$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa File: 0915a78c-e339-34ed-bcdd-c8c141febb0d.roa (raw, json) Hash identifier: +XvmHZIoEm9LRqcHZ6L8LajiEZDpMYt1tdELdR7I/50= Subject key identifier: 17:79:A5:07:04:53:67:85:30:13:7F:05:5C:44:21:35:79:A2:29:1F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EDB9B041B972D4EE7480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ed:b9:b0:41:b9:72:d4:ee:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7864b2be-6eb1-4d6f-a029-14370e239f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:06:9b:e2:dd:47:4d:aa:43:17:73:ed:79: 61:07:89:15:24:c6:9b:34:20:7c:2f:2c:09:82:73: 46:32:e9:cb:f1:ca:0c:0b:6b:41:6d:93:06:d1:a1: 93:3f:95:c2:72:57:2c:24:c2:3e:cc:5f:0f:fe:41: a2:82:a3:f7:7e:0d:ef:c1:08:3c:d1:87:78:49:5b: 0e:eb:2b:e9:66:a3:51:47:9f:c2:82:3b:1d:d6:c6: dd:e8:43:7c:0a:c2:5a:96:a4:c1:d2:61:3e:21:6d: 5c:8a:81:5a:1b:33:ed:c8:cd:58:81:1f:b3:ed:38: 07:c7:0d:6f:f4:5b:9f:55:d1:6e:bb:19:90:a2:34: 08:87:e4:da:aa:cd:8a:f3:d5:45:1e:1b:28:f1:65: b2:83:74:3f:02:32:ca:dc:7a:73:09:00:7d:88:7b: 41:4b:3f:2d:0c:fa:32:e2:71:92:8e:6f:79:e2:28: f8:9b:17:9b:2f:30:05:18:04:d4:ab:f8:61:03:a7: 53:81:da:3f:9e:bf:d5:a4:7e:be:ed:90:c7:96:85: 06:41:72:27:45:cf:55:88:40:3f:d0:27:13:4e:c8: b3:9e:55:1c:53:5e:50:c5:51:74:ab:79:2c:43:45: d8:2f:e8:2f:23:24:db:45:39:6e:19:88:0e:d1:96: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:A5:07:04:53:67:85:30:13:7F:05:5C:44:21:35:79:A2:29:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:06:c8:bc:b6:1c:15:5b:f5:b9:e3:12:f1:e7:9d:1e:d8:aa: 4e:7f:2f:a6:b8:35:a8:9b:62:1b:36:91:45:e4:24:1f:69:1e: 33:19:01:21:2f:3a:e1:a3:a3:f6:06:a3:91:5a:02:09:c0:fc: 3c:b4:ff:b8:4c:81:92:7a:13:5c:c6:99:83:bb:e8:c1:5c:53: 5e:b4:e6:e2:73:f9:1c:59:3a:79:5e:51:51:d7:51:5a:c0:00: aa:12:22:78:eb:d5:de:26:a4:ec:ef:cb:a2:8a:d2:ef:d0:98: 29:58:71:69:8d:a1:7d:57:7b:de:6f:19:24:7b:a8:86:dc:6f: 43:2e:b7:37:8a:5d:3a:78:eb:9f:61:fc:3a:20:00:66:c5:bd: 30:f5:29:dd:ab:db:7b:86:25:5a:c8:46:7d:f9:ac:c9:92:f5: 6a:c5:49:d0:c1:85:0a:7c:75:8a:78:44:e1:a4:0c:ae:ae:cb: 19:72:ab:93:50:0b:f4:3a:fe:3b:d5:54:56:57:63:82:54:a9: 19:10:7d:82:d6:f9:7e:4e:e3:81:df:6f:c8:e4:27:2e:f6:bd: 56:58:23:cb:bb:b6:5c:2c:4a:02:fb:99:2c:49:b1:f7:c3:6b: 09:71:99:3d:4e:2f:0a:7a:66:d7:94:f1:68:63:10:81:52:86: 89:19:70:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iku25sEG5ctTudIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Nzg2NGIyYmUtNmViMS00ZDZmLWEwMjktMTQzNzBlMjM5ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMAGm+LdR02qQxdz7XlhB4kVJMabNCB8LywJ gnNGMunL8coMC2tBbZMG0aGTP5XCclcsJMI+zF8P/kGigqP3fg3vwQg80Yd4SVsO 6yvpZqNRR5/Cgjsd1sbd6EN8CsJalqTB0mE+IW1cioFaGzPtyM1YgR+z7TgHxw1v 9FufVdFuuxmQojQIh+Taqs2K89VFHhso8WWyg3Q/AjLK3HpzCQB9iHtBSz8tDPoy 4nGSjm954ij4mxebLzAFGATUq/hhA6dTgdo/nr/VpH6+7ZDHloUGQXInRc9ViEA/ 0CcTTsiznlUcU15QxVF0q3ksQ0XYL+gvIyTbRTluGYgO0ZayQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd5pQcEU2eFMBN/BVxEITV5oikfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDkxNWE3OGMtZTMzOS0z NGVkLWJjZGQtYzhjMTQxZmViYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYGyLy2HBVb9bnjEvHnnR7Yqk5/L6a4NaibYhs2kUXkJB9pHjMZASEv OuGjo/YGo5FaAgnA/Dy0/7hMgZJ6E1zGmYO76MFcU1605uJz+RxZOnleUVHXUVrA AKoSInjr1d4mpOzvy6KK0u/QmClYcWmNoX1Xe95vGSR7qIbcb0MutzeKXTp4659h /DogAGbFvTD1Kd2r23uGJVrIRn35rMmS9WrFSdDBhQp8dYp4ROGkDK6uyxlyq5NQ C/Q6/jvVVFZXY4JUqRkQfYLW+X5O44Hfb8jkJy72vVZYI8u7tlwsSgL7mSxJsffD awlxmT1OLwp6ZteU8WhjEIFShokZcKk= -----END CERTIFICATE-----Generated at Thu Nov 5 17:30:22 2026 by rpki-client