$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa File: 1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa (raw, json) Hash identifier: w9HU6Xe9mByrK7cCPMoq++/UfbApZkjn2jTK+3viGmM= Subject key identifier: 3F:5A:F5:56:38:17:6E:23:B0:77:96:98:BE:78:FE:47:13:20:3D:92 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DE84B2E26A6F7CC16BC080D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 15169 IP address blocks: 172.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:2e:26:a6:f7:cc:16:bc:08:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=3497afba-d663-49da-b7f0-53cb3f771967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:78:0e:d7:bf:0b:3b:53:bb:7c:6c:e7:14: a6:01:40:7f:57:b5:15:3b:96:dc:02:14:5c:1e:d1: ee:bf:ca:c9:53:6f:f8:10:15:e0:aa:77:0a:2d:af: d0:92:3a:53:78:99:d3:d1:ae:45:dc:d8:a5:ae:22: 76:e1:6d:23:d5:31:da:3c:fb:be:55:f8:ac:59:fb: 8a:86:a4:55:2b:ef:27:4d:98:48:29:18:dc:8e:f2: 21:5d:8d:ff:28:9c:a8:3e:db:74:7f:c5:1c:7c:87: 43:e7:fb:66:58:e3:01:c7:25:2c:64:47:d6:c5:d9: 26:ae:ab:79:dd:dc:79:07:af:b4:e3:7e:28:0a:f1: c3:2a:d8:b7:35:a0:21:4f:b5:f4:13:d0:63:54:52: c5:e6:31:49:85:46:1a:98:7d:3f:f4:f3:f3:fe:c6: e0:7a:b6:27:0b:05:01:7b:49:42:c2:7a:2e:b5:5d: a3:ed:dd:e0:61:73:24:88:c2:69:36:26:20:9d:83: be:78:1a:23:53:91:60:ab:70:8b:c7:99:f5:83:30: ef:6c:e6:5a:fb:b6:d6:23:65:07:87:7b:90:7e:1c: 39:7b:5f:76:39:42:20:f1:d3:eb:18:ad:24:70:7c: 09:f3:85:03:27:fd:99:91:6b:84:12:72:ac:63:60: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:F5:56:38:17:6E:23:B0:77:96:98:BE:78:FE:47:13:20:3D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:53:d8:b7:f9:b4:e5:28:79:d8:0e:f7:8d:c4:0d:5e:b1:39: f2:44:76:88:f7:e0:0d:db:09:c5:f2:7f:83:a0:99:6d:f9:2c: c1:f5:48:59:a1:00:8a:35:e9:3a:e3:d4:37:9c:bc:bf:df:aa: bf:9b:e9:60:18:75:ad:a7:9d:34:38:00:09:60:e9:bc:a0:a1: fb:ad:27:6d:44:83:5d:f3:49:ef:e5:d3:81:f2:a4:00:f0:22: c4:5a:be:f3:d3:f7:f9:27:47:1c:37:d7:95:61:c2:5c:3d:39: 76:4b:cc:aa:48:ba:3e:eb:5f:e7:fc:b9:f9:5f:cc:f7:ad:77: 1b:eb:9c:bf:42:d5:11:92:db:af:8c:45:2a:04:c6:a0:7c:96: 15:08:72:b2:e4:68:80:1e:69:e8:6a:0c:6c:ce:54:3c:85:ba: 70:1c:b5:c6:38:22:69:7f:a7:39:4d:8f:12:44:d1:f9:3e:ce: 54:9a:85:0e:ef:48:b0:c6:cb:72:e7:c7:97:fe:5d:e2:9b:fd: a4:69:36:d6:be:dd:3c:91:02:e9:1b:a2:1e:11:88:a1:b1:c3: 7f:86:1c:cd:3d:ee:07:38:5e:ea:15:d5:aa:84:ea:83:a1:f7: 38:bd:5f:b1:09:af:ea:29:e6:32:59:da:d8:35:58:c5:1b:d7: ab:44:38:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSy4mpvfMFrwIDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk MzQ5N2FmYmEtZDY2My00OWRhLWI3ZjAtNTNjYjNmNzcxOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO14Dte/CztTu3xs5xSmAUB/V7UVO5bcAhRc HtHuv8rJU2/4EBXgqncKLa/QkjpTeJnT0a5F3NilriJ24W0j1THaPPu+VfisWfuK hqRVK+8nTZhIKRjcjvIhXY3/KJyoPtt0f8UcfIdD5/tmWOMBxyUsZEfWxdkmrqt5 3dx5B6+0434oCvHDKti3NaAhT7X0E9BjVFLF5jFJhUYamH0/9PPz/sbgerYnCwUB e0lCwnoutV2j7d3gYXMkiMJpNiYgnYO+eBojU5Fgq3CLx5n1gzDvbOZa+7bWI2UH h3uQfhw5e192OUIg8dPrGK0kcHwJ84UDJ/2ZkWuEEnKsY2BWzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9a9VY4F24jsHeWmL54/kcTID2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU3YzFiYzMtNTQ4MS0z ZWUyLTk1MTAtZDZmNzdjZWM2N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9T2Lf5tOUoedgO943EDV6xOfJEdoj34A3bCcXyf4OgmW35LMH1SFmh AIo16Trj1DecvL/fqr+b6WAYda2nnTQ4AAlg6bygofutJ21Eg13zSe/l04HypADw IsRavvPT9/knRxw315Vhwlw9OXZLzKpIuj7rX+f8uflfzPetdxvrnL9C1RGS26+M RSoExqB8lhUIcrLkaIAeaehqDGzOVDyFunActcY4Iml/pzlNjxJE0fk+zlSahQ7v SLDGy3Lnx5f+XeKb/aRpNta+3TyRAukboh4RiKGxw3+GHM097gc4XuoV1aqE6oOh 9zi9X7EJr+op5jJZ2tg1WMUb16tEOE0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:57 2026 by rpki-client