$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: N6fPs3mBPm+pRSTKlr7sQYShVtf95RBcnRtRSfuFJaI= Subject key identifier: 06:C5:AB:03:77:D2:9C:F1:34:FE:50:4C:F8:97:53:FB:C4:57:80:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EA3630BE4F39A69EBFAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:a3:63:0b:e4:f3:9a:69:eb:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0d63bd46-d968-45b6-83a4-581064a456cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:64:bd:1b:f5:4b:31:86:34:77:79:67:1c: 1c:a6:6a:4e:36:75:b5:6e:30:e5:4b:d6:83:33:e1: 98:0b:70:64:e8:c9:c1:96:77:af:09:f6:a7:3b:27: b4:f4:a9:2b:2f:c3:e9:ad:c1:06:c1:82:d7:97:7d: f2:34:a5:17:9c:cc:0c:46:a0:7f:85:c7:29:92:99: 6d:dc:14:cb:df:32:a2:a5:ce:e1:f8:5f:da:eb:4e: fc:72:6c:7f:d0:06:a2:0f:56:bf:72:32:41:ca:1a: 67:76:c1:d9:64:ff:85:f0:67:c9:89:fb:80:2c:6c: 8f:4e:95:23:9f:63:0e:d7:7e:35:75:6d:e8:f7:b6: 1a:30:d3:e5:24:19:77:cb:6b:34:9b:74:a9:9b:41: 9c:96:71:5a:dc:20:63:d0:a5:e2:65:3e:c3:87:3b: 83:b5:4f:b2:22:ce:60:28:e4:a8:c1:a1:17:a3:64: c4:4a:6d:ca:a8:f0:29:05:97:c2:d1:8f:70:36:6f: 94:84:21:d7:4a:94:6e:b1:a0:76:fa:c3:7b:8a:a4: 1f:58:75:52:28:64:e8:cc:84:e0:68:f0:24:66:55: 92:b7:f0:0c:44:9a:de:04:02:25:5d:77:e1:dc:d3: 02:2e:fe:ea:1d:d8:ad:58:47:00:ce:c1:ff:30:2f: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C5:AB:03:77:D2:9C:F1:34:FE:50:4C:F8:97:53:FB:C4:57:80:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:17:25:2e:0f:63:20:17:3a:87:d5:32:b3:94:fd:6a:58:0a: 16:fa:4e:34:20:f1:b8:be:70:1e:f3:e0:e4:58:7b:57:48:03: 64:93:e1:fd:f3:90:72:48:91:c0:a4:ff:46:8a:7c:c8:2f:cb: 30:15:ec:55:d8:ab:f1:5a:15:e8:5a:3d:59:44:e8:29:30:8c: 6b:d5:5b:2d:ff:be:34:65:41:a7:31:4d:96:7d:e1:aa:bc:2d: 0e:ee:dd:b6:19:55:41:0f:c4:ee:84:0d:69:db:00:9a:fa:73: cd:f7:fb:ef:52:c1:ce:bd:8b:b3:86:fa:51:95:30:ac:35:70: 9e:e7:70:30:59:70:d8:c8:e5:cb:40:d4:2c:5e:ee:f7:98:6f: 9a:ce:87:56:ab:83:0d:91:23:17:4e:8d:bd:61:11:1e:5d:f1: 80:6b:90:a3:27:88:d8:6d:4b:be:d3:2e:c3:d5:1f:18:a4:ab: e6:9b:85:04:92:5e:6e:9e:d5:bb:ea:ac:da:5e:a8:21:c8:d1: 25:1c:30:29:53:e0:f3:15:dc:7c:1a:5f:a3:02:7b:9f:6f:39: 76:b5:25:f4:79:17:89:fd:38:2f:bb:66:90:c0:98:03:31:b5: ba:df:f3:d9:c7:eb:e6:65:90:42:83:af:e3:bb:ea:86:e0:09: 5f:91:d0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnqNjC+Tzmmnr+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGQ2M2JkNDYtZDk2OC00NWI2LTgzYTQtNTgxMDY0YTQ1NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqFkvRv1SzGGNHd5ZxwcpmpONnW1bjDlS9aD M+GYC3Bk6MnBlnevCfanOye09KkrL8PprcEGwYLXl33yNKUXnMwMRqB/hccpkplt 3BTL3zKipc7h+F/a6078cmx/0AaiD1a/cjJByhpndsHZZP+F8GfJifuALGyPTpUj n2MO1341dW3o97YaMNPlJBl3y2s0m3Spm0GclnFa3CBj0KXiZT7DhzuDtU+yIs5g KOSowaEXo2TESm3KqPApBZfC0Y9wNm+UhCHXSpRusaB2+sN7iqQfWHVSKGTozITg aPAkZlWSt/AMRJreBAIlXXfh3NMCLv7qHditWEcAzsH/MC/lPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbFqwN30pzxNP5QTPiXU/vEV4DLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUXJS4PYyAXOofVMrOU/WpYChb6TjQg8bi+cB7z4ORYe1dIA2ST4f3z kHJIkcCk/0aKfMgvyzAV7FXYq/FaFehaPVlE6CkwjGvVWy3/vjRlQacxTZZ94aq8 LQ7u3bYZVUEPxO6EDWnbAJr6c833++9Swc69i7OG+lGVMKw1cJ7ncDBZcNjI5ctA 1Cxe7veYb5rOh1argw2RIxdOjb1hER5d8YBrkKMniNhtS77TLsPVHxikq+abhQSS Xm6e1bvqrNpeqCHI0SUcMClT4PMV3HwaX6MCe59vOXa1JfR5F4n9OC+7ZpDAmAMx tbrf89nH6+ZlkEKDr+O76obgCV+R0ME= -----END CERTIFICATE-----Generated at Fri Aug 7 21:46:07 2026 by rpki-client