$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa File: 87a46c38-0b2e-3092-98ab-e7574f1b0614.roa (raw, json) Hash identifier: 7iNq/7bwGJWdP/n8Nr9qlAH6hIDDSR1SiKm9r3xdvJ4= Subject key identifier: DA:55:C2:14:A8:70:8A:87:EB:2B:2D:81:0A:46:72:1C:49:79:02:DD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B26E2BA88FAD35F6A6E777E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa Signing time: Wed 10 Sep 2025 20:45:15 +0000 ROA not before: Wed 10 Sep 2025 20:45:15 +0000 ROA not after: Tue 09 Dec 2025 21:45:15 +0000 asID: 15169 IP address blocks: 172.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e2:ba:88:fa:d3:5f:6a:6e:77:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 10 20:45:15 2025 GMT Not After : Dec 9 21:45:15 2025 GMT Subject: CN=d1c296d1-f45f-4919-8c5a-07228928643d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:21:c0:36:12:9a:ac:5c:be:ff:2f:d5:b9: 23:a0:02:41:2c:da:09:ae:29:bc:84:de:7e:58:ab: 20:70:fa:52:e2:87:17:41:6e:c5:6f:58:40:b0:d8: b9:f5:84:e6:a6:b1:6d:dc:41:f6:32:39:4d:fa:16: a5:b5:4c:4c:2c:52:8e:4d:5c:c4:c6:1f:78:9d:74: c0:52:0c:8c:52:3c:a1:90:bc:f6:f5:11:cc:0a:f6: 01:ba:86:47:ba:a2:74:84:e9:2b:28:24:79:cb:a7: 10:dc:d1:5b:97:f3:b6:6e:c7:0c:6e:6e:15:57:df: fd:9f:ea:82:df:66:bc:3f:ff:26:48:27:3b:67:9e: a3:0e:af:9f:e2:cd:12:dc:de:f5:9b:99:c1:fa:b2: 90:73:0e:a6:0e:bf:a8:bd:df:c8:40:c7:c6:13:b5: 82:04:49:30:33:95:f4:e3:01:b3:a2:fb:73:87:28: 65:4a:82:d9:41:63:13:50:6a:93:c6:d1:db:73:5a: 2a:25:b1:7d:95:2e:c3:d8:89:5e:ea:34:1d:5b:50: b9:be:9f:82:55:38:e0:17:c2:31:bb:b3:1a:b7:46: dd:60:97:e5:b4:05:73:2e:ed:93:f8:36:89:8d:3f: 70:44:6a:9a:cc:6b:71:41:be:5f:69:07:75:ee:7a: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:55:C2:14:A8:70:8A:87:EB:2B:2D:81:0A:46:72:1C:49:79:02:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f8:9e:63:8e:9a:8d:24:a9:80:99:9c:53:db:47:36:a8:bb: 3d:f9:da:92:58:4d:c6:72:e5:5f:a5:4a:2b:17:bf:38:f2:c4: 6d:bd:44:1f:95:77:d3:fb:43:7c:d0:54:79:8c:fd:1f:51:14: 72:47:aa:f9:ea:ff:a6:31:85:7a:42:d2:ab:8c:04:5d:31:26: 26:f0:60:1d:34:e3:ed:53:6b:63:f3:0b:c4:a2:a3:3f:bb:38: 7b:7c:fc:6f:b8:6e:c8:56:72:3c:92:f5:2c:a9:e0:3c:91:4e: 19:c7:90:d0:59:4f:64:a5:43:5b:57:d2:63:27:3d:5e:8e:16: 9d:ca:7b:00:d3:d2:59:b9:82:23:64:99:db:1e:f5:5c:1a:4e: 26:f0:92:c6:33:23:65:32:df:c5:62:1a:36:2c:34:b8:cb:5f: 84:6c:93:4f:38:f2:60:8b:71:b8:04:e5:cc:b2:94:1f:5a:73: 88:19:80:12:bb:1b:89:70:d7:d1:50:55:5c:30:df:19:48:3b: 80:4e:fc:4a:0e:8c:24:38:6f:35:fd:94:0a:9a:0e:1e:fa:b9: 18:ce:61:fd:19:c9:f4:df:ba:82:33:4e:bc:45:db:9e:fd:00: 49:26:f2:f8:d9:14:f7:71:1e:ad:9a:e4:0e:2e:0b:18:dc:15: 35:1d:08:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm4rqI+tNfam53fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxMDIwNDUxNVoXDTI1MTIwOTIxNDUxNVowLzEtMCsGA1UEAxMk ZDFjMjk2ZDEtZjQ1Zi00OTE5LThjNWEtMDcyMjg5Mjg2NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJohwDYSmqxcvv8v1bkjoAJBLNoJrim8hN5+ WKsgcPpS4ocXQW7Fb1hAsNi59YTmprFt3EH2MjlN+haltUxMLFKOTVzExh94nXTA UgyMUjyhkLz29RHMCvYBuoZHuqJ0hOkrKCR5y6cQ3NFbl/O2bscMbm4VV9/9n+qC 32a8P/8mSCc7Z56jDq+f4s0S3N71m5nB+rKQcw6mDr+ovd/IQMfGE7WCBEkwM5X0 4wGzovtzhyhlSoLZQWMTUGqTxtHbc1oqJbF9lS7D2Ile6jQdW1C5vp+CVTjgF8Ix u7Mat0bdYJfltAVzLu2T+DaJjT9wRGqazGtxQb5faQd17nrgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpVwhSocIqH6ystgQpGchxJeQLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdhNDZjMzgtMGIyZS0z MDkyLTk4YWItZTc1NzRmMWIwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH74nmOOmo0kqYCZnFPbRzaouz352pJYTcZy5V+lSisXvzjyxG29RB+V d9P7Q3zQVHmM/R9RFHJHqvnq/6YxhXpC0quMBF0xJibwYB004+1Ta2PzC8Sioz+7 OHt8/G+4bshWcjyS9Syp4DyRThnHkNBZT2SlQ1tX0mMnPV6OFp3KewDT0lm5giNk mdse9VwaTibwksYzI2Uy38ViGjYsNLjLX4Rsk0848mCLcbgE5cyylB9ac4gZgBK7 G4lw19FQVVww3xlIO4BO/EoOjCQ4bzX9lAqaDh76uRjOYf0ZyfTfuoIzTrxF2579 AEkm8vjZFPdxHq2a5A4uCxjcFTUdCC4= -----END CERTIFICATE-----Generated at Tue Nov 4 17:17:07 2025 by rpki-client