$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa File: 3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa (raw, json) Hash identifier: NxxQKn+zrcvuYWgwF0uSXCbC7wyfNp9oHkr7IzdkXWI= Subject key identifier: 37:81:CE:1D:34:1B:DD:2B:D8:0A:B4:09:69:57:86:78:DE:64:5B:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CB981F60D14C0809046A08400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.253.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:f6:0d:14:c0:80:90:46:a0:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=f0eacb60-9888-4b78-8350-25c2b21d7b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:0d:ff:37:91:69:05:3c:97:e3:5a:9e:e4: 6b:9e:dd:4b:54:57:8a:3e:f7:2f:b8:a3:9d:35:e5: e4:f8:ba:d8:8c:8b:21:62:03:81:fd:c2:9e:35:9e: 4d:df:b5:ff:31:3a:de:a3:f5:17:7a:b9:ae:c2:b6: 59:93:b5:6e:bb:8d:a4:a4:b5:eb:22:2a:3f:37:07: 5a:86:93:98:0c:82:04:7d:c0:e6:62:91:f2:c4:98: 17:61:90:ee:fb:3b:77:2d:e0:b5:be:88:36:ec:0d: 90:c2:92:4f:c3:a9:cb:45:38:84:da:24:27:ce:cc: c3:40:97:da:71:19:9e:6e:78:65:31:a9:5a:ca:ba: d2:2c:2d:af:f9:29:3d:a5:a6:a9:b9:13:67:d9:ce: e9:26:81:3b:12:e7:8f:81:b5:cf:27:e7:45:2a:cc: 48:be:f6:11:e5:55:a1:fa:d1:e1:8a:e4:28:c9:7b: 27:b0:53:77:5b:f6:55:60:f9:4b:28:3b:1b:90:ec: 8b:bb:a2:43:6a:5b:0c:9d:d4:89:7d:80:35:2b:5b: e1:45:ed:f5:ae:de:04:4c:09:75:a0:d0:87:9c:80: 89:69:2c:45:cb:ad:68:f0:c5:24:87:d2:ee:71:87: e7:ef:1a:4b:2c:65:de:f2:3a:bd:dc:f7:68:5f:19: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:81:CE:1D:34:1B:DD:2B:D8:0A:B4:09:69:57:86:78:DE:64:5B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3b9509c1-d3cc-371c-a9da-79e4b818b8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7d:ef:87:c3:8e:6a:e9:64:22:cd:94:53:5e:10:a8:56:2a: f6:ea:31:60:97:03:03:d5:37:f1:2e:ea:6f:ff:39:55:3c:5d: bd:62:db:e4:96:a2:a5:84:c9:d7:b0:49:22:da:61:a9:db:97: f9:7f:0a:98:ec:66:d1:e7:35:a2:8d:2c:d4:5e:f8:6a:a7:a3: 3c:98:fd:ea:8b:3d:d2:ba:14:86:30:df:5e:c1:95:b6:38:0a: e2:96:3a:cd:e7:a0:e0:2c:3d:d9:eb:3f:d8:a7:6c:a2:84:5b: 01:cf:04:fd:c2:a7:ab:00:e3:45:d2:a1:93:7e:7b:fe:66:1f: 2f:b7:6d:d5:b8:f4:07:d4:03:f0:76:99:ae:13:77:52:24:f3: a9:1e:be:af:27:bd:0d:df:5f:ad:bc:2e:25:0b:b0:c9:c5:5b: 6d:61:54:65:41:e8:43:8d:a0:dc:60:58:1f:2d:57:4c:e7:d2: f0:c4:f1:de:20:8a:72:48:cb:70:c7:74:2d:d2:6a:f7:2e:dd: 9c:5f:59:6f:be:8c:f9:97:3b:f8:55:ef:c5:76:bb:22:ba:86: da:dd:e8:f2:81:df:c6:b8:7e:cb:38:2f:7e:b8:1b:de:c0:47: 03:8d:1a:87:94:9f:ae:ad:73:19:31:d9:17:df:ec:dc:80:dd: 4a:fd:79:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gfYNFMCAkEaghAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjBlYWNiNjAtOTg4OC00Yjc4LTgzNTAtMjVjMmIyMWQ3YjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3wN/zeRaQU8l+NanuRrnt1LVFeKPvcvuKOd NeXk+LrYjIshYgOB/cKeNZ5N37X/MTreo/UXermuwrZZk7Vuu42kpLXrIio/Nwda hpOYDIIEfcDmYpHyxJgXYZDu+zt3LeC1vog27A2QwpJPw6nLRTiE2iQnzszDQJfa cRmebnhlMalayrrSLC2v+Sk9paapuRNn2c7pJoE7EuePgbXPJ+dFKsxIvvYR5VWh +tHhiuQoyXsnsFN3W/ZVYPlLKDsbkOyLu6JDalsMndSJfYA1K1vhRe31rt4ETAl1 oNCHnICJaSxFy61o8MUkh9LucYfn7xpLLGXe8jq93PdoXxnJNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeBzh00G90r2Aq0CWlXhnjeZFsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2I5NTA5YzEtZDNjYy0z NzFjLWE5ZGEtNzllNGI4MThiOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl974fDjmrpZCLNlFNeEKhWKvbqMWCXAwPVN/Eu6m//OVU8Xb1i2+SW oqWEydewSSLaYanbl/l/CpjsZtHnNaKNLNRe+GqnozyY/eqLPdK6FIYw317BlbY4 CuKWOs3noOAsPdnrP9inbKKEWwHPBP3Cp6sA40XSoZN+e/5mHy+3bdW49AfUA/B2 ma4Td1Ik86kevq8nvQ3fX628LiULsMnFW21hVGVB6EONoNxgWB8tV0zn0vDE8d4g inJIy3DHdC3Savcu3ZxfWW++jPmXO/hV78V2uyK6htrd6PKB38a4fss4L364G97A RwONGoeUn66tcxkx2Rff7NyA3Ur9edo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:58 2026 by rpki-client