$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: 2HxK/48LeSfBbWqZ6dZmIH7l2145xp/OCYJoJFCOzj8= Subject key identifier: A8:DE:27:EE:DA:BC:EA:0F:67:1E:78:04:9E:9C:E7:D8:F8:3E:8D:32 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A0472B9050A7A14C695400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:47:2b:90:50:a7:a1:4c:69:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7634d334-b8de-412e-a880-5a1db36ea9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:7f:96:10:4b:6c:e3:cb:ed:37:1c:b7:86: ac:ec:17:7c:8c:37:37:ef:b5:f1:bb:0d:3a:49:ca: 9b:4b:5f:e8:e5:66:43:ad:d1:a9:48:dc:88:c4:5d: 75:3f:77:19:ec:b9:77:02:91:1e:23:15:bb:99:fb: ef:b7:cd:23:55:d3:1d:61:43:6d:f4:51:68:ac:65: d0:9d:84:cc:df:50:bf:8e:f0:78:3b:32:c6:49:d8: 69:94:94:f6:e1:26:6b:52:ab:7d:ad:c2:02:cb:67: 8e:67:3c:57:2e:94:41:d5:9b:c4:59:83:7e:5d:8b: ea:6b:3e:c6:17:5f:db:19:64:f1:5f:2e:1b:78:33: 84:a5:a5:ed:5e:d8:53:78:2c:f0:41:36:5e:e9:ac: 33:60:3b:bf:03:cf:f0:aa:ec:ee:4a:8a:27:ca:c9: 9e:38:06:83:ae:03:15:e0:51:ea:80:d1:77:60:d4: 3e:3b:a8:1f:03:cc:ec:31:56:f6:89:8c:ab:90:76: f1:6d:65:66:c2:0e:59:59:ee:1c:3c:b7:73:c8:f5: 45:0c:cf:02:cc:c0:e8:12:97:8a:44:e9:37:7a:14: 74:53:47:8e:73:f8:46:38:a1:de:17:a6:64:3b:9a: ac:08:f3:71:cc:23:f2:08:94:e8:89:dc:ec:0c:70: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:27:EE:DA:BC:EA:0F:67:1E:78:04:9E:9C:E7:D8:F8:3E:8D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:80:ac:9f:ce:b7:a3:a1:6a:90:8e:90:28:65:64:c0:b1:4f: 08:08:f7:7a:b8:1c:01:6a:0c:75:69:ae:1f:74:a8:39:53:a2: bc:4f:72:04:95:7c:b6:05:5c:5b:35:6d:ee:e5:97:ca:8b:41: 79:1f:18:d6:6f:9e:e9:f4:39:16:a4:76:97:6a:ea:92:b7:f6: 96:4e:9a:4f:45:97:c9:27:ee:12:0d:1d:32:55:6a:a9:84:77: c1:aa:98:b3:e7:a0:72:8f:ae:fd:cf:73:35:cf:78:ed:7c:79: eb:96:28:42:74:15:5b:3c:a5:95:f9:a2:b4:85:c5:0c:8c:34: 2b:5d:5a:fc:01:c1:34:92:47:79:3c:d3:f6:39:a3:2b:68:08: 66:6b:3a:5a:74:ce:c2:8b:46:8e:7a:99:c3:d5:99:f0:e6:4a: 0a:63:cb:56:54:f1:9b:a0:50:41:6b:fa:8b:ca:a0:9e:fd:0e: aa:71:19:53:ee:36:6d:84:bf:b0:f2:be:f7:7a:d2:03:b2:61: d3:d9:d2:69:38:7f:f1:c2:d1:27:65:81:9d:6a:7c:31:0f:9d: bc:63:78:40:f6:02:55:74:d1:14:80:d1:de:41:fa:db:31:7c: f6:ba:7f:5f:bc:0e:67:17:da:22:18:e9:12:23:d2:4c:33:e7: d7:62:97:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noEcrkFCnoUxpVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzYzNGQzMzQtYjhkZS00MTJlLWE4ODAtNWExZGIzNmVhOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhZ/lhBLbOPL7Tcct4as7Bd8jDc377Xxuw06 ScqbS1/o5WZDrdGpSNyIxF11P3cZ7Ll3ApEeIxW7mfvvt80jVdMdYUNt9FForGXQ nYTM31C/jvB4OzLGSdhplJT24SZrUqt9rcICy2eOZzxXLpRB1ZvEWYN+XYvqaz7G F1/bGWTxXy4beDOEpaXtXthTeCzwQTZe6awzYDu/A8/wquzuSoonysmeOAaDrgMV 4FHqgNF3YNQ+O6gfA8zsMVb2iYyrkHbxbWVmwg5ZWe4cPLdzyPVFDM8CzMDoEpeK ROk3ehR0U0eOc/hGOKHeF6ZkO5qsCPNxzCPyCJToidzsDHBA7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjeJ+7avOoPZx54BJ6c59j4Po0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyArJ/Ot6OhapCOkChlZMCxTwgI93q4HAFqDHVprh90qDlTorxPcgSV fLYFXFs1be7ll8qLQXkfGNZvnun0ORakdpdq6pK39pZOmk9Fl8kn7hINHTJVaqmE d8GqmLPnoHKPrv3PczXPeO18eeuWKEJ0FVs8pZX5orSFxQyMNCtdWvwBwTSSR3k8 0/Y5oytoCGZrOlp0zsKLRo56mcPVmfDmSgpjy1ZU8ZugUEFr+ovKoJ79DqpxGVPu Nm2Ev7Dyvvd60gOyYdPZ0mk4f/HC0SdlgZ1qfDEPnbxjeED2AlV00RSA0d5B+tsx fPa6f1+8DmcX2iIY6RIj0kwz59dil8o= -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:19 2026 by rpki-client