$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa File: 1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa (raw, json) Hash identifier: Iu+Q6IcqCcUFt1CG0W5XQr+enVKjQUDGfpPBu3yvmXE= Subject key identifier: FE:51:6A:6C:46:4B:FA:02:97:5B:10:8D:2D:25:8B:55:42:B1:A2:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7919A9CDDFA730DF0DFD420 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:9a:9c:dd:fa:73:0d:f0:df:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=19f61344-595a-47c6-8cbc-18a883eea899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:13:6f:1a:89:56:94:fc:45:49:7d:3c:78: eb:17:2d:b9:cc:8a:18:06:76:e3:90:3b:7f:74:ba: d8:29:a7:0a:a1:b4:58:f8:e5:47:34:dc:68:51:76: aa:f2:76:d9:81:f7:d2:5c:c3:f2:46:7c:b5:f2:fa: ff:7d:04:f3:6e:96:e1:42:68:85:b2:7f:69:be:63: 33:e9:7c:1e:43:6e:1a:85:c0:7b:a2:46:c0:24:28: 67:85:7e:27:4b:9b:d2:ba:e5:af:82:30:06:ca:a9: 8e:77:56:b0:55:88:10:e4:c8:01:f0:ee:97:5c:07: d0:ae:ed:cb:1a:1c:35:01:7d:54:4c:0d:c3:38:12: 4f:36:a9:e2:b5:c9:85:b9:47:5a:af:82:74:b1:96: a2:6f:07:47:eb:6b:0a:98:91:82:12:9e:a1:af:a2: 5f:e4:f3:a1:50:df:35:8b:fb:75:cc:03:23:de:31: 47:e7:ee:4a:cb:4d:9f:07:7c:b2:7a:37:f8:d1:6f: 9a:ab:d5:85:20:2d:96:1c:5a:a6:05:ce:4b:be:a3: 50:8b:9e:c2:ee:cf:8c:22:56:53:ab:61:5c:c3:da: 67:72:3e:77:10:57:2c:a4:1c:ac:9a:d2:d8:78:4b: cb:68:4d:b7:9d:5c:9c:33:2c:db:16:19:7a:28:a3: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:51:6A:6C:46:4B:FA:02:97:5B:10:8D:2D:25:8B:55:42:B1:A2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:98:3e:03:ba:a1:45:70:c9:71:f3:00:46:81:2f:8c:43:25: 84:41:1f:58:25:92:19:df:c3:59:b5:f9:9d:48:08:b3:6a:d0: b5:54:b5:7f:d6:eb:ea:fb:b7:c0:60:64:f9:34:94:37:af:a9: 4d:14:18:ea:b0:ee:ac:07:5e:61:ab:29:80:5d:96:60:95:d7: 83:89:12:ad:b5:ea:03:0b:d3:2d:c6:7a:dd:ce:a4:68:e8:25: c2:bd:ce:e3:85:6a:ae:1f:f6:85:da:12:b0:d3:98:d1:a9:67: 33:d2:fe:00:03:8d:90:0c:5f:74:de:1a:8a:3b:2e:28:16:d4: 72:75:57:7d:47:d5:a4:75:08:d5:e8:24:a4:6c:5d:73:02:e0: 6d:63:e2:67:d5:94:92:d9:8b:00:af:09:8b:94:2a:11:a6:c4: 81:35:5e:5e:f5:95:08:a3:49:1f:06:8c:d0:c0:0d:c2:0d:a5: c6:95:44:98:e8:83:b4:75:2b:43:8f:93:91:ac:01:61:11:bd: c5:ea:fa:11:7e:8c:ec:67:e9:68:23:d8:96:eb:c2:63:bd:81: 5c:96:7a:5e:70:d7:6d:cb:9d:b9:4e:b6:15:c8:28:e2:26:1f: e0:07:ca:c7:8a:8b:d1:2b:d6:8b:4a:ec:76:7e:51:b9:e2:7a: 1e:ba:c6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkZqc3fpzDfDf1CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTlmNjEzNDQtNTk1YS00N2M2LThjYmMtMThhODgzZWVhODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEcTbxqJVpT8RUl9PHjrFy25zIoYBnbjkDt/ dLrYKacKobRY+OVHNNxoUXaq8nbZgffSXMPyRny18vr/fQTzbpbhQmiFsn9pvmMz 6XweQ24ahcB7okbAJChnhX4nS5vSuuWvgjAGyqmOd1awVYgQ5MgB8O6XXAfQru3L Ghw1AX1UTA3DOBJPNqnitcmFuUdar4J0sZaibwdH62sKmJGCEp6hr6Jf5POhUN81 i/t1zAMj3jFH5+5Ky02fB3yyejf40W+aq9WFIC2WHFqmBc5LvqNQi57C7s+MIlZT q2Fcw9pncj53EFcspBysmtLYeEvLaE23nVycMyzbFhl6KKPkuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5RamxGS/oCl1sQjS0li1VCsaIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU3YzFiYzMtNTQ4MS0z ZWUyLTk1MTAtZDZmNzdjZWM2N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmYPgO6oUVwyXHzAEaBL4xDJYRBH1glkhnfw1m1+Z1ICLNq0LVUtX/W 6+r7t8BgZPk0lDevqU0UGOqw7qwHXmGrKYBdlmCV14OJEq216gML0y3Get3OpGjo JcK9zuOFaq4f9oXaErDTmNGpZzPS/gADjZAMX3TeGoo7LigW1HJ1V31H1aR1CNXo JKRsXXMC4G1j4mfVlJLZiwCvCYuUKhGmxIE1Xl71lQijSR8GjNDADcINpcaVRJjo g7R1K0OPk5GsAWERvcXq+hF+jOxn6Wgj2JbrwmO9gVyWel5w123LnblOthXIKOIm H+AHyseKi9Er1otK7HZ+Ubnieh66xgo= -----END CERTIFICATE-----Generated at Wed Jul 29 06:05:24 2026 by rpki-client