$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa File: 87a46c38-0b2e-3092-98ab-e7574f1b0614.roa (raw, json) Hash identifier: TOk9kp1HgjYf3BMFQn2UDTky7TyPiUgqab7p1YD3/go= Subject key identifier: E9:D2:DF:9D:BB:F6:64:27:43:CC:25:3D:EF:47:CA:49:96:C3:C3:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498B9AD601EBA79B4DBDC980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:9a:d6:01:eb:a7:9b:4d:bd:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1336df4c-dbdd-4d3a-8d22-caf7b5a80bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:26:11:05:7b:61:a2:f5:89:03:6a:da:38: 59:04:69:d7:c6:81:e1:bd:86:de:17:c1:36:35:90: 3b:2b:e7:34:9b:4f:6c:23:44:44:a7:c3:85:6c:90: 06:36:77:29:97:f4:68:82:38:1f:e7:fb:2c:42:c1: 82:a2:7d:16:de:7c:6c:74:e4:a7:7c:5d:a0:e9:2a: 34:93:64:02:b2:c4:96:18:51:61:f5:a9:34:bb:6e: bb:2f:5d:8f:78:4a:0f:a1:92:33:00:bf:6c:2f:16: 42:a1:25:a5:27:0d:d7:30:59:fc:0a:e0:d8:c2:ce: 96:8b:f9:dc:99:4a:58:18:02:f7:d8:ef:5c:68:e1: fa:2b:b3:fc:07:d7:4d:ce:fc:57:09:94:09:a6:23: 91:f9:ae:5f:64:08:e8:64:a5:fe:00:ec:02:24:2e: 4b:59:95:d4:b8:b7:d9:01:67:38:49:07:19:90:94: af:75:e3:c1:51:c0:d5:49:78:c2:0c:c2:b9:c7:66: 2e:81:3a:1a:b4:eb:4b:07:a8:c6:d0:3c:63:6b:2e: 1d:40:40:76:08:3c:06:33:a8:0c:30:b5:d6:c0:97: a1:d1:6f:e7:c5:4d:10:bf:ba:3b:4f:53:33:43:00: 92:97:d8:ca:fd:9c:a6:a5:76:37:9a:4f:14:47:b7: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:DF:9D:BB:F6:64:27:43:CC:25:3D:EF:47:CA:49:96:C3:C3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5b:c0:a5:0d:72:28:4e:88:f4:a1:4d:71:16:94:3d:c2:b1: 80:a8:3b:f5:25:d3:3c:a2:e2:5f:8b:da:b6:a5:51:14:3c:f0: 95:fe:00:53:2b:0c:02:ee:10:2e:ad:0b:82:c5:f6:37:4e:c4: 91:1c:1e:82:71:43:39:ff:f2:08:a3:77:3f:15:1f:31:fc:63: e1:4e:0b:a0:23:a3:c7:ac:02:1d:73:4b:01:81:a4:31:ee:75: 12:0c:b5:b6:83:61:44:30:0d:fb:2b:4f:a5:93:cc:09:8b:ec: 01:60:07:68:97:a5:13:46:88:78:21:fb:78:f3:4d:82:ec:50: 52:2c:8a:68:d4:b4:15:fe:ed:67:1d:2d:a8:b5:1a:ca:a4:7b: 83:62:6e:c0:0a:24:42:fd:ed:ed:ba:e3:a4:49:95:37:c1:8d: 1a:cd:1d:02:7c:38:ac:54:a1:81:31:ae:fe:84:19:ac:eb:46: 31:e2:a5:2b:de:d7:c8:ad:72:19:3a:94:24:ed:38:dc:b5:45: 10:24:a9:b8:cb:be:02:a2:5a:a7:47:3d:97:5d:f9:d8:07:af: 7e:60:ee:19:1b:62:b7:a2:21:41:1b:c4:db:f7:d9:3d:23:fb: 01:91:80:1d:dd:14:f1:bc:2a:2e:28:cf:a4:50:7a:5d:a9:7e: 9e:47:ac:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5rWAeunm029yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTMzNmRmNGMtZGJkZC00ZDNhLThkMjItY2FmN2I1YTgwYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIwmEQV7YaL1iQNq2jhZBGnXxoHhvYbeF8E2 NZA7K+c0m09sI0REp8OFbJAGNncpl/Rogjgf5/ssQsGCon0W3nxsdOSnfF2g6So0 k2QCssSWGFFh9ak0u267L12PeEoPoZIzAL9sLxZCoSWlJw3XMFn8CuDYws6Wi/nc mUpYGAL32O9caOH6K7P8B9dNzvxXCZQJpiOR+a5fZAjoZKX+AOwCJC5LWZXUuLfZ AWc4SQcZkJSvdePBUcDVSXjCDMK5x2YugToatOtLB6jG0Dxjay4dQEB2CDwGM6gM MLXWwJeh0W/nxU0Qv7o7T1MzQwCSl9jK/ZympXY3mk8UR7e/rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnS35279mQnQ8wlPe9HykmWw8OIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdhNDZjMzgtMGIyZS0z MDkyLTk4YWItZTc1NzRmMWIwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1bwKUNcihOiPShTXEWlD3CsYCoO/Ul0zyi4l+L2ralURQ88JX+AFMr DALuEC6tC4LF9jdOxJEcHoJxQzn/8gijdz8VHzH8Y+FOC6Ajo8esAh1zSwGBpDHu dRIMtbaDYUQwDfsrT6WTzAmL7AFgB2iXpRNGiHgh+3jzTYLsUFIsimjUtBX+7Wcd Lai1Gsqke4NibsAKJEL97e2646RJlTfBjRrNHQJ8OKxUoYExrv6EGazrRjHipSve 18itchk6lCTtONy1RRAkqbjLvgKiWqdHPZdd+dgHr35g7hkbYreiIUEbxNv32T0j +wGRgB3dFPG8Ki4oz6RQel2pfp5HrFw= -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:15 2026 by rpki-client