$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa File: 12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa (raw, json) Hash identifier: stGf6a2B7Dtk5LbZ5d5dz0anpX7AQgYhO9CoDr4UQVw= Subject key identifier: 44:C4:7E:F7:4D:82:2B:89:A6:DE:CF:53:02:9C:13:CF:FF:5B:88:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CBF1752C04EFD6832B57BEE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:52:c0:4e:fd:68:32:b5:7b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=c1efdb1e-54f4-4545-9f8f-cf66f47acfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:8e:f6:8e:c7:a8:54:ed:63:82:a4:b5:3d: e7:91:9c:18:9e:6f:30:c5:7c:b6:76:12:12:1c:6c: f3:0a:5f:2e:c2:e7:85:30:07:2b:b5:88:0c:e9:27: 62:37:1d:6e:95:19:2c:be:75:d1:08:8f:62:44:c9: 44:2c:d9:ed:4d:61:d1:21:36:3a:e1:c1:f8:49:b8: b1:b7:19:39:fd:e9:c7:e2:79:f1:17:5c:d3:31:f1: 8f:de:8c:9b:a8:b4:3f:7e:e5:94:6b:42:b1:43:b7: 66:83:b4:8c:6f:8c:24:43:b1:d0:a2:6e:ae:0d:f7: a2:95:03:be:58:fc:25:1d:5c:25:b2:fd:d4:a2:59: e4:1e:6a:f8:b8:a4:ae:48:d8:7f:e2:b7:86:67:be: 42:0a:57:55:07:22:5c:ef:d8:93:8c:01:fc:ba:f0: 19:c8:59:fe:1c:59:ef:a0:a0:2d:cd:a0:80:78:8f: d2:36:70:6a:68:7d:7d:2f:94:bf:42:c5:a0:5f:7e: bf:ee:33:97:4e:56:74:a4:c1:e9:d4:5d:59:75:68: f5:f9:63:7f:91:00:6f:34:b5:e4:dd:9b:cf:c0:39: 9e:28:60:dc:4f:49:17:7f:cd:2d:28:1d:5f:9b:0a: f2:d2:18:f0:fe:09:5f:11:69:0e:d3:29:97:d9:bf: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:7E:F7:4D:82:2B:89:A6:DE:CF:53:02:9C:13:CF:FF:5B:88:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/12d6400c-4ef0-3e96-8eaa-71f50f266a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e3:32:68:3c:8a:2c:b9:55:aa:f2:f2:ab:16:3c:de:d1:27: 47:a3:40:98:b1:6e:42:65:a2:1f:60:d4:1e:8a:d8:22:b9:f0: df:47:a0:5d:31:f2:0d:a9:b3:b3:24:4d:07:ee:e3:1d:be:90: 85:a3:15:8e:e5:05:da:bf:39:a7:8c:b1:4c:29:5e:4b:d5:a0: 35:22:22:76:78:68:ca:ea:09:0b:85:0f:aa:5a:88:53:7e:47: 21:ea:0c:74:24:f5:12:d9:11:84:ef:68:52:5a:e9:a3:f2:6d: 3b:3f:8b:97:25:30:30:73:b2:89:ad:12:1c:4e:cb:7e:1b:a3: 42:c1:0c:7f:60:3f:a4:bf:57:8f:26:f8:6e:10:78:07:70:83: 50:a0:5d:c2:c5:d1:d5:a5:9c:92:19:a5:48:1a:9f:ce:63:a3: d2:ee:29:0a:12:05:a9:fb:b0:5c:fe:3e:cd:ce:f4:41:c3:37: 09:6a:2f:7c:78:e5:2e:dc:47:68:c6:29:13:51:4a:fb:51:ec: da:2a:95:14:31:01:5e:b9:45:c9:3e:23:a3:ed:7f:25:67:05: e3:61:9f:02:ad:61:1d:77:45:71:dc:b0:ad:0c:f5:75:0f:8f: bf:6c:e6:63:24:18:16:d6:a0:38:ef:3d:7d:42:58:33:f5:e4: be:41:ae:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1LATv1oMrV77gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk YzFlZmRiMWUtNTRmNC00NTQ1LTlmOGYtY2Y2NmY0N2FjZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V6O9o7HqFTtY4KktT3nkZwYnm8wxXy2dhIS HGzzCl8uwueFMAcrtYgM6SdiNx1ulRksvnXRCI9iRMlELNntTWHRITY64cH4Sbix txk5/enH4nnxF1zTMfGP3oybqLQ/fuWUa0KxQ7dmg7SMb4wkQ7HQom6uDfeilQO+ WPwlHVwlsv3UolnkHmr4uKSuSNh/4reGZ75CCldVByJc79iTjAH8uvAZyFn+HFnv oKAtzaCAeI/SNnBqaH19L5S/QsWgX36/7jOXTlZ0pMHp1F1ZdWj1+WN/kQBvNLXk 3ZvPwDmeKGDcT0kXf80tKB1fmwry0hjw/glfEWkO0ymX2b+UpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETEfvdNgiuJpt7PUwKcE8//W4hzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTJkNjQwMGMtNGVmMC0z ZTk2LThlYWEtNzFmNTBmMjY2YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbjMmg8iiy5Vary8qsWPN7RJ0ejQJixbkJloh9g1B6K2CK58N9HoF0x 8g2ps7MkTQfu4x2+kIWjFY7lBdq/OaeMsUwpXkvVoDUiInZ4aMrqCQuFD6paiFN+ RyHqDHQk9RLZEYTvaFJa6aPybTs/i5clMDBzsomtEhxOy34bo0LBDH9gP6S/V48m +G4QeAdwg1CgXcLF0dWlnJIZpUgan85jo9LuKQoSBan7sFz+Ps3O9EHDNwlqL3x4 5S7cR2jGKRNRSvtR7NoqlRQxAV65Rck+I6PtfyVnBeNhnwKtYR13RXHcsK0M9XUP j79s5mMkGBbWoDjvPX1CWDP15L5BrgA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:07 2026 by rpki-client