$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17ce5323-19be-3099-8a3b-f5ed8166b02f.roa File: 17ce5323-19be-3099-8a3b-f5ed8166b02f.roa (raw, json) Hash identifier: SAiPC1qS4k9VknyWamulLLeos85SDLYEv38Q80pLemA= Subject key identifier: 3B:D5:50:8A:71:30:D8:C9:A8:49:0D:15:AC:3E:8B:DD:75:EC:43:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584BA7CD1AAF22FF7055DCA53480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17ce5323-19be-3099-8a3b-f5ed8166b02f.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 15169 IP address blocks: 172.253.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1a:af:22:ff:70:55:dc:a5:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=378adf40-7d06-4edd-b362-a6c6fb9f4b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:57:76:3b:c9:99:9b:77:9f:34:60:4d:0f: 0c:14:24:b5:c5:cc:b9:ea:09:9d:53:54:aa:27:bb: d1:f3:cc:67:9f:e8:13:b9:62:ed:a0:ff:fa:c3:51: de:90:99:3a:7d:c6:76:d7:23:aa:0f:12:c1:de:d2: 63:0b:55:67:fb:24:74:2f:da:dd:a3:de:f5:7d:7a: 47:2a:0f:03:a3:89:fb:cb:10:c2:31:02:09:2c:ac: 8c:4c:01:bc:03:78:d2:c2:c8:62:d0:c0:9e:50:03: 7e:f8:e3:e9:e8:1f:1d:6f:53:4a:3d:2b:ab:cb:03: 31:95:63:38:9a:60:60:f2:c9:ba:8c:7e:eb:96:76: 15:ca:db:0f:16:11:53:6c:fe:6a:67:54:91:62:c3: c1:5c:12:f8:4f:cb:f5:ac:e4:90:25:93:9a:28:ab: 87:f9:35:a4:9c:c1:b4:e3:2d:95:e0:c3:72:a6:75: 69:37:c0:67:60:c9:31:ad:72:bf:3b:a8:6f:26:08: fd:4a:fa:89:88:f6:d8:9f:22:8c:17:ea:fb:9b:b0: 6a:b1:bf:13:c3:35:84:3a:1c:c1:cb:10:16:d0:8b: 46:c6:8c:0e:2d:af:df:3d:eb:5e:13:db:b4:f5:59: a7:31:5c:94:ad:27:b5:74:e2:58:b6:d7:73:02:fb: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D5:50:8A:71:30:D8:C9:A8:49:0D:15:AC:3E:8B:DD:75:EC:43:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17ce5323-19be-3099-8a3b-f5ed8166b02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:56:58:1a:1c:69:d5:bd:2b:db:2f:03:98:21:f2:c1:5e:3c: 2f:92:5f:73:6a:9d:7a:83:42:8f:9b:28:7d:a2:26:d7:b6:8d: 9a:f2:34:54:1a:7c:d4:6b:d4:a3:6f:c8:48:57:80:10:0c:1c: f5:56:01:f0:74:b2:af:a0:2b:63:0d:2d:a2:18:4a:00:24:08: 9e:29:62:97:2d:e6:a7:2b:00:c9:88:3f:e6:32:a4:8c:92:09: 6f:3f:47:c0:e9:5b:ef:e9:1c:53:c1:04:33:fe:9c:1f:5c:6b: b9:5f:a9:14:f8:a4:1f:3b:d4:30:d0:a8:34:31:05:47:a2:4c: d9:eb:83:9d:af:02:23:a0:9e:e6:26:cf:d2:db:c8:54:1b:86: 27:76:e1:64:c8:cd:89:0a:93:4b:8f:36:78:ce:db:14:e1:10: cf:af:b9:af:2c:b6:7f:d8:bf:28:ef:6b:83:51:24:08:c4:57: 56:c4:de:12:2e:a5:e7:15:4b:ec:20:e7:b3:5d:84:8d:74:e2: ee:c5:e2:a8:aa:d6:55:a1:82:51:24:90:6f:b0:51:38:fe:16: 58:a3:ae:f5:02:80:eb:fc:72:20:30:23:d9:e0:d8:62:74:5d: 3f:17:91:a6:67:3f:d6:71:14:cf:48:79:81:5c:02:ef:35:0c: e1:d9:cf:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRqvIv9wVdylNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Mzc4YWRmNDAtN2QwNi00ZWRkLWIzNjItYTZjNmZiOWY0YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1chXdjvJmZt3nzRgTQ8MFCS1xcy56gmdU1Sq J7vR88xnn+gTuWLtoP/6w1HekJk6fcZ21yOqDxLB3tJjC1Vn+yR0L9rdo971fXpH Kg8Do4n7yxDCMQIJLKyMTAG8A3jSwshi0MCeUAN++OPp6B8db1NKPSurywMxlWM4 mmBg8sm6jH7rlnYVytsPFhFTbP5qZ1SRYsPBXBL4T8v1rOSQJZOaKKuH+TWknMG0 4y2V4MNypnVpN8BnYMkxrXK/O6hvJgj9SvqJiPbYnyKMF+r7m7Bqsb8TwzWEOhzB yxAW0ItGxowOLa/fPeteE9u09VmnMVyUrSe1dOJYttdzAvtcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvVUIpxMNjJqEkNFaw+i9117EPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZTUzMjMtMTliZS0z MDk5LThhM2ItZjVlZDgxNjZiMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5WWBocadW9K9svA5gh8sFePC+SX3NqnXqDQo+bKH2iJte2jZryNFQa fNRr1KNvyEhXgBAMHPVWAfB0sq+gK2MNLaIYSgAkCJ4pYpct5qcrAMmIP+YypIyS CW8/R8DpW+/pHFPBBDP+nB9ca7lfqRT4pB871DDQqDQxBUeiTNnrg52vAiOgnuYm z9LbyFQbhid24WTIzYkKk0uPNnjO2xThEM+vua8stn/Yvyjva4NRJAjEV1bE3hIu pecVS+wg57NdhI104u7F4qiq1lWhglEkkG+wUTj+FlijrvUCgOv8ciAwI9ng2GJ0 XT8XkaZnP9ZxFM9IeYFcAu81DOHZz5g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:22 2025 by rpki-client