$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa File: 43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa (raw, json) Hash identifier: /+Kqt1PYHqWW8O21FkS59y5CqQISKywhfXascqDBQjU= Subject key identifier: B6:12:96:40:16:F6:9C:40:EC:AB:33:19:B9:31:49:A7:94:4A:1A:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC96A8D98EC15E75E9040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 172.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c9:6a:8d:98:ec:15:e7:5e:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=effaf9f1-9724-46de-a977-2cf6b42090cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:b0:a5:a7:08:2c:fc:50:f5:70:9a:b4:4f: 74:9c:22:8a:4f:32:fe:80:26:fc:68:a7:21:60:33: 04:be:5c:15:67:18:fc:29:90:e7:b5:95:6e:11:80: 2c:de:1e:1d:54:2d:c7:f3:22:09:cf:d4:91:0d:46: 71:03:e1:19:b2:de:06:c2:aa:9a:2c:aa:16:44:0d: 8f:19:e0:04:ac:65:46:69:8d:db:b2:f2:1b:2a:a2: 9f:4f:66:70:b0:7b:05:55:98:ce:1c:29:3e:bf:87: b5:d7:27:55:a2:33:e5:40:8d:44:ee:bd:9e:f9:ac: d6:48:78:c8:e5:73:79:30:1c:53:57:c2:16:d1:55: 6d:27:02:cd:c9:e0:23:56:75:22:93:77:96:00:ce: 1c:54:be:ff:35:2f:0f:4f:2c:d0:db:09:8c:91:eb: 29:92:00:dc:a1:6a:3d:31:a9:03:70:e7:92:b0:1a: 27:4b:fe:57:46:67:b8:c9:22:e7:c0:8f:27:92:02: f6:c0:6a:d9:d2:0b:ce:76:4a:8f:52:df:80:1e:d6: 46:95:56:28:06:0e:ef:59:16:a7:13:42:d3:5c:0d: 27:41:38:8b:4d:d4:d2:5d:4b:02:bc:6c:2c:ab:7d: fd:cf:f2:80:2f:95:6f:dd:f8:b2:e6:f6:72:00:b0: b1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:12:96:40:16:F6:9C:40:EC:AB:33:19:B9:31:49:A7:94:4A:1A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43a9f3ff-ed4b-3b51-b881-fac19d2193ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c2:b0:e3:c1:25:29:b9:34:6f:bc:d2:d1:c9:cb:2d:2d:87: ad:fc:43:ce:14:ae:32:8d:a9:15:5c:d5:a9:5b:b7:b5:18:5b: 5f:fa:cd:d5:4c:6e:7f:bc:15:3e:af:aa:9b:7b:98:ef:86:ef: b2:28:cf:c8:d0:44:22:41:2a:39:0a:3f:3b:fa:eb:08:23:12: 13:1f:06:b7:b4:2c:ed:ae:b6:de:14:7e:78:1e:a9:03:e8:0e: cf:71:a2:be:72:3e:ff:5e:3a:95:9e:62:9d:cb:53:52:e4:e2: a8:11:35:a8:89:7b:24:12:1f:a3:49:56:bf:2c:3b:ff:e6:52: 73:6a:61:7a:c1:89:7f:56:cb:06:a4:24:9f:24:4b:7e:c1:75: e4:f5:a1:ee:87:cb:3b:3c:fb:6f:1c:8a:b1:af:f1:a5:fd:e0: 15:b9:98:48:3c:78:9a:be:c1:3e:52:73:32:e7:c3:13:ba:f4: a1:f2:9f:41:68:aa:e0:6e:a2:46:48:f2:7a:bb:16:c0:2c:75: 40:25:13:71:94:aa:5e:bc:51:5a:4e:b1:c3:8f:f0:aa:a6:91: 12:d0:18:9c:b2:9f:e5:35:d6:72:fe:44:89:4f:cb:82:9d:40: c6:24:1d:07:0d:c5:85:28:2d:4f:62:93:0d:85:bf:8b:d3:06: b4:f9:63:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8lqjZjsFedekEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZWZmYWY5ZjEtOTcyNC00NmRlLWE5NzctMmNmNmI0MjA5MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqCwpacILPxQ9XCatE90nCKKTzL+gCb8aKch YDMEvlwVZxj8KZDntZVuEYAs3h4dVC3H8yIJz9SRDUZxA+EZst4GwqqaLKoWRA2P GeAErGVGaY3bsvIbKqKfT2ZwsHsFVZjOHCk+v4e11ydVojPlQI1E7r2e+azWSHjI 5XN5MBxTV8IW0VVtJwLNyeAjVnUik3eWAM4cVL7/NS8PTyzQ2wmMkespkgDcoWo9 MakDcOeSsBonS/5XRme4ySLnwI8nkgL2wGrZ0gvOdkqPUt+AHtZGlVYoBg7vWRan E0LTXA0nQTiLTdTSXUsCvGwsq339z/KAL5Vv3fiy5vZyALCxwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYSlkAW9pxA7KszGbkxSaeUShpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNhOWYzZmYtZWQ0Yi0z YjUxLWI4ODEtZmFjMTlkMjE5M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDCsOPBJSm5NG+80tHJyy0th638Q84UrjKNqRVc1albt7UYW1/6zdVM bn+8FT6vqpt7mO+G77Ioz8jQRCJBKjkKPzv66wgjEhMfBre0LO2utt4UfngeqQPo Ds9xor5yPv9eOpWeYp3LU1Lk4qgRNaiJeyQSH6NJVr8sO//mUnNqYXrBiX9Wywak JJ8kS37BdeT1oe6Hyzs8+28cirGv8aX94BW5mEg8eJq+wT5SczLnwxO69KHyn0Fo quBuokZI8nq7FsAsdUAlE3GUql68UVpOscOP8KqmkRLQGJyyn+U11nL+RIlPy4Kd QMYkHQcNxYUoLU9ikw2Fv4vTBrT5Y4w= -----END CERTIFICATE-----Generated at Sat Jun 13 13:15:28 2026 by rpki-client