$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa File: e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa (raw, json) Hash identifier: gt1NF4o9NrpRuV/i/KNi0hk4pr1QxrILE9y4yHBHcKw= Subject key identifier: C0:5C:4B:42:24:FA:24:4F:A5:3D:A3:56:30:6D:0E:FF:D5:A9:61:B2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A05C89E5A98B1B4587E080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:5c:89:e5:a9:8b:1b:45:87:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a407ff46-23f8-45e9-8e12-3d94b1f82319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:31:ba:62:98:c7:85:4c:e0:e9:da:2f:2d: e3:b8:b1:8c:5b:05:09:3c:55:c0:51:46:d4:cd:7e: 7c:e4:e6:4b:51:66:99:d0:3b:79:8b:9b:ef:f0:7a: b7:4b:55:eb:1a:6d:f9:c6:a2:75:90:56:f0:bf:13: a7:0b:b3:8a:65:ef:21:92:90:50:5f:d4:f1:7e:e2: 13:3a:a8:a0:bf:8b:4a:3c:c5:b9:cc:92:5c:47:ff: 13:db:87:7a:ec:b2:dd:de:49:f6:0b:fd:ff:24:3c: b2:8e:8d:b1:d8:e0:99:a4:83:35:da:a4:f4:38:cd: 3b:f6:bb:84:13:63:46:dc:ec:28:07:c5:36:e3:20: ee:f9:53:91:fc:59:eb:0a:ba:b6:3d:89:91:bb:9d: c5:54:ca:74:81:93:64:87:f4:a0:02:b5:1a:f1:a1: 88:b3:1f:01:93:f1:c4:38:ff:46:55:4a:80:ce:85: ff:f6:2c:51:3e:88:00:6c:0f:81:27:f9:ca:d5:9f: 4a:d2:eb:19:88:aa:3d:d7:5d:3c:ba:f3:c1:46:5c: be:7a:f3:aa:48:14:44:3f:19:bd:38:d0:63:dd:3b: 31:8b:93:50:c1:0d:73:1f:94:34:c4:12:54:a2:10: 0e:7a:c1:e8:27:ce:14:35:c6:6b:24:6b:4d:e2:f3: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5C:4B:42:24:FA:24:4F:A5:3D:A3:56:30:6D:0E:FF:D5:A9:61:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a7:05:6f:f2:65:a4:e1:bc:dc:97:f1:75:04:01:05:f7:e1: 2e:ce:d6:be:e8:2f:79:b6:ae:ec:e3:6a:6e:71:72:18:60:64: 9f:7f:ec:ed:38:c8:75:94:e6:1f:54:1a:9c:68:3f:37:bf:18: 59:ca:94:fa:b4:fa:5e:ef:a6:7b:33:63:62:83:dd:70:ae:fd: 34:94:79:31:14:51:fb:f5:64:bc:73:53:93:22:08:24:b7:35: ee:0a:1c:68:34:c0:a1:2e:d4:03:62:7a:3d:ff:05:54:5d:fc: d0:4d:6b:96:72:66:ba:91:18:b4:f9:35:d7:32:c2:32:fb:3d: f6:1f:c4:45:63:04:50:0e:50:ed:49:67:08:01:6e:91:7a:6c: 85:40:a5:b7:83:ef:f4:bf:bd:76:84:0b:a9:f7:1c:47:24:b0: 6d:e4:e5:3e:31:d4:81:f0:76:64:28:b8:f1:d9:1b:3d:af:d3: f3:a7:bf:58:12:9d:25:ba:6d:b4:91:b2:4a:1f:18:79:4c:e3: 6b:3a:e4:e8:d7:04:08:3e:51:c6:f4:c1:28:9a:f7:6a:54:d1: 69:eb:eb:85:70:a5:74:0e:b2:ab:8b:9d:06:6f:3a:7e:72:38: 36:a3:a0:7c:bb:fa:00:e4:8e:31:46:6e:be:89:7e:34:5f:9d: 95:ab:aa:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noFyJ5amLG0WH4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTQwN2ZmNDYtMjNmOC00NWU5LThlMTItM2Q5NGIxZjgyMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06IxumKYx4VM4OnaLy3juLGMWwUJPFXAUUbU zX585OZLUWaZ0Dt5i5vv8Hq3S1XrGm35xqJ1kFbwvxOnC7OKZe8hkpBQX9TxfuIT Oqigv4tKPMW5zJJcR/8T24d67LLd3kn2C/3/JDyyjo2x2OCZpIM12qT0OM079ruE E2NG3OwoB8U24yDu+VOR/FnrCrq2PYmRu53FVMp0gZNkh/SgArUa8aGIsx8Bk/HE OP9GVUqAzoX/9ixRPogAbA+BJ/nK1Z9K0usZiKo91108uvPBRly+evOqSBREPxm9 ONBj3Tsxi5NQwQ1zH5Q0xBJUohAOesHoJ84UNcZrJGtN4vMSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBcS0Ik+iRPpT2jVjBtDv/VqWGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTMxYTQyMjctY2I4My0z NjRkLTg1NmItNGY1Y2M5ZWU3ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqnBW/yZaThvNyX8XUEAQX34S7O1r7oL3m2ruzjam5xchhgZJ9/7O04 yHWU5h9UGpxoPze/GFnKlPq0+l7vpnszY2KD3XCu/TSUeTEUUfv1ZLxzU5MiCCS3 Ne4KHGg0wKEu1ANiej3/BVRd/NBNa5ZyZrqRGLT5NdcywjL7PfYfxEVjBFAOUO1J ZwgBbpF6bIVApbeD7/S/vXaEC6n3HEcksG3k5T4x1IHwdmQouPHZGz2v0/Onv1gS nSW6bbSRskofGHlM42s65OjXBAg+Ucb0wSia92pU0Wnr64VwpXQOsquLnQZvOn5y ODajoHy7+gDkjjFGbr6JfjRfnZWrqpY= -----END CERTIFICATE-----Generated at Fri Aug 7 21:42:55 2026 by rpki-client