$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa File: 3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa (raw, json) Hash identifier: wPRk5WIw9rPZl+CEdTO2wvfVDeZVy8gJxPxt25kxha0= Subject key identifier: DD:88:87:F0:9D:E5:19:21:60:69:66:30:50:35:A9:A7:30:3C:5C:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1B79958BDF1ADF7207D26B70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa Signing time: Mon 08 Jun 2026 21:00:12 +0000 ROA not before: Mon 08 Jun 2026 21:00:12 +0000 ROA not after: Sun 06 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.253.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1b:79:95:8b:df:1a:df:72:07:d2:6b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 8 21:00:12 2026 GMT Not After : Sep 6 21:00:12 2026 GMT Subject: CN=1b6b7f35-311c-4e77-88a5-2cbcdef2691d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2e:08:84:d4:95:87:9b:8d:d2:04:d5:fd:42: b6:8e:8c:c5:3b:56:18:13:cf:04:af:d3:8c:9d:76: 88:11:13:99:35:c9:cc:53:86:c1:8f:0b:2e:33:86: 5e:08:c7:e9:22:6d:83:a7:7b:cc:b3:8c:0f:7f:01: 88:2e:e9:2d:0d:22:75:09:fe:62:21:b8:a1:cb:a9: a4:db:16:b7:09:82:88:62:3a:48:f6:44:e4:fb:90: 2b:15:b3:a8:ec:dc:02:5d:0c:10:b4:5b:7d:55:b8: 51:cd:8f:62:02:2a:75:b1:b3:9f:85:b7:d9:f0:e7: e1:00:fc:ef:af:b0:dc:7e:7a:58:4d:ee:08:ce:3c: 25:bd:e3:7e:13:80:4b:58:4c:9e:82:ce:6f:41:5a: d4:c5:7b:7e:8f:f2:d2:2a:9a:96:df:65:ba:74:a5: 38:9d:a6:72:72:ed:d9:ae:08:f1:50:7b:66:b2:c9: 11:b7:71:69:db:a3:41:1d:a8:b5:11:a6:6c:80:cc: 4c:13:b1:f3:80:57:65:e4:a1:d7:1a:2f:7f:91:42: 7a:ef:21:9a:6c:dc:92:ef:e5:e3:c3:4a:d6:f1:1e: e8:a4:15:ab:46:07:a9:5c:7a:07:f6:a9:ed:e6:29: f6:df:03:dc:2a:04:13:81:0c:a5:de:47:cf:4b:db: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:87:F0:9D:E5:19:21:60:69:66:30:50:35:A9:A7:30:3C:5C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c4b96cc-2f2a-31d7-bdda-f56ac688a057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f5:4b:8e:9d:fb:f8:09:6f:9d:fa:45:97:f2:5d:a4:89:dc: 02:0d:22:e7:99:d7:dd:9f:8e:d6:40:5b:d8:e6:b0:3e:5a:2f: ca:d7:2d:18:0c:8a:39:8d:19:02:90:d3:ca:14:47:1a:8f:5d: 7d:d5:0b:80:40:1a:a6:c1:c8:72:44:79:c6:fa:51:5e:03:e4: af:b2:f7:01:9c:cd:47:cd:a4:6f:98:c6:57:4d:45:fc:05:4d: 70:e2:e2:59:7d:be:c4:a3:ca:32:e1:ea:72:33:7b:bb:fe:11: ee:53:cf:c8:87:fc:82:c8:fa:67:7e:8b:a6:04:24:88:4d:a3: b7:9a:9f:72:7d:b5:c4:78:c2:ce:e5:ef:9f:02:63:bb:f8:a5: bc:dd:ad:7e:3b:a8:43:53:ca:fd:46:5f:7b:cc:48:96:0d:6e: 8e:96:4c:8f:cc:95:25:bc:a5:54:7c:2e:7b:24:3e:6a:5b:46: 52:32:d9:d4:8a:f1:18:00:a3:11:c5:28:ec:ea:1e:d4:71:b9: d1:44:10:d5:16:8e:b3:c2:43:11:a4:10:16:1c:58:97:c9:0b: 1c:d7:7d:d4:76:b8:fd:a7:24:c4:29:49:67:84:67:56:a3:54: ba:68:69:ad:0e:fc:f6:4c:25:cb:45:59:23:eb:b9:18:0f:a7: 23:a4:59:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beZWL3xrfcgfSa3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk MWI2YjdmMzUtMzExYy00ZTc3LTg4YTUtMmNiY2RlZjI2OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C4IhNSVh5uN0gTV/UK2jozFO1YYE88Er9OM nXaIEROZNcnMU4bBjwsuM4ZeCMfpIm2Dp3vMs4wPfwGILuktDSJ1Cf5iIbihy6mk 2xa3CYKIYjpI9kTk+5ArFbOo7NwCXQwQtFt9VbhRzY9iAip1sbOfhbfZ8OfhAPzv r7DcfnpYTe4IzjwlveN+E4BLWEyegs5vQVrUxXt+j/LSKpqW32W6dKU4naZycu3Z rgjxUHtmsskRt3Fp26NBHai1EaZsgMxME7HzgFdl5KHXGi9/kUJ67yGabNyS7+Xj w0rW8R7opBWrRgepXHoH9qnt5in23wPcKgQTgQyl3kfPS9sLmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Ih/Cd5RkhYGlmMFA1qacwPFw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M0Yjk2Y2MtMmYyYS0z MWQ3LWJkZGEtZjU2YWM2ODhhMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/1S46d+/gJb536RZfyXaSJ3AINIueZ192fjtZAW9jmsD5aL8rXLRgM ijmNGQKQ08oURxqPXX3VC4BAGqbByHJEecb6UV4D5K+y9wGczUfNpG+YxldNRfwF TXDi4ll9vsSjyjLh6nIze7v+Ee5Tz8iH/ILI+md+i6YEJIhNo7ean3J9tcR4ws7l 758CY7v4pbzdrX47qENTyv1GX3vMSJYNbo6WTI/MlSW8pVR8LnskPmpbRlIy2dSK 8RgAoxHFKOzqHtRxudFEENUWjrPCQxGkEBYcWJfJCxzXfdR2uP2nJMQpSWeEZ1aj VLpoaa0O/PZMJctFWSPruRgPpyOkWbM= -----END CERTIFICATE-----Generated at Sat Jun 13 13:33:19 2026 by rpki-client