$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa File: 43fcbd39-43d3-3172-b7a6-7940907cf086.roa (raw, json) Hash identifier: rkB9PEpF9DPLnt/GaASXPBY05NjYR76E2K55tMKqWjk= Subject key identifier: 9E:D5:D1:46:4B:38:4B:55:34:E0:FB:C6:86:34:CA:A0:CA:99:CC:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D07ACEB597DEDBE3FBD847C40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.253.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:eb:59:7d:ed:be:3f:bd:84:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=443603ca-21cd-49ca-894f-9022bc3958f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:50:bd:07:ce:f2:1f:54:16:36:d2:c2:c8: 03:d7:29:fa:be:e3:c4:4a:24:b6:f0:e9:b7:72:69: 70:a6:e5:ff:38:6e:61:40:8d:57:47:d9:06:7d:7c: 7e:d0:f3:97:e7:e5:fa:de:4d:db:93:82:19:0b:50: 43:6b:d6:b6:aa:d8:1e:20:d3:24:44:8f:b9:5d:75: 18:b4:1c:3b:d8:77:d5:bd:92:21:a0:b6:8b:10:76: cd:ec:f4:46:60:58:56:99:f7:fb:28:42:3f:f6:7b: 5b:95:bc:15:8d:ac:a6:2e:f5:14:8a:cf:d5:ac:d4: 71:d5:42:f9:25:f1:b3:e0:af:79:6c:6a:a9:3c:69: 92:5c:af:58:ea:79:3c:54:98:23:a2:dd:74:96:1e: 13:81:77:b3:a0:bc:a7:7e:dc:5e:06:da:be:fc:d1: 4e:0c:e5:97:16:81:90:db:83:bf:be:55:bb:c1:0c: cd:96:ee:3e:aa:eb:6c:1b:19:85:9a:e3:ac:0a:a9: 85:3e:09:84:7c:d0:95:21:9b:2d:25:bd:a6:d2:9f: 91:b6:c2:fd:0d:cb:e8:bc:00:5e:70:c0:d6:8d:89: 5c:b7:63:63:c7:e3:4e:7b:f9:1b:bc:d7:f3:3f:35: c1:c6:87:12:65:f2:22:d6:13:5e:c9:e2:58:cd:57: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D5:D1:46:4B:38:4B:55:34:E0:FB:C6:86:34:CA:A0:CA:99:CC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a8:83:89:f8:5a:51:8f:9f:b8:2c:8e:8a:b0:ac:b3:d9:9f: dd:e7:89:a2:6c:4a:0a:46:9c:0e:24:52:14:b3:87:0f:a9:2c: 15:dc:1a:bc:d8:5a:05:26:4b:b7:b8:a4:97:b9:79:c6:c4:a1: cc:ad:57:1c:1e:e2:b0:8d:6e:90:d0:a0:6f:14:5b:c7:41:4f: db:bb:5d:9e:c7:6e:bd:0a:f7:03:d4:a9:91:69:29:07:d9:23: 90:fb:78:df:e0:33:06:db:d2:f2:bb:55:93:f9:c5:f5:a7:0f: ca:50:30:93:8f:69:0c:a2:77:62:af:75:29:f0:76:0d:33:4b: 67:ed:fb:00:38:d4:99:91:86:97:ab:4b:0e:5c:c2:06:4e:f9: 31:b0:3b:2e:10:79:ec:ba:54:4c:8f:61:af:ca:01:1b:b7:22: 1a:57:fb:de:27:57:76:9b:f9:d9:a6:f5:cc:46:e7:3c:31:4b: e5:ac:07:ec:00:57:e9:93:ad:37:54:53:bc:dc:41:5f:01:b1: 24:b6:6e:bd:e4:8a:79:28:c4:4a:1b:1f:40:83:23:59:d9:1f: 83:db:71:86:95:ac:3b:29:cf:04:97:e6:00:87:5e:2a:2f:3e: 06:64:6c:04:ac:bb:da:ca:32:40:bd:28:75:97:07:dc:01:11: dd:7d:76:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOtZfe2+P72EfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NDQzNjAzY2EtMjFjZC00OWNhLTg5NGYtOTAyMmJjMzk1OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQdQvQfO8h9UFjbSwsgD1yn6vuPESiS28Om3 cmlwpuX/OG5hQI1XR9kGfXx+0POX5+X63k3bk4IZC1BDa9a2qtgeINMkRI+5XXUY tBw72HfVvZIhoLaLEHbN7PRGYFhWmff7KEI/9ntblbwVjaymLvUUis/VrNRx1UL5 JfGz4K95bGqpPGmSXK9Y6nk8VJgjot10lh4TgXezoLynftxeBtq+/NFODOWXFoGQ 24O/vlW7wQzNlu4+qutsGxmFmuOsCqmFPgmEfNCVIZstJb2m0p+RtsL9DcvovABe cMDWjYlct2Njx+NOe/kbvNfzPzXBxocSZfIi1hNeyeJYzVevNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7V0UZLOEtVNOD7xoY0yqDKmcz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNmY2JkMzktNDNkMy0z MTcyLWI3YTYtNzk0MDkwN2NmMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiog4n4WlGPn7gsjoqwrLPZn93niaJsSgpGnA4kUhSzhw+pLBXcGrzY WgUmS7e4pJe5ecbEocytVxwe4rCNbpDQoG8UW8dBT9u7XZ7Hbr0K9wPUqZFpKQfZ I5D7eN/gMwbb0vK7VZP5xfWnD8pQMJOPaQyid2KvdSnwdg0zS2ft+wA41JmRhper Sw5cwgZO+TGwOy4Qeey6VEyPYa/KARu3IhpX+94nV3ab+dmm9cxG5zwxS+WsB+wA V+mTrTdUU7zcQV8BsSS2br3kinkoxEobH0CDI1nZH4PbcYaVrDspzwSX5gCHXiov PgZkbASsu9rKMkC9KHWXB9wBEd19doM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:10 2026 by rpki-client