$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa File: 1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa (raw, json) Hash identifier: 4fcmG21CkLEEiMQfJP8EyTD65o7VgCpws2Xt25u6rX8= Subject key identifier: 7F:D7:6D:04:5F:F4:79:B9:87:AF:0D:C9:E8:43:24:2A:DA:EA:3E:69 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292ECFA511B43A9EF4D11C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ec:fa:51:1b:43:a9:ef:4d:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b6592f47-fba3-4e39-a9f7-838620cb317e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:cf:52:a9:24:e0:d2:a5:5c:06:db:c1:df: 78:ef:54:94:3d:bf:56:bb:68:54:79:d0:27:1a:4a: 2d:8b:97:7b:97:b9:14:72:08:21:52:50:5d:6e:da: fa:58:ea:d0:b2:37:73:3b:38:b3:3d:35:22:c0:1b: 6c:2d:f4:fe:b2:24:0b:a1:7d:3f:d7:33:31:ed:5a: bb:72:40:d9:86:51:a5:2d:02:95:36:34:7e:ef:be: f8:9e:0f:ac:8d:a1:1c:b9:82:f3:49:77:cf:53:4d: e7:46:1e:5f:15:ab:19:8d:4f:29:4c:e2:6f:5d:78: 7b:ec:fa:75:1c:f9:cf:bf:a5:a6:b9:4b:0a:77:40: 87:8d:44:31:d6:63:1a:ce:93:fe:72:54:45:be:f5: 91:1e:2d:97:53:c8:51:a5:64:7a:32:f2:24:d1:ae: d2:dc:07:05:d2:ac:20:7d:55:de:b4:62:1e:6c:0f: a6:97:b4:b4:73:9d:33:e9:04:cd:21:84:21:cd:a3: 46:c5:28:04:f1:e7:47:c8:fb:08:36:37:b6:db:24: d2:62:44:c0:06:94:b0:ff:aa:8d:bd:4a:fc:c0:7f: 63:34:fa:e1:aa:df:31:21:c4:65:a7:50:54:2f:3d: 18:08:09:72:18:78:1f:2f:3c:ff:9a:ec:cd:84:5d: 22:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D7:6D:04:5F:F4:79:B9:87:AF:0D:C9:E8:43:24:2A:DA:EA:3E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1ffe1008-56b3-3d95-b3ea-e79de140aa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5f:fa:c4:34:88:83:15:bd:79:cf:88:ab:95:f2:a0:bd:40: e9:d0:cb:30:b1:be:18:40:a5:b8:9d:67:db:0c:fd:92:8a:a4: 9a:d0:03:62:de:e6:cd:28:8c:a6:ac:ea:58:81:15:95:49:66: 70:9c:1e:53:bb:49:b7:47:98:1d:85:11:b1:ea:83:7f:2c:30: cb:28:a0:de:ec:46:dc:5e:ee:1a:05:13:2d:99:0d:1b:e8:4b: 09:41:8a:fe:50:87:d2:d7:16:23:95:a8:f9:a5:ad:c7:87:80: e6:d2:4a:ec:61:02:ea:b0:2f:ca:91:72:ac:9a:43:43:52:3f: 88:74:c7:20:50:81:b7:94:c7:6e:03:5a:c8:ac:48:28:90:27: 9b:63:4b:33:b4:96:10:93:0b:0a:c4:14:8e:79:20:32:3b:ac: de:94:42:9c:d8:f0:36:ea:bc:ed:e6:f8:d4:7c:37:c2:91:34: e4:3f:b7:9b:2f:d6:19:13:1c:64:6d:e6:da:45:70:48:b0:6a: 5b:4e:f8:2f:ac:a0:b8:12:29:75:e4:fd:19:76:c2:80:8a:17: 0c:e7:af:d7:2d:dc:5d:0a:3f:02:32:90:1d:7c:8e:00:b1:b4: 73:39:c4:bd:08:1f:9b:bf:15:3c:10:46:63:01:4e:3f:e1:47: d7:42:14:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuz6URtDqe9NEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjY1OTJmNDctZmJhMy00ZTM5LWE5ZjctODM4NjIwY2IzMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYzPUqkk4NKlXAbbwd9471SUPb9Wu2hUedAn Gkoti5d7l7kUcgghUlBdbtr6WOrQsjdzOzizPTUiwBtsLfT+siQLoX0/1zMx7Vq7 ckDZhlGlLQKVNjR+7774ng+sjaEcuYLzSXfPU03nRh5fFasZjU8pTOJvXXh77Pp1 HPnPv6WmuUsKd0CHjUQx1mMazpP+clRFvvWRHi2XU8hRpWR6MvIk0a7S3AcF0qwg fVXetGIebA+ml7S0c50z6QTNIYQhzaNGxSgE8edHyPsINje22yTSYkTABpSw/6qN vUr8wH9jNPrhqt8xIcRlp1BULz0YCAlyGHgfLzz/muzNhF0imwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/XbQRf9Hm5h68NyehDJCra6j5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWZmZTEwMDgtNTZiMy0z ZDk1LWIzZWEtZTc5ZGUxNDBhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhf+sQ0iIMVvXnPiKuV8qC9QOnQyzCxvhhApbidZ9sM/ZKKpJrQA2Le 5s0ojKas6liBFZVJZnCcHlO7SbdHmB2FEbHqg38sMMsooN7sRtxe7hoFEy2ZDRvo SwlBiv5Qh9LXFiOVqPmlrceHgObSSuxhAuqwL8qRcqyaQ0NSP4h0xyBQgbeUx24D WsisSCiQJ5tjSzO0lhCTCwrEFI55IDI7rN6UQpzY8DbqvO3m+NR8N8KRNOQ/t5sv 1hkTHGRt5tpFcEiwaltO+C+soLgSKXXk/Rl2woCKFwznr9ct3F0KPwIykB18jgCx tHM5xL0IH5u/FTwQRmMBTj/hR9dCFJw= -----END CERTIFICATE-----Generated at Thu Nov 5 18:57:42 2026 by rpki-client