1sayZgBz6xVhpc/+zc6ERYiOJ78B74 oicgzVPYwMmoShEyzwas30EPNqcDA1RGeZtDnCTklN8a6ZcZMaRzQNvKM84WWZPA vI3cXkY6OXnbKJ2ek/nJmPrnpA0MjVXBBNIKyN3g8TtiMEqXxnRhmQhlYg9gqR2b MfZ0dyopY0nXs8/sW2X1HBeJdWt/gb0= -----END CERTIFICATE-----Generated at Sun May 3 19:18:50 2026 by rpki-client