$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa File: 9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa (raw, json) Hash identifier: JlyJTXAAVPQnrIJjZUQRrpCs0kTQHnhTVBq3zMmYGgc= Subject key identifier: ED:5B:61:BA:F3:50:6D:5F:44:DC:A6:E0:64:00:FC:63:CB:D9:D4:30 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4988F06D0AE38DBD516052E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:f0:6d:0a:e3:8d:bd:51:60:52:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=424f7dfa-a78b-4492-b6e8-a8f1b0295b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:14:93:a4:4a:3d:d9:94:c0:6d:44:ac:ae: 10:a5:fa:fb:3f:3f:30:e6:67:ef:57:42:99:4c:fa: fc:24:52:63:73:4c:cc:a2:cf:12:be:b9:82:ea:b0: 6d:7a:6e:6d:b7:a7:9f:21:d4:ef:de:69:09:01:40: 43:07:1b:6d:4b:74:f3:bf:09:a9:61:69:d2:19:d5: dc:68:c3:1a:0d:e9:65:f8:6f:3f:29:5a:19:0d:f1: 72:e1:78:e1:6e:3b:df:aa:36:cb:d5:71:a4:d7:93: fc:a6:fa:52:f0:15:b2:78:84:ce:21:38:5d:c0:e4: 29:0e:c6:dc:fe:c1:9c:6a:73:47:38:13:69:5b:3f: 50:cf:3a:9a:77:10:4f:55:8f:50:bf:61:d2:00:57: 8b:93:21:19:1d:b3:28:c2:ba:ee:7a:50:75:26:2a: 8a:c0:32:07:05:c7:2b:c3:3f:33:84:dd:40:52:b3: ec:1a:a3:aa:02:a0:68:b8:05:19:28:47:be:f3:d1: 64:d0:7d:e0:ab:5d:2c:08:c9:8b:47:20:cd:06:b1: 67:e5:0f:e3:f8:06:98:30:68:71:4f:c7:b3:f9:ef: b8:da:bc:fe:c8:85:9d:cf:e0:0c:e8:74:fc:d2:48: c6:9b:f3:98:a3:6a:fa:c0:07:7e:bb:d5:09:8d:95: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:61:BA:F3:50:6D:5F:44:DC:A6:E0:64:00:FC:63:CB:D9:D4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:63:a7:f9:9b:55:f1:3c:b4:9c:a8:87:6e:c1:c7:ad:d1:fc: 77:5c:63:d9:57:42:85:c3:d3:6a:40:d2:48:43:18:a9:68:ee: 22:6e:5c:64:7e:8a:04:e8:47:78:99:ee:c9:01:0b:79:64:c1: 59:4b:56:e0:25:e1:d6:65:b3:e0:80:8e:d5:19:46:d2:6d:8c: 21:96:b2:89:b8:c2:11:b0:6d:22:4a:e6:83:e5:8c:bb:5e:ce: d5:70:b7:26:22:f9:74:86:30:59:0e:ab:d2:58:c1:a5:fb:cc: 61:48:d0:cd:37:ad:18:a3:61:54:e3:02:b5:7f:8f:b3:c0:75: dd:96:85:86:d4:62:4b:4b:58:c9:d2:55:a3:69:8a:be:d8:a9: 95:08:1a:9d:23:c0:6f:ac:06:ba:25:1e:ac:c1:04:dd:96:a4: 0e:0d:14:e6:1b:69:ca:bb:25:6a:a3:82:62:40:e9:6d:19:0f: 0e:06:f3:fa:ca:64:8d:19:42:95:ce:8a:d1:34:30:a4:ff:86: f3:50:7a:a0:a9:1d:4c:fa:4b:0f:d9:c8:e7:1d:45:85:61:b6: 56:18:35:37:e5:b2:52:25:d4:ed:de:08:79:ea:7c:3d:4d:63: b9:df:b0:e1:6b:77:9d:f0:bf:87:c9:5a:cb:17:d7:d7:5f:16: 5e:98:e6:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPBtCuONvVFgUuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDI0ZjdkZmEtYTc4Yi00NDkyLWI2ZTgtYThmMWIwMjk1YjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzYUk6RKPdmUwG1ErK4Qpfr7Pz8w5mfvV0KZ TPr8JFJjc0zMos8SvrmC6rBtem5tt6efIdTv3mkJAUBDBxttS3TzvwmpYWnSGdXc aMMaDell+G8/KVoZDfFy4XjhbjvfqjbL1XGk15P8pvpS8BWyeITOIThdwOQpDsbc /sGcanNHOBNpWz9QzzqadxBPVY9Qv2HSAFeLkyEZHbMowrruelB1JiqKwDIHBccr wz8zhN1AUrPsGqOqAqBouAUZKEe+89Fk0H3gq10sCMmLRyDNBrFn5Q/j+AaYMGhx T8ez+e+42rz+yIWdz+AM6HT80kjGm/OYo2r6wAd+u9UJjZXAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1bYbrzUG1fRNym4GQA/GPL2dQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEwYjBiMWMtNTEzZC0z ODc1LTgxYmEtNWJmZDc2MmQwNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhjp/mbVfE8tJyoh27Bx63R/HdcY9lXQoXD02pA0khDGKlo7iJuXGR+ igToR3iZ7skBC3lkwVlLVuAl4dZls+CAjtUZRtJtjCGWsom4whGwbSJK5oPljLte ztVwtyYi+XSGMFkOq9JYwaX7zGFI0M03rRijYVTjArV/j7PAdd2WhYbUYktLWMnS VaNpir7YqZUIGp0jwG+sBrolHqzBBN2WpA4NFOYbacq7JWqjgmJA6W0ZDw4G8/rK ZI0ZQpXOitE0MKT/hvNQeqCpHUz6Sw/ZyOcdRYVhtlYYNTflslIl1O3eCHnqfD1N Y7nfsOFrd53wv4fJWssX19dfFl6Y5qw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:30:53 2026 by rpki-client