$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa File: 935bd29f-5047-300b-b66d-40395de7b976.roa (raw, json) Hash identifier: 5ab/fwEEMwgrC3abrxJrbIsjPI6PYDB5Ftx1ZvC/AJ4= Subject key identifier: 4D:4C:73:19:E0:9B:8A:83:15:E7:A4:2F:6E:78:7E:C6:2B:26:CF:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EDC7284C9D5EE4C8F3180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396982 IP address blocks: 172.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:dc:72:84:c9:d5:ee:4c:8f:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=83a8979e-5b80-4407-87c0-cca6c0db24c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:9c:c1:1d:51:49:3e:8a:dd:5c:91:3d:5d: 8b:8b:dc:01:16:e8:9f:bc:dd:28:f1:74:83:35:a3: 92:1c:ef:9f:15:24:49:9f:66:08:84:44:4d:02:f0: ca:93:30:9c:b8:4b:4e:44:e5:0b:01:81:49:3b:0f: 28:18:bf:2e:f7:0b:fa:37:58:49:e8:f8:da:f1:69: 28:57:ec:ad:24:ad:e4:43:71:28:f6:e5:23:20:96: 68:92:f8:11:a7:87:3a:e5:9a:73:d9:b0:85:a2:ff: e0:3c:6a:24:f0:69:3b:36:21:be:fc:1a:60:25:fd: 77:78:31:80:7e:ad:cd:2b:83:c0:a2:ae:b5:fb:90: a6:77:0d:88:1b:47:ec:d3:09:1b:05:bd:a5:7b:40: eb:3a:77:ad:2e:69:e5:f8:98:15:dc:a4:77:b3:74: 9d:54:bf:f2:59:85:d1:30:5d:3a:88:26:e4:4e:17: 3d:be:9a:14:fb:0a:ff:03:03:20:e7:54:56:c9:02: 4c:8a:38:ae:4b:01:3f:71:0a:c3:93:01:43:57:e7: e6:83:27:b4:78:7b:7e:c6:ed:3d:37:b9:fe:a3:66: 84:96:34:e2:7a:d3:e1:08:b8:2b:23:94:28:2d:22: e8:21:6f:02:c7:b5:41:c9:ae:fa:ea:e6:87:26:b8: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:73:19:E0:9B:8A:83:15:E7:A4:2F:6E:78:7E:C6:2B:26:CF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:52:ba:6d:6c:07:f1:ba:98:97:02:52:8c:1a:1d:77:09:97: cd:98:df:8b:2f:ab:99:19:e2:d8:0c:e9:d5:f3:4d:d9:59:bb: 95:fb:b8:c7:ef:32:dc:0a:93:b3:bd:2c:e4:04:68:6c:8d:7d: 5b:8e:f2:d9:58:b5:3d:74:62:53:b6:22:77:08:a1:03:15:1c: 31:91:51:43:65:00:78:15:ad:61:1a:72:85:2c:ef:e9:05:f3: c0:c8:15:62:4a:9b:02:96:33:4f:5f:b4:2b:ce:c3:b4:6d:ab: b6:54:2d:72:61:b0:06:b4:ba:d3:52:f0:22:25:cd:5d:28:9a: fb:d0:65:30:0d:6e:c3:1e:45:6b:69:1c:4a:17:3b:a5:56:e9: 95:55:6e:c3:6a:c1:8d:43:56:09:9a:72:76:91:32:73:55:4f: 8a:46:da:97:53:2e:b1:90:1a:b6:5c:15:97:41:5b:7f:db:4c: 1c:95:02:35:39:bb:a0:ac:97:f0:e4:d6:df:9b:b1:e1:16:fb: 33:4c:07:c8:bf:8e:14:5b:15:ac:cc:3d:5c:9f:c3:5d:a9:fb: 3b:cf:4f:ff:1d:3b:92:0c:f2:77:01:9b:6d:b2:84:ed:68:8e: 0e:b9:d5:01:db:3c:e3:d6:d1:3e:44:b4:e2:d6:28:07:18:03: aa:3d:54:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nntxyhMnV7kyPMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODNhODk3OWUtNWI4MC00NDA3LTg3YzAtY2NhNmMwZGIyNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscOcwR1RST6K3VyRPV2Li9wBFuifvN0o8XSD NaOSHO+fFSRJn2YIhERNAvDKkzCcuEtOROULAYFJOw8oGL8u9wv6N1hJ6Pja8Wko V+ytJK3kQ3Eo9uUjIJZokvgRp4c65Zpz2bCFov/gPGok8Gk7NiG+/BpgJf13eDGA fq3NK4PAoq61+5Cmdw2IG0fs0wkbBb2le0DrOnetLmnl+JgV3KR3s3SdVL/yWYXR MF06iCbkThc9vpoU+wr/AwMg51RWyQJMijiuSwE/cQrDkwFDV+fmgye0eHt+xu09 N7n+o2aEljTietPhCLgrI5QoLSLoIW8Cx7VBya766uaHJrhrnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1Mcxngm4qDFeekL254fsYrJs9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTM1YmQyOWYtNTA0Ny0z MDBiLWI2NmQtNDAzOTVkZTdiOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZSum1sB/G6mJcCUowaHXcJl82Y34svq5kZ4tgM6dXzTdlZu5X7uMfv MtwKk7O9LOQEaGyNfVuO8tlYtT10YlO2IncIoQMVHDGRUUNlAHgVrWEacoUs7+kF 88DIFWJKmwKWM09ftCvOw7Rtq7ZULXJhsAa0utNS8CIlzV0omvvQZTANbsMeRWtp HEoXO6VW6ZVVbsNqwY1DVgmacnaRMnNVT4pG2pdTLrGQGrZcFZdBW3/bTByVAjU5 u6Csl/Dk1t+bseEW+zNMB8i/jhRbFazMPVyfw12p+zvPT/8dO5IM8ncBm22yhO1o jg651QHbPOPW0T5EtOLWKAcYA6o9VEI= -----END CERTIFICATE-----Generated at Fri Aug 7 21:47:28 2026 by rpki-client