$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa File: 12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa (raw, json) Hash identifier: 1a80Re+CdKOvFjNBGOQSBdBjbipxTwYUpc4YScbPX1k= Subject key identifier: 81:55:29:15:B9:E3:7B:DF:50:BD:D1:FA:46:2B:80:B4:A6:2E:E4:FB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F225D2139306639FCD704D400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:21:39:30:66:39:fc:d7:04:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=f40a6ef5-a9b0-4277-8c29-c9cd48e73909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:3d:3a:34:34:98:e6:fb:36:21:cb:86:15: 7f:2b:88:b8:fc:e7:66:f5:11:48:63:1b:39:a5:a5: 46:c1:74:9b:7e:73:1f:12:b2:2b:5a:b5:b2:f7:38: 58:b6:61:2e:b2:ea:50:dc:61:ee:76:5a:6f:b0:3c: a1:90:6c:6f:d5:11:53:8a:c6:21:d2:1b:d8:c3:f3: ee:b5:34:8c:40:e3:51:c0:c5:b7:e8:74:20:15:6d: 32:3b:0a:1f:02:c3:93:f7:36:36:4c:98:d5:7b:aa: 9e:31:e3:d8:59:da:b1:f2:69:27:cb:46:e6:89:ea: 80:e4:32:b0:1f:d4:a9:c3:e0:04:c7:69:e9:36:96: 9c:53:bf:87:42:58:4e:0a:43:e9:31:db:88:30:21: 6f:e0:fe:d4:08:d3:e5:8d:c7:82:bd:fe:17:90:22: 45:51:65:54:0e:6b:7c:a4:17:fa:a2:4f:bc:15:b0: 45:b1:81:6d:ee:aa:b7:2a:c6:08:26:b1:a8:82:6d: d2:01:5c:2b:cd:bd:79:3b:7d:3a:8b:c3:f0:6f:6a: 03:a6:2c:e7:e6:fb:4d:51:89:47:f2:2f:28:1e:ac: 87:ed:0c:9a:95:53:7b:2e:06:fc:0f:32:25:b5:da: 05:2a:cb:86:8d:2f:48:c7:84:b1:a6:6e:94:ed:be: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:55:29:15:B9:E3:7B:DF:50:BD:D1:FA:46:2B:80:B4:A6:2E:E4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:97:ad:d8:24:ee:29:29:86:b8:c6:a8:ed:c3:3a:7a:cc:49: b8:1f:ae:7d:57:d3:65:83:9a:c3:4e:95:d6:5d:07:b9:35:01: 25:25:35:ca:6a:7f:46:9c:8a:85:35:eb:92:9e:92:7b:e0:73: f1:32:20:a0:37:e7:50:f0:d6:e5:d9:8f:27:42:f7:49:25:8b: 58:7b:8e:34:25:96:c1:66:2d:48:9e:fc:ce:b3:51:7e:fb:9d: 91:64:99:1a:f6:da:ba:b3:ee:67:d1:7c:ba:90:70:7e:ee:f2: 94:40:22:66:cc:3a:26:30:d4:6e:65:43:68:63:a6:a4:15:78: c9:db:c2:46:4d:37:98:ec:42:56:70:a6:f3:df:43:fb:f6:57: 4a:0d:2d:9b:d4:c3:6f:c4:de:bc:e9:86:83:2f:c5:20:b7:97: c8:64:47:0d:cf:71:a8:87:7e:ca:84:dd:1f:c2:6a:21:4b:4d: 34:e0:16:aa:33:67:dd:1f:eb:64:14:80:9c:e2:85:3f:74:b1: 37:bb:54:3f:ba:e3:b3:cd:36:75:a5:0f:6b:25:51:0a:98:10: 86:ec:f8:f5:dc:03:9b:45:29:d7:39:4a:5e:1b:ec:3a:3a:db: 00:46:13:67:63:52:08:39:df:33:71:ef:19:9a:37:bb:6d:c0: 4b:43:e1:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSE5MGY5/NcE1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQwYTZlZjUtYTliMC00Mjc3LThjMjktYzljZDQ4ZTczOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisw9OjQ0mOb7NiHLhhV/K4i4/Odm9RFIYxs5 paVGwXSbfnMfErIrWrWy9zhYtmEusupQ3GHudlpvsDyhkGxv1RFTisYh0hvYw/Pu tTSMQONRwMW36HQgFW0yOwofAsOT9zY2TJjVe6qeMePYWdqx8mkny0bmieqA5DKw H9Spw+AEx2npNpacU7+HQlhOCkPpMduIMCFv4P7UCNPljceCvf4XkCJFUWVUDmt8 pBf6ok+8FbBFsYFt7qq3KsYIJrGogm3SAVwrzb15O306i8Pwb2oDpizn5vtNUYlH 8i8oHqyH7QyalVN7Lgb8DzIltdoFKsuGjS9Ix4Sxpm6U7b72RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFVKRW543vfUL3R+kYrgLSmLuT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTJkNjQwMGMtNGVmMC0z ZTk2LThlYWEtNzFmNTBmMjY2YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKXrdgk7ikphrjGqO3DOnrMSbgfrn1X02WDmsNOldZdB7k1ASUlNcpq f0acioU165Keknvgc/EyIKA351Dw1uXZjydC90kli1h7jjQllsFmLUie/M6zUX77 nZFkmRr22rqz7mfRfLqQcH7u8pRAImbMOiYw1G5lQ2hjpqQVeMnbwkZNN5jsQlZw pvPfQ/v2V0oNLZvUw2/E3rzphoMvxSC3l8hkRw3PcaiHfsqE3R/CaiFLTTTgFqoz Z90f62QUgJzihT90sTe7VD+647PNNnWlD2slUQqYEIbs+PXcA5tFKdc5Sl4b7Do6 2wBGE2djUgg53zNx7xmaN7ttwEtD4TY= -----END CERTIFICATE-----Generated at Mon Sep 21 19:46:26 2026 by rpki-client