$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1f7da06b-cc0e-3022-ace8-320ac7178a40.roa File: 1f7da06b-cc0e-3022-ace8-320ac7178a40.roa (raw, json) Hash identifier: g5qUTm8o12kGj2BB/bjPS3qnpC7pkct39yY4Lh5Syzk= Subject key identifier: 87:55:47:6E:F8:88:C7:54:4F:39:84:E1:3F:56:79:A9:AE:B3:97:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EEEB74D8C4AD39B58539C9080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1f7da06b-cc0e-3022-ace8-320ac7178a40.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 15169 IP address blocks: 172.253.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:4d:8c:4a:d3:9b:58:53:9c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=01c4ba33-d82f-457f-b49c-ca3a05dd01db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:65:b1:c7:70:3f:e9:dd:02:d4:ce:6d:ce:22: f7:c3:cb:81:37:ac:ca:59:52:3b:5c:e5:b0:7f:9f: bd:09:c3:6f:fe:8e:b0:e7:69:37:70:57:f5:5c:7e: 7a:a0:0c:aa:26:e2:74:40:ae:e9:f1:b9:0a:9b:c1: cf:63:15:69:5b:d6:71:93:4c:bd:da:8c:cf:c4:ba: 2f:5c:f8:02:44:35:11:0e:d7:5b:43:62:93:9d:47: 25:89:cf:4b:05:fe:82:20:fe:79:35:33:0a:7d:c9: 00:0c:e1:be:7f:a9:8a:de:64:3d:fc:87:cd:09:e2: 43:d8:fc:bc:69:da:ae:6e:ee:6a:b7:b4:07:04:84: 7a:af:e5:6c:3b:39:25:5f:03:2b:74:6d:94:31:db: 23:59:24:c6:15:9f:73:07:ee:3d:c5:af:14:11:64: 5c:b7:69:26:67:b2:9a:31:2b:ee:cf:1a:2a:2c:e3: f1:a7:70:02:ce:3f:4e:ec:6f:1b:92:e0:a6:15:77: 30:8b:67:8f:8a:9b:03:e1:8c:4b:ba:46:66:8f:6c: 85:28:cf:7f:29:d3:bc:bd:bb:51:e7:f3:b9:06:54: d2:93:06:e7:85:62:fd:ac:64:30:48:c0:be:07:4c: e7:87:92:58:94:17:37:05:13:0a:1f:05:3c:03:91: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:55:47:6E:F8:88:C7:54:4F:39:84:E1:3F:56:79:A9:AE:B3:97:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1f7da06b-cc0e-3022-ace8-320ac7178a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d0:22:d1:ea:0e:f8:32:cd:70:07:65:b6:03:84:c7:e1:31: 23:5f:e1:21:3e:10:ab:0f:66:b1:ba:2e:7b:be:43:f1:5f:3e: 9f:af:3f:a2:c3:87:ac:94:26:ff:38:3e:42:d3:61:ee:0f:0c: a7:bd:e9:c5:c4:98:a7:04:a6:25:64:0f:1f:38:f2:d2:b1:f9: fb:1f:bb:22:6a:5e:1e:f5:0a:ab:38:3e:ac:84:16:70:7f:15: d0:0c:61:d6:1f:c2:d2:c8:28:1f:73:2f:44:79:d0:55:28:3b: f7:31:e0:56:21:23:12:c0:cf:3f:4c:0c:74:39:4b:3f:59:5b: 3a:3f:e3:df:bc:05:6e:eb:93:eb:1f:45:ff:8d:87:1b:ca:97: bc:f9:30:1d:a0:ff:f5:9b:61:2c:c7:f2:82:8b:40:b2:d1:d8: 2a:cc:d3:3c:24:51:88:22:f8:47:a5:7f:30:94:11:ad:50:67: 6e:52:d8:6c:15:e0:12:be:f2:16:7d:21:50:01:36:df:9f:9d: c8:e4:e2:53:b1:a9:07:02:e6:e3:5a:92:e4:32:e8:45:6a:83: 4b:2e:7b:d8:60:4f:d5:a2:3c:43:0a:33:b1:18:57:e7:dc:f1: 9f:2e:87:47:f6:81:ed:f4:e6:99:bd:15:23:5b:61:80:6d:97: 6b:71:cb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut02MStObWFOckIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MDFjNGJhMzMtZDgyZi00NTdmLWI0OWMtY2EzYTA1ZGQwMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52Wxx3A/6d0C1M5tziL3w8uBN6zKWVI7XOWw f5+9CcNv/o6w52k3cFf1XH56oAyqJuJ0QK7p8bkKm8HPYxVpW9Zxk0y92ozPxLov XPgCRDURDtdbQ2KTnUclic9LBf6CIP55NTMKfckADOG+f6mK3mQ9/IfNCeJD2Py8 adqubu5qt7QHBIR6r+VsOzklXwMrdG2UMdsjWSTGFZ9zB+49xa8UEWRct2kmZ7Ka MSvuzxoqLOPxp3ACzj9O7G8bkuCmFXcwi2ePipsD4YxLukZmj2yFKM9/KdO8vbtR 5/O5BlTSkwbnhWL9rGQwSMC+B0znh5JYlBc3BRMKHwU8A5FdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdVR274iMdUTzmE4T9Weamus5dmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWY3ZGEwNmItY2MwZS0z MDIyLWFjZTgtMzIwYWM3MTc4YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnQItHqDvgyzXAHZbYDhMfhMSNf4SE+EKsPZrG6Lnu+Q/FfPp+vP6LD h6yUJv84PkLTYe4PDKe96cXEmKcEpiVkDx848tKx+fsfuyJqXh71Cqs4PqyEFnB/ FdAMYdYfwtLIKB9zL0R50FUoO/cx4FYhIxLAzz9MDHQ5Sz9ZWzo/49+8BW7rk+sf Rf+NhxvKl7z5MB2g//WbYSzH8oKLQLLR2CrM0zwkUYgi+EelfzCUEa1QZ25S2GwV 4BK+8hZ9IVABNt+fncjk4lOxqQcC5uNakuQy6EVqg0sue9hgT9WiPEMKM7EYV+fc 8Z8uh0f2ge305pm9FSNbYYBtl2txy6w= -----END CERTIFICATE-----Generated at Tue Sep 22 09:30:13 2026 by rpki-client