$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/53e31907-f4d0-3712-b8bd-54b168f70905.roa File: 53e31907-f4d0-3712-b8bd-54b168f70905.roa (raw, json) Hash identifier: gFoIWopwJA4TYV6IOHPxbZ/mQLl9jku3COjh7RejjEg= Subject key identifier: 61:D9:82:5C:B5:66:09:0A:C2:7B:9F:EE:60:FA:81:18:5A:E3:60:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4972AA5F281D697D2A934800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/53e31907-f4d0-3712-b8bd-54b168f70905.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:aa:5f:28:1d:69:7d:2a:93:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6a593ae3-6c85-433c-b262-1a3046ac7ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:bc:8f:e3:d1:c9:9b:1e:71:92:f0:d0:7c: c2:85:2d:26:45:88:f9:b9:53:8b:c7:16:8b:8a:a7: 71:88:2e:be:b2:69:07:02:c5:b7:7b:e6:1d:d2:8f: 10:bd:a0:34:d8:66:25:f0:be:f3:90:a2:39:db:37: ec:9d:d4:60:65:91:67:be:8c:de:74:93:23:5c:2c: 20:db:44:52:3e:e8:78:7d:57:74:ee:b8:2a:f7:57: e2:f5:ba:17:58:a6:c3:ab:be:27:73:48:e4:b9:b8: 80:0f:31:9f:f1:e6:36:08:01:f8:57:ea:96:21:e2: 69:5f:1f:ee:32:5d:94:d7:ce:8c:95:0c:36:00:6d: b3:d2:5a:65:f3:e9:e1:5f:4c:6f:be:de:11:9f:9d: bf:6c:2d:2b:36:d3:89:07:23:c8:6f:ad:41:de:b1: ac:ff:74:27:98:b9:f2:bf:fe:d0:3a:18:7b:42:6c: a2:d9:17:b4:45:80:9b:99:50:fa:29:fd:a4:54:cf: 00:bd:68:b4:31:fa:4c:35:5d:62:75:41:c1:56:8b: ac:94:e7:68:40:7e:f3:66:fa:f4:7a:bb:34:31:d5: 09:e2:65:0c:9c:07:b7:07:e3:05:a8:f3:c7:44:5f: 39:80:b2:1f:f1:32:2a:8a:ab:2b:d5:27:af:67:cb: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:82:5C:B5:66:09:0A:C2:7B:9F:EE:60:FA:81:18:5A:E3:60:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/53e31907-f4d0-3712-b8bd-54b168f70905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:56:37:46:8c:83:0f:e6:12:10:9c:e7:a6:9b:94:93:cd:28: 91:2d:44:ea:a3:97:eb:8b:5e:5d:a5:35:45:0e:09:48:20:c0: e7:46:60:c1:41:5b:94:d5:47:46:e9:ac:53:b3:1a:ee:46:11: ca:98:a6:8e:4d:1d:8d:00:72:30:09:c3:63:5f:1c:b6:39:1d: 5d:de:6c:c2:44:07:e1:8c:33:86:5c:87:5a:2a:ee:b9:4e:0c: d8:cc:bc:87:4e:c6:f0:01:28:23:bc:96:e0:ef:1f:5e:44:df: db:22:98:dc:c8:da:80:63:72:99:42:e0:27:6e:11:10:de:35: 6d:b5:1c:6a:c6:83:08:05:1b:69:e9:43:2b:1c:00:82:d0:6c: 4a:ba:e4:ee:65:bb:24:a0:e6:20:80:4f:8e:9b:1f:ed:ff:81: 64:73:11:80:b8:ca:81:a1:00:ff:df:10:8f:be:f4:57:cc:63: 0d:34:58:7a:9b:b0:74:f8:b2:45:15:83:16:12:3c:a6:3d:85: e2:8e:1e:09:c6:a9:b2:e4:b6:9a:b2:8c:b7:84:1e:44:ea:40: a9:7c:a7:63:3f:3a:48:c6:2a:ab:48:8a:97:2e:5c:fe:9c:13: d6:c3:be:06:0f:a8:48:3f:98:28:49:9e:d5:5b:18:db:de:32: 4e:44:a3:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqpfKB1pfSqTSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmE1OTNhZTMtNmM4NS00MzNjLWIyNjItMWEzMDQ2YWM3ZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFG8j+PRyZsecZLw0HzChS0mRYj5uVOLxxaL iqdxiC6+smkHAsW3e+Yd0o8QvaA02GYl8L7zkKI52zfsndRgZZFnvozedJMjXCwg 20RSPuh4fVd07rgq91fi9boXWKbDq74nc0jkubiADzGf8eY2CAH4V+qWIeJpXx/u Ml2U186MlQw2AG2z0lpl8+nhX0xvvt4Rn52/bC0rNtOJByPIb61B3rGs/3QnmLny v/7QOhh7Qmyi2Re0RYCbmVD6Kf2kVM8AvWi0MfpMNV1idUHBVouslOdoQH7zZvr0 ers0MdUJ4mUMnAe3B+MFqPPHRF85gLIf8TIqiqsr1SevZ8tVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHZgly1ZgkKwnuf7mD6gRha42BAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTNlMzE5MDctZjRkMC0z NzEyLWI4YmQtNTRiMTY4ZjcwOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFWN0aMgw/mEhCc56ablJPNKJEtROqjl+uLXl2lNUUOCUggwOdGYMFB W5TVR0bprFOzGu5GEcqYpo5NHY0AcjAJw2NfHLY5HV3ebMJEB+GMM4Zch1oq7rlO DNjMvIdOxvABKCO8luDvH15E39simNzI2oBjcplC4CduERDeNW21HGrGgwgFG2np QyscAILQbEq65O5luySg5iCAT46bH+3/gWRzEYC4yoGhAP/fEI++9FfMYw00WHqb sHT4skUVgxYSPKY9heKOHgnGqbLktpqyjLeEHkTqQKl8p2M/OkjGKqtIipcuXP6c E9bDvgYPqEg/mChJntVbGNveMk5EoyA= -----END CERTIFICATE-----Generated at Sat Sep 26 06:54:46 2026 by rpki-client