$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9b824f6-9072-3534-a29f-aba86b574d7e.roa File: e9b824f6-9072-3534-a29f-aba86b574d7e.roa (raw, json) Hash identifier: zhXRl1LqoOyNJDARR7/OZ7/zdHTDKZSaigLKi0uBjPQ= Subject key identifier: C5:DE:25:14:07:A0:16:9E:6D:02:21:19:80:39:C2:17:23:84:32:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B26E151023E5C4F2329F78680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9b824f6-9072-3534-a29f-aba86b574d7e.roa Signing time: Wed 10 Sep 2025 20:42:24 +0000 ROA not before: Wed 10 Sep 2025 20:42:24 +0000 ROA not after: Tue 09 Dec 2025 21:42:24 +0000 asID: 15169 IP address blocks: 172.253.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:e1:51:02:3e:5c:4f:23:29:f7:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 10 20:42:24 2025 GMT Not After : Dec 9 21:42:24 2025 GMT Subject: CN=9ac30dd9-a54c-435b-ab93-e8cc69736e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:07:60:3f:af:be:58:f5:97:34:88:99:b4: 97:f8:7b:8b:4b:89:7f:ae:88:93:b0:16:e2:ca:9e: 42:b8:ba:a5:7e:63:42:85:44:fe:99:92:d4:4d:1c: 70:57:3a:10:4b:86:17:e2:21:32:07:52:d1:3f:73: 85:73:4a:39:8f:e0:16:4c:fa:81:61:f6:c3:4a:74: 53:b5:5f:26:f1:38:3d:92:7d:c8:fc:30:14:ad:a6: 85:63:0a:4a:40:c4:87:40:66:69:15:44:f6:31:a9: aa:b5:f8:39:6b:bd:9b:04:d6:37:d7:0d:b6:4d:ba: 14:1f:7a:d5:18:e1:96:7d:e7:cc:3c:a6:44:68:e8: 44:5c:8f:e4:e6:20:e6:31:2b:58:54:15:b4:e2:9f: a3:81:bd:66:68:ff:eb:01:4c:24:6a:6d:45:e5:e4: 8d:c0:59:62:e2:b6:a0:6d:36:32:a6:38:8d:e1:b7: 85:bf:e9:24:2c:68:60:ae:fc:0e:e6:af:ad:75:a8: cc:03:37:70:c6:74:8e:01:4a:60:52:66:5c:bd:dc: 88:20:f1:ad:b1:ca:84:06:25:97:d8:bd:9b:d1:41: db:41:36:f3:9f:c5:4a:c7:d5:63:00:22:0c:13:c5: 56:56:66:dc:f0:85:3b:41:d9:e7:c6:73:ef:ee:c7: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:25:14:07:A0:16:9E:6D:02:21:19:80:39:C2:17:23:84:32:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9b824f6-9072-3534-a29f-aba86b574d7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ed:1c:92:c9:11:1d:67:27:f6:3e:7d:aa:59:66:8c:79:1d: 50:9b:dc:93:ea:9b:6d:da:7d:ac:ef:12:d2:8d:f6:4c:f6:44: d9:14:9d:4b:03:06:a9:83:64:02:cf:3c:17:63:ba:65:62:08: 4f:63:30:ea:97:f2:a7:71:92:a6:2a:c2:41:79:39:ae:06:11: e4:e7:b0:10:2f:40:ca:8d:90:eb:28:c5:91:f1:77:c0:0c:68: cf:2b:9c:e5:ea:5c:16:c0:fe:22:76:b4:63:47:ef:f1:58:44: ce:ac:a7:94:e6:3e:77:22:28:c3:43:b9:7c:7d:a1:05:77:67: 70:4c:7e:79:d9:73:23:c0:31:bb:08:97:c6:82:f6:00:eb:9c: 88:c2:43:87:cc:b0:b2:18:e5:52:48:f9:1d:54:a7:da:44:8e: 5b:01:4a:18:50:2e:21:a2:1b:14:ee:2c:2b:b0:49:55:0e:1a: b4:8e:14:42:87:1e:76:7d:af:53:cc:dc:48:43:3d:07:70:e0: 53:9f:72:40:10:f3:c4:c5:95:1d:8d:99:97:cd:fe:f0:b8:10: 80:5c:96:42:e0:c4:86:02:0f:3f:dc:9d:68:db:a0:4f:24:64: d4:fe:ae:60:86:1a:08:00:9f:00:d1:a1:8a:29:4c:c7:84:bd: 36:d6:e8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm4VECPlxPIyn3hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxMDIwNDIyNFoXDTI1MTIwOTIxNDIyNFowLzEtMCsGA1UEAxMk OWFjMzBkZDktYTU0Yy00MzViLWFiOTMtZThjYzY5NzM2ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpIHYD+vvlj1lzSImbSX+HuLS4l/roiTsBbi yp5CuLqlfmNChUT+mZLUTRxwVzoQS4YX4iEyB1LRP3OFc0o5j+AWTPqBYfbDSnRT tV8m8Tg9kn3I/DAUraaFYwpKQMSHQGZpFUT2Mamqtfg5a72bBNY31w22TboUH3rV GOGWfefMPKZEaOhEXI/k5iDmMStYVBW04p+jgb1maP/rAUwkam1F5eSNwFli4rag bTYypjiN4beFv+kkLGhgrvwO5q+tdajMAzdwxnSOAUpgUmZcvdyIIPGtscqEBiWX 2L2b0UHbQTbzn8VKx9VjACIME8VWVmbc8IU7QdnnxnPv7seKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXeJRQHoBaebQIhGYA5whcjhDLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTliODI0ZjYtOTA3Mi0z NTM0LWEyOWYtYWJhODZiNTc0ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3tHJLJER1nJ/Y+fapZZox5HVCb3JPqm23afazvEtKN9kz2RNkUnUsD BqmDZALPPBdjumViCE9jMOqX8qdxkqYqwkF5Oa4GEeTnsBAvQMqNkOsoxZHxd8AM aM8rnOXqXBbA/iJ2tGNH7/FYRM6sp5TmPnciKMNDuXx9oQV3Z3BMfnnZcyPAMbsI l8aC9gDrnIjCQ4fMsLIY5VJI+R1Up9pEjlsBShhQLiGiGxTuLCuwSVUOGrSOFEKH HnZ9r1PM3EhDPQdw4FOfckAQ88TFlR2NmZfN/vC4EIBclkLgxIYCDz/cnWjboE8k ZNT+rmCGGggAnwDRoYopTMeEvTbW6N0= -----END CERTIFICATE-----Generated at Fri Sep 19 04:14:34 2025 by rpki-client