$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9b824f6-9072-3534-a29f-aba86b574d7e.roa File: e9b824f6-9072-3534-a29f-aba86b574d7e.roa (raw, json) Hash identifier: g8w/IyO5alihVLkd0VgRpxaXzD2KJc87T2YuA8bXAUU= Subject key identifier: 3E:B7:31:DE:EB:53:3E:B3:0A:BF:EA:88:93:DD:CB:CF:33:80:BE:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA786F486335029E52B68A100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9b824f6-9072-3534-a29f-aba86b574d7e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f4:86:33:50:29:e5:2b:68:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5267e5b9-c4e6-4a55-9e7f-1800fc82c9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:96:fd:5d:13:09:f6:2d:ab:13:98:ab:84: ec:6e:6a:33:cc:2e:be:52:18:41:52:89:4f:5c:d1: 31:06:57:c3:0e:5d:97:8d:ec:86:2d:93:af:eb:01: ac:10:ee:20:bd:00:ea:da:2e:de:81:18:9c:04:99: 63:c5:2c:3d:0c:f2:9e:87:7f:4c:3d:d3:36:c9:cb: 26:88:4c:8f:eb:6f:37:4a:a3:4e:b3:49:05:36:75: fc:8c:00:2c:e7:3d:25:cb:7f:ef:6c:c6:b1:5d:a4: 04:f3:cf:1c:1c:a8:6d:43:c4:28:90:a6:a3:4c:85: 7c:36:91:ee:77:4e:a5:b3:12:7f:bd:e9:98:97:24: 34:93:03:59:26:b2:61:ed:81:62:45:ab:6d:40:2c: f3:e0:a1:a0:3d:0c:fd:5a:35:6f:b1:2c:38:30:89: 9e:c0:55:a9:99:89:a7:14:97:43:59:24:d4:1c:71: 79:d2:e7:1a:9a:c7:5e:e5:99:28:55:c8:f5:7c:43: 93:2d:30:9e:6c:97:c4:8f:6f:af:39:d4:35:1c:48: 72:22:1c:af:53:25:7c:52:68:00:16:78:4a:08:a2: 8f:b3:6d:12:15:8f:17:22:b3:2e:da:ab:49:c3:21: b5:57:11:34:90:55:86:d1:3d:1a:90:e2:84:77:62: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:31:DE:EB:53:3E:B3:0A:BF:EA:88:93:DD:CB:CF:33:80:BE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9b824f6-9072-3534-a29f-aba86b574d7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:65:db:0f:2f:b4:09:e1:e4:ba:50:cb:a9:93:b1:f6:76:4c: 23:4c:ce:fd:6e:2d:94:ea:12:bf:34:6e:e6:f3:cb:35:5e:c4: 71:c7:42:31:aa:be:47:4b:e3:93:8f:de:0a:b9:a8:cf:81:9b: 50:3b:ec:c6:a5:c7:68:3c:41:d5:fd:21:89:15:38:80:0b:49: ed:e4:2d:97:70:48:13:e7:8c:cd:bd:d9:43:2f:73:08:97:9b: ea:79:21:f8:d5:66:58:1d:fb:d3:87:a5:07:6c:49:81:d4:a8: de:1a:46:d7:78:b2:06:a9:e3:0a:3f:6d:27:ae:d0:58:84:20: 73:8f:b9:d7:80:5f:22:93:49:80:14:75:90:0d:02:71:5d:86: 27:ba:7c:c2:05:73:f8:22:26:cd:8d:f8:52:6e:9d:b8:40:69: 20:99:c5:4c:73:6a:a4:f7:eb:d9:d0:e0:ed:ee:66:dc:a9:9b: c0:4c:37:70:a5:61:59:62:ee:b4:0e:1a:b7:a0:9f:4d:93:aa: 33:fb:5a:54:3c:5f:1f:09:57:4b:39:8e:ac:b0:9f:b0:30:99: b0:11:a2:4e:e8:db:55:a7:18:7e:54:2c:46:b8:f2:ef:be:5e: 32:0e:5a:6e:a1:d3:a8:a2:e7:ce:5e:7d:e2:43:21:93:e6:7b: ea:1c:d2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvSGM1Ap5StooQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTI2N2U1YjktYzRlNi00YTU1LTllN2YtMTgwMGZjODJjOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthaW/V0TCfYtqxOYq4TsbmozzC6+UhhBUolP XNExBlfDDl2XjeyGLZOv6wGsEO4gvQDq2i7egRicBJljxSw9DPKeh39MPdM2ycsm iEyP6283SqNOs0kFNnX8jAAs5z0ly3/vbMaxXaQE888cHKhtQ8QokKajTIV8NpHu d06lsxJ/vemYlyQ0kwNZJrJh7YFiRattQCzz4KGgPQz9WjVvsSw4MImewFWpmYmn FJdDWSTUHHF50ucamsde5ZkoVcj1fEOTLTCebJfEj2+vOdQ1HEhyIhyvUyV8UmgA FnhKCKKPs20SFY8XIrMu2qtJwyG1VxE0kFWG0T0akOKEd2KC2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD63Md7rUz6zCr/qiJPdy88zgL4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTliODI0ZjYtOTA3Mi0z NTM0LWEyOWYtYWJhODZiNTc0ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZl2w8vtAnh5LpQy6mTsfZ2TCNMzv1uLZTqEr80bubzyzVexHHHQjGq vkdL45OP3gq5qM+Bm1A77Malx2g8QdX9IYkVOIALSe3kLZdwSBPnjM292UMvcwiX m+p5IfjVZlgd+9OHpQdsSYHUqN4aRtd4sgap4wo/bSeu0FiEIHOPudeAXyKTSYAU dZANAnFdhie6fMIFc/giJs2N+FJunbhAaSCZxUxzaqT369nQ4O3uZtypm8BMN3Cl YVli7rQOGregn02TqjP7WlQ8Xx8JV0s5jqywn7AwmbARok7o21WnGH5ULEa48u++ XjIOWm6h06ii585efeJDIZPme+oc0no= -----END CERTIFICATE-----Generated at Fri Aug 7 21:43:52 2026 by rpki-client