$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa File: d5fd37bd-341a-30b3-a5bf-c402e4909202.roa (raw, json) Hash identifier: YSzn5GQYSiAzCcU5h6Tjxz2V/2TOaciWy5zHZtKMdWs= Subject key identifier: 2E:15:9F:E0:37:17:54:2F:69:19:EE:BA:D0:C5:30:E2:45:1F:F3:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4985128DC30B5249BD4E3A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:12:8d:c3:0b:52:49:bd:4e:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=72aa33c1-edf2-4037-bd7a-4571358bd9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:57:d4:56:0c:3b:c1:67:75:ff:17:2b:e8: df:4f:b0:2b:30:c3:2c:85:3c:6b:bd:5d:98:de:cf: 68:27:3c:53:20:a3:c5:23:3c:0a:58:a9:2c:e3:de: a4:72:19:28:0a:b9:99:73:4f:0e:46:d2:6f:70:15: d9:d6:18:49:2f:64:0c:27:fb:5f:b0:0c:ca:c2:02: 30:fb:e7:b7:3e:dc:54:63:6a:c2:e0:3c:aa:81:91: cc:58:38:30:2a:2a:18:f6:ec:2e:7b:59:f6:a1:93: 5c:74:1a:98:c6:d0:9c:5f:9a:ca:25:2c:c9:51:86: 6b:2a:1d:6b:19:d0:99:77:a7:89:14:58:87:3a:8b: e8:a7:25:a1:9c:84:51:22:75:33:55:41:3d:d4:75: f3:1d:8f:cc:46:d9:14:b2:15:1d:c8:bc:79:12:73: 1e:ad:41:c6:aa:90:86:69:9e:ed:c1:dc:64:2a:fd: 6a:74:74:9b:3d:3e:3b:73:26:59:f3:60:fa:58:6c: e0:92:6d:8a:0e:f0:d8:90:93:ba:2e:55:9c:ce:f5: ff:b0:f6:dc:ea:2b:85:5c:28:20:fc:eb:e0:97:98: fa:a5:d3:ab:11:98:4c:21:eb:a0:61:25:72:c1:cb: 2f:fd:e1:45:4e:a2:e2:bb:e9:97:29:d0:87:e9:7d: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:15:9F:E0:37:17:54:2F:69:19:EE:BA:D0:C5:30:E2:45:1F:F3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1d:6b:3e:26:e1:10:60:d3:30:83:5b:3e:29:46:25:4d:19: 3c:8d:b9:e6:de:5b:b0:71:90:50:b0:14:c1:f8:0f:95:a1:b7: 97:ca:60:35:9f:02:45:bd:47:34:04:07:6a:89:8a:05:7d:2a: 22:d7:9a:69:53:96:01:64:a1:17:af:68:56:6a:ef:45:45:03: f3:82:ed:06:4d:fb:5c:05:24:39:da:a5:21:1a:9e:07:12:1e: 63:22:dd:6d:50:b6:df:21:2c:19:5f:83:1e:e6:23:33:4c:cd: 59:a3:61:03:7f:d9:84:69:a8:6c:af:a3:aa:7e:86:64:20:ba: 9c:b4:2e:61:ed:43:0c:17:32:89:9c:64:c7:06:6e:21:bb:bc: 4e:bc:9b:36:6f:50:7a:23:50:b1:62:bb:c5:89:80:ab:ad:7e: 42:56:1c:80:c4:69:e3:ac:67:90:de:18:01:72:f1:d1:df:d5: 21:4a:1c:de:94:ea:9c:41:99:d8:99:86:c2:65:54:62:14:83: 11:27:d3:3c:b8:3b:ce:2a:13:6c:4a:d7:02:54:9e:bf:e6:f2: 63:32:de:23:1b:92:c0:eb:d9:42:30:c8:0b:3a:c9:1c:75:c1: af:cd:25:8e:bc:92:ec:9e:2f:48:b2:c2:d6:3c:8d:a1:74:39: 59:25:d7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhRKNwwtSSb1OOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzJhYTMzYzEtZWRmMi00MDM3LWJkN2EtNDU3MTM1OGJkOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTBX1FYMO8Fndf8XK+jfT7ArMMMshTxrvV2Y 3s9oJzxTIKPFIzwKWKks496kchkoCrmZc08ORtJvcBXZ1hhJL2QMJ/tfsAzKwgIw ++e3PtxUY2rC4DyqgZHMWDgwKioY9uwue1n2oZNcdBqYxtCcX5rKJSzJUYZrKh1r GdCZd6eJFFiHOovopyWhnIRRInUzVUE91HXzHY/MRtkUshUdyLx5EnMerUHGqpCG aZ7twdxkKv1qdHSbPT47cyZZ82D6WGzgkm2KDvDYkJO6LlWczvX/sPbc6iuFXCgg /Ovgl5j6pdOrEZhMIeugYSVywcsv/eFFTqLiu+mXKdCH6X2xEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4Vn+A3F1QvaRnuutDFMOJFH/OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVmZDM3YmQtMzQxYS0z MGIzLWE1YmYtYzQwMmU0OTA5MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4daz4m4RBg0zCDWz4pRiVNGTyNuebeW7BxkFCwFMH4D5Wht5fKYDWf AkW9RzQEB2qJigV9KiLXmmlTlgFkoRevaFZq70VFA/OC7QZN+1wFJDnapSEangcS HmMi3W1Qtt8hLBlfgx7mIzNMzVmjYQN/2YRpqGyvo6p+hmQgupy0LmHtQwwXMomc ZMcGbiG7vE68mzZvUHojULFiu8WJgKutfkJWHIDEaeOsZ5DeGAFy8dHf1SFKHN6U 6pxBmdiZhsJlVGIUgxEn0zy4O84qE2xK1wJUnr/m8mMy3iMbksDr2UIwyAs6yRx1 wa/NJY68kuyeL0iywtY8jaF0OVkl1yQ= -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:40 2026 by rpki-client