$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa File: 43fcbd39-43d3-3172-b7a6-7940907cf086.roa (raw, json) Hash identifier: vzWGtjytuqGfdiPhRQq0RZO+tqVz+8K49dOlDzUZKVk= Subject key identifier: EA:75:F4:6A:FE:25:8F:7C:61:3F:23:15:9C:77:6C:73:6E:47:51:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DE84B2E53A0B5AAE43704DD20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 15169 IP address blocks: 172.253.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:2e:53:a0:b5:aa:e4:37:04:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=9f85d76c-dc95-4678-90d3-2de4a4a588b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:fa:ff:f5:74:79:24:b2:aa:c7:13:d3:29: 5d:55:33:94:d5:2d:ee:49:92:5a:c1:04:2d:4f:c2: e9:ce:fa:82:60:16:8a:da:b8:4a:f1:a7:ae:9a:fb: 52:ee:59:0d:0f:a0:ea:03:35:eb:4c:50:e1:60:5f: 90:cb:e7:fb:69:4f:9b:b2:76:ee:b9:7f:20:d4:94: 9a:b4:d3:31:5b:7c:21:fe:1e:d4:78:a8:06:f5:45: c5:27:63:14:20:90:bc:6d:46:8f:e8:fc:37:13:e4: 8e:6c:12:53:ed:12:9f:bd:41:a6:35:e5:c5:d5:b8: fb:1c:73:9f:b3:d7:d4:ea:31:d3:21:6f:97:80:4b: f5:fd:90:75:f0:d2:63:8d:cf:96:1f:c0:30:74:3f: 46:35:3e:c7:6f:1c:08:4c:1b:7c:c7:68:26:e4:ff: 9a:de:d0:b9:b6:b5:00:c2:27:32:63:89:30:d9:e7: 8a:4c:da:44:b0:1d:a0:a1:69:5e:a7:87:2a:2f:81: 16:a5:6e:ee:6f:67:c3:22:f2:04:9e:8f:f5:d7:6a: fb:31:1b:e7:6d:87:9d:c3:a9:11:fb:0b:ff:ba:5e: 31:f3:9e:0d:aa:d5:9f:11:70:62:05:6e:c3:39:04: 85:30:d4:c7:35:bf:06:98:57:d9:40:cd:9a:72:f8: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:F4:6A:FE:25:8F:7C:61:3F:23:15:9C:77:6C:73:6E:47:51:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43fcbd39-43d3-3172-b7a6-7940907cf086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:2f:c6:ab:67:5f:f8:85:2d:bc:b0:b5:51:8f:b3:da:1b:bc: a9:d4:f1:1b:41:1d:c5:0f:6b:99:f8:9d:72:3f:9f:2b:ef:38: 56:ad:83:53:59:53:84:63:5b:64:fd:53:05:84:0c:5f:9d:a6: a0:0e:ed:2c:9a:20:14:55:c5:53:f9:90:b9:ac:c5:77:78:c5: 7e:86:2e:08:59:6d:1a:b4:3f:42:65:0b:5e:27:89:9f:13:5d: 41:90:df:23:34:2d:2d:e2:5a:80:97:cc:19:ac:5f:39:2a:4f: 22:db:b4:4e:6b:8d:f1:65:9c:f3:f1:63:15:34:69:55:3d:ce: 51:6e:ab:0b:6c:84:73:fb:bf:33:89:56:16:d1:99:22:5e:57: 35:9d:92:5b:b8:d4:9d:c4:5c:f6:b9:31:17:74:ef:05:1b:02: ca:70:44:fc:0e:cc:33:13:9d:98:cb:b7:be:65:80:2c:00:b2: 16:17:2c:de:52:86:24:f5:56:b6:f5:8a:83:2f:4e:90:e8:dd: 77:57:cf:2b:0c:2f:95:5b:75:6d:e2:d1:47:55:79:b6:f4:76: db:45:8b:1c:a1:ce:97:34:38:1b:a0:01:94:4b:af:ee:bd:ed: 65:85:56:e4:f5:42:cb:58:63:fb:d5:9d:f5:81:cb:b1:cc:58: 43:06:7a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSy5ToLWq5DcE3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk OWY4NWQ3NmMtZGM5NS00Njc4LTkwZDMtMmRlNGE0YTU4OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt36//V0eSSyqscT0yldVTOU1S3uSZJawQQt T8LpzvqCYBaK2rhK8aeumvtS7lkND6DqAzXrTFDhYF+Qy+f7aU+bsnbuuX8g1JSa tNMxW3wh/h7UeKgG9UXFJ2MUIJC8bUaP6Pw3E+SObBJT7RKfvUGmNeXF1bj7HHOf s9fU6jHTIW+XgEv1/ZB18NJjjc+WH8AwdD9GNT7HbxwITBt8x2gm5P+a3tC5trUA wicyY4kw2eeKTNpEsB2goWlep4cqL4EWpW7ub2fDIvIEno/112r7MRvnbYedw6kR +wv/ul4x854NqtWfEXBiBW7DOQSFMNTHNb8GmFfZQM2acvgf4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp19Gr+JY98YT8jFZx3bHNuR1FQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNmY2JkMzktNDNkMy0z MTcyLWI3YTYtNzk0MDkwN2NmMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQvxqtnX/iFLbywtVGPs9obvKnU8RtBHcUPa5n4nXI/nyvvOFatg1NZ U4RjW2T9UwWEDF+dpqAO7SyaIBRVxVP5kLmsxXd4xX6GLghZbRq0P0JlC14niZ8T XUGQ3yM0LS3iWoCXzBmsXzkqTyLbtE5rjfFlnPPxYxU0aVU9zlFuqwtshHP7vzOJ VhbRmSJeVzWdklu41J3EXPa5MRd07wUbAspwRPwOzDMTnZjLt75lgCwAshYXLN5S hiT1Vrb1ioMvTpDo3XdXzysML5VbdW3i0UdVebb0dttFixyhzpc0OBugAZRLr+69 7WWFVuT1QstYY/vVnfWBy7HMWEMGeqg= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:51 2026 by rpki-client