$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa File: 0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa (raw, json) Hash identifier: /Q1P4KoWzcRnIYurrgUAN0eBoilAF8B5taWPOmDTcHA= Subject key identifier: C6:EE:0D:CB:C5:A3:FF:EB:F4:92:04:6C:79:6D:E0:97:43:11:35:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC0BFBE9FAEBA8C847D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c0:bf:be:9f:ae:ba:8c:84:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=fd9019b0-30e1-4d3c-b4a7-4cb0aa14c6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:06:75:2e:d0:47:24:de:17:bb:f9:1a:90: 37:88:25:08:96:e3:ae:ef:ef:d7:f0:17:41:2b:08: 11:c0:f6:ca:9c:47:2b:7e:16:66:66:9c:17:a0:15: 07:97:47:1b:c4:8b:2f:1e:34:36:40:46:71:2a:df: a2:f4:6e:e7:9b:46:2d:39:f4:2d:d6:e2:91:5a:a9: e2:52:e9:f0:de:75:ae:fe:c9:28:cc:26:17:61:7c: 0e:9c:90:3d:b3:e3:f4:1f:75:01:db:76:de:9f:41: 6a:53:18:dc:0d:7f:d7:ad:eb:e8:48:65:7b:9e:89: 25:ca:44:96:ad:3d:74:99:f0:7a:20:70:45:b9:09: 95:cf:fc:93:a1:06:e1:06:18:a5:22:31:35:4f:e8: 61:a7:f7:6c:55:77:82:13:ac:1d:cc:a9:b4:ad:ee: f0:6f:a2:b6:4e:a9:14:99:cf:f8:68:69:03:f8:77: a2:06:a7:9f:85:69:35:82:99:64:72:4f:bb:07:2c: 88:c1:f5:2c:d3:65:ba:fc:12:a1:60:25:24:f2:c0: 3f:ed:16:e9:d6:93:7d:93:ae:1a:7c:2c:55:b7:2b: f2:b6:a7:da:c9:a8:89:04:97:7d:a7:2c:83:b9:f8: 18:e5:34:83:a4:72:65:8f:f8:f4:a7:52:29:f2:f1: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EE:0D:CB:C5:A3:FF:EB:F4:92:04:6C:79:6D:E0:97:43:11:35:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0221484b-f0f2-3ca4-bce5-7e5a65aa425a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ea:c4:cb:41:34:c2:ca:8a:78:31:96:58:f0:da:65:00:10: c3:48:55:db:7f:ae:d5:7c:6f:fc:35:53:8b:d7:18:ed:7f:d7: bb:28:d6:fa:43:95:4a:27:6f:a2:50:d6:16:d7:db:89:ec:76: 91:99:08:9c:15:db:79:c3:0a:70:da:09:bd:7f:e7:f5:6b:4f: fa:9f:ac:7d:72:07:49:d2:a8:d7:5e:94:76:5d:8d:c2:d4:72: 7e:d3:1c:14:fb:91:55:6f:88:99:0b:95:86:f0:0d:2c:74:67: 1a:ae:b7:2b:8b:a8:a2:e4:86:d7:88:59:42:6e:0a:a7:5e:bc: e8:35:ff:4c:13:16:8d:e5:dc:2f:3d:7e:b7:93:4f:87:9b:1c: 78:88:02:29:fb:9b:9c:6e:8f:77:c6:be:bc:16:d3:b8:ea:3a: af:3b:7e:42:1f:ca:72:de:45:6a:99:fd:ec:17:89:87:b6:81: f7:cb:5b:74:b4:dd:53:22:86:15:47:99:af:bb:af:7f:b4:bd: c9:0e:63:ff:91:38:0e:06:f4:35:68:6b:32:63:10:ff:f4:71: c1:56:85:73:52:49:bc:dc:ad:de:c4:ee:72:e7:a7:f0:b6:c4: 3c:2f:8c:0f:bf:b4:d7:1c:2a:8c:df:30:85:fe:41:0d:f0:42: ae:9f:a7:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8C/vp+uuoyEfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZmQ5MDE5YjAtMzBlMS00ZDNjLWI0YTctNGNiMGFhMTRjNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogAGdS7QRyTeF7v5GpA3iCUIluOu7+/X8BdB KwgRwPbKnEcrfhZmZpwXoBUHl0cbxIsvHjQ2QEZxKt+i9G7nm0YtOfQt1uKRWqni Uunw3nWu/skozCYXYXwOnJA9s+P0H3UB23ben0FqUxjcDX/XrevoSGV7noklykSW rT10mfB6IHBFuQmVz/yToQbhBhilIjE1T+hhp/dsVXeCE6wdzKm0re7wb6K2TqkU mc/4aGkD+HeiBqefhWk1gplkck+7ByyIwfUs02W6/BKhYCUk8sA/7Rbp1pN9k64a fCxVtyvytqfayaiJBJd9pyyDufgY5TSDpHJlj/j0p1Ip8vHlbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbuDcvFo//r9JIEbHlt4JdDETUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIyMTQ4NGItZjBmMi0z Y2E0LWJjZTUtN2U1YTY1YWE0MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbqxMtBNMLKingxlljw2mUAEMNIVdt/rtV8b/w1U4vXGO1/17so1vpD lUonb6JQ1hbX24nsdpGZCJwV23nDCnDaCb1/5/VrT/qfrH1yB0nSqNdelHZdjcLU cn7THBT7kVVviJkLlYbwDSx0ZxqutyuLqKLkhteIWUJuCqdevOg1/0wTFo3l3C89 freTT4ebHHiIAin7m5xuj3fGvrwW07jqOq87fkIfynLeRWqZ/ewXiYe2gffLW3S0 3VMihhVHma+7r3+0vckOY/+ROA4G9DVoazJjEP/0ccFWhXNSSbzcrd7E7nLnp/C2 xDwvjA+/tNccKozfMIX+QQ3wQq6fp8M= -----END CERTIFICATE-----Generated at Sat Jun 13 13:31:33 2026 by rpki-client