$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa File: 04d813f9-6b60-3363-87e2-38c3551d29bb.roa (raw, json) Hash identifier: w33cQQLqLCw297XXwyn6GVeD+bNHBkjJR9yYAimjZwA= Subject key identifier: 65:83:C6:2C:C5:D0:70:9D:59:84:53:3A:0C:B3:CA:93:BD:16:C1:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C42F12FF75A0DD588EB40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:42:f1:2f:f7:5a:0d:d5:88:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=785d920f-d7de-452d-9b12-c2938a8d4ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:be:26:c8:c5:29:03:c0:27:98:b9:72:7a: 27:c7:d3:4e:a4:e6:01:84:35:d3:29:b5:06:8b:e4: ee:1b:61:c2:9c:f3:a2:57:95:8f:fd:e3:19:58:7a: c3:78:f2:02:26:5f:db:a5:8e:6a:2a:60:83:dd:ac: 37:ea:a2:42:b3:b4:06:41:6a:94:4b:88:55:78:5b: 35:8e:be:31:7d:80:0a:05:0c:a1:d9:34:ab:5f:82: e2:9c:32:92:31:61:e8:b7:e4:31:71:b3:c5:7b:28: 49:d0:bb:35:21:ba:47:3f:36:89:26:7d:28:b6:77: 3e:fc:b7:1f:ea:60:b7:88:d9:82:7d:34:b3:f4:9b: e3:d7:46:d5:e4:40:a9:58:ed:3b:e0:48:01:15:90: 1c:fd:d5:17:65:b5:ca:50:53:36:e7:50:87:81:47: ab:ff:0a:f5:9d:25:63:f8:10:c7:01:d0:b9:5d:53: f7:05:49:50:12:ba:b8:e7:da:52:ba:2b:54:c1:2c: a7:7c:d3:f4:68:3c:de:13:35:2b:65:52:5d:61:66: 75:61:ef:c4:0e:dd:45:4a:d2:09:74:be:2d:a3:5c: 7c:62:5e:27:7e:d9:dd:4a:d9:76:e5:2f:f6:81:02: 9e:0a:e3:ee:aa:6c:f7:82:50:bb:e5:6d:83:6a:00: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:C6:2C:C5:D0:70:9D:59:84:53:3A:0C:B3:CA:93:BD:16:C1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04d813f9-6b60-3363-87e2-38c3551d29bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a0:42:9a:35:ce:fb:1f:76:3c:42:81:d7:27:69:91:a9:5a: f4:5b:2e:87:91:93:d3:f4:65:ef:ec:14:26:e1:d4:24:f1:67: fd:34:4e:a4:76:1c:34:bf:68:1c:f4:4e:73:7e:f4:92:59:c1: 11:66:22:d8:97:cd:46:ee:d3:60:14:a3:85:72:8e:58:f3:68: 17:ef:e4:0f:43:b6:64:2e:ab:08:9a:66:9e:19:23:2e:67:b8: 10:de:89:6e:36:ac:a3:1c:7d:68:3f:c1:c3:9c:c6:8a:8e:d4: ae:b5:47:76:dc:c2:dd:98:4e:58:d7:19:0d:f9:ee:10:b7:a4: 30:5a:7d:66:71:78:c2:55:73:1b:c0:54:4b:8b:b3:ab:e7:8c: 11:e1:97:90:a8:12:c9:10:7b:fe:11:73:f0:11:01:45:8b:2d: d4:29:58:2c:ba:3c:23:d3:4e:80:fd:92:10:c4:01:35:34:86: 3e:df:7a:64:be:45:f8:d1:f5:df:3b:64:76:e2:67:a1:49:24: 2c:6c:f2:2c:94:15:4c:70:ed:62:74:14:2c:b0:84:60:87:ea: fe:2f:14:df:cb:e5:ca:f8:2f:26:0b:9c:3a:96:4a:2d:45:0c: 67:85:2f:f8:77:b8:f0:78:d8:8c:72:82:33:27:e9:0a:02:38: cf:83:68:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnELxL/daDdWI60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Nzg1ZDkyMGYtZDdkZS00NTJkLTliMTItYzI5MzhhOGQ0Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OC+JsjFKQPAJ5i5cnonx9NOpOYBhDXTKbUG i+TuG2HCnPOiV5WP/eMZWHrDePICJl/bpY5qKmCD3aw36qJCs7QGQWqUS4hVeFs1 jr4xfYAKBQyh2TSrX4LinDKSMWHot+QxcbPFeyhJ0Ls1IbpHPzaJJn0otnc+/Lcf 6mC3iNmCfTSz9Jvj10bV5ECpWO074EgBFZAc/dUXZbXKUFM251CHgUer/wr1nSVj +BDHAdC5XVP3BUlQErq459pSuitUwSynfNP0aDzeEzUrZVJdYWZ1Ye/EDt1FStIJ dL4to1x8Yl4nftndStl25S/2gQKeCuPuqmz3glC75W2DagBXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWDxizF0HCdWYRTOgyzypO9FsF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDRkODEzZjktNmI2MC0z MzYzLTg3ZTItMzhjMzU1MWQyOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIegQpo1zvsfdjxCgdcnaZGpWvRbLoeRk9P0Ze/sFCbh1CTxZ/00TqR2 HDS/aBz0TnN+9JJZwRFmItiXzUbu02AUo4VyjljzaBfv5A9DtmQuqwiaZp4ZIy5n uBDeiW42rKMcfWg/wcOcxoqO1K61R3bcwt2YTljXGQ357hC3pDBafWZxeMJVcxvA VEuLs6vnjBHhl5CoEskQe/4Rc/ARAUWLLdQpWCy6PCPTToD9khDEATU0hj7femS+ RfjR9d87ZHbiZ6FJJCxs8iyUFUxw7WJ0FCywhGCH6v4vFN/L5cr4LyYLnDqWSi1F DGeFL/h3uPB42IxygjMn6QoCOM+DaG4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:16:03 2026 by rpki-client