$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa File: 571948d2-8027-3582-930f-2b7b5ed13980.roa (raw, json) Hash identifier: rKBCV8wpvbebqq3o+uyKGZIAwKRTJB5fffpZhdivXOI= Subject key identifier: 4B:B7:03:F8:DE:E3:45:12:36:51:B1:14:84:B4:CE:85:D4:10:BB:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4AE6F24BB3D31FC57740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 172.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4a:e6:f2:4b:b3:d3:1f:c5:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=269727a6-a25d-4c03-b8c1-572299ecc70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:a3:8f:cb:5f:85:4d:58:86:f6:c5:b4:ee: a0:56:2e:a8:96:98:39:1b:2b:dd:d3:09:58:8b:71: cf:1f:f7:14:3b:96:d0:d6:8c:e4:a3:b6:f3:6d:57: 36:93:e0:12:bf:48:ba:60:13:2e:5f:7b:96:71:66: 99:64:ec:34:4f:fd:4c:ae:cd:a7:3f:73:65:92:63: 37:31:23:69:6d:f5:5d:18:44:f4:31:39:40:3f:64: 60:64:d7:91:ba:c3:71:03:8b:62:2a:ef:4f:2f:0f: 54:47:5d:d5:e4:b9:44:3c:89:53:af:2c:37:5a:68: 78:54:2e:4a:44:92:81:13:7a:52:bd:31:6c:d3:4a: 11:7a:4d:4f:1e:30:f1:db:b3:29:75:50:59:be:80: 62:78:76:af:de:11:59:4f:29:d2:11:9b:4b:14:ca: ef:a7:ed:bd:2c:8d:c1:8d:8a:49:e7:6f:a1:a9:45: 5b:a1:42:45:3c:48:30:2c:34:32:42:76:9f:c5:d7: 21:d5:34:69:1b:27:fc:4a:08:2a:e0:96:16:e9:1e: 81:64:8a:5f:17:6b:31:8c:1c:7f:11:75:dc:83:e1: 1f:ea:47:68:9e:10:11:eb:9c:5b:d3:ad:d9:d5:02: 73:a2:91:ba:55:49:36:b4:f6:09:6e:81:a6:b7:06: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:03:F8:DE:E3:45:12:36:51:B1:14:84:B4:CE:85:D4:10:BB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/571948d2-8027-3582-930f-2b7b5ed13980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:45:10:32:e2:94:7d:89:76:f9:95:54:f3:9a:56:fd:be:73: 44:5b:76:02:fa:b1:7b:83:b7:38:8a:90:f4:f3:79:ba:04:80: 87:3b:a6:32:be:5f:86:56:c8:89:4a:ff:aa:b5:ed:7a:e2:fa: bc:30:48:71:98:b1:f4:8e:28:88:82:2d:60:89:21:a3:8e:53: ee:2d:85:ea:da:7f:8b:81:86:17:9d:18:b9:91:96:89:bd:2f: 17:a9:5e:a8:3f:51:7d:fe:3d:f4:bc:33:a6:64:c7:62:0c:5d: 2e:e4:0d:4f:f8:ab:1b:9b:27:8f:24:0a:58:a1:25:4f:4e:6f: 3c:35:4f:c2:f4:f6:26:8b:a2:aa:41:be:f6:47:6f:a1:21:b4: 89:52:bc:70:f5:7d:05:70:4b:1a:ff:5c:84:a3:c0:3e:ab:64: 6f:eb:86:04:5e:2f:e2:89:22:ae:7b:1a:b0:da:52:4e:0b:4f: 84:54:02:ae:6b:21:d7:fb:27:79:86:db:d3:2a:d7:ab:a2:ca: 73:98:70:1b:0a:4e:41:81:76:d6:43:c2:f9:88:08:69:84:08: 25:3a:02:a8:22:aa:a8:74:e7:25:60:c7:93:48:11:46:27:94: aa:fa:01:6b:3c:bf:6d:16:c0:1a:06:0b:7b:a6:09:19:21:18: 3c:06:e3:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnErm8kuz0x/Fd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjY5NzI3YTYtYTI1ZC00YzAzLWI4YzEtNTcyMjk5ZWNjNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3yjj8tfhU1YhvbFtO6gVi6olpg5Gyvd0wlY i3HPH/cUO5bQ1ozko7bzbVc2k+ASv0i6YBMuX3uWcWaZZOw0T/1Mrs2nP3NlkmM3 MSNpbfVdGET0MTlAP2RgZNeRusNxA4tiKu9PLw9UR13V5LlEPIlTryw3Wmh4VC5K RJKBE3pSvTFs00oRek1PHjDx27MpdVBZvoBieHav3hFZTynSEZtLFMrvp+29LI3B jYpJ52+hqUVboUJFPEgwLDQyQnafxdch1TRpGyf8Sggq4JYW6R6BZIpfF2sxjBx/ EXXcg+Ef6kdonhAR65xb063Z1QJzopG6VUk2tPYJboGmtwYBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu3A/je40USNlGxFIS0zoXUELvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTcxOTQ4ZDItODAyNy0z NTgyLTkzMGYtMmI3YjVlZDEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhFEDLilH2JdvmVVPOaVv2+c0RbdgL6sXuDtziKkPTzeboEgIc7pjK+ X4ZWyIlK/6q17Xri+rwwSHGYsfSOKIiCLWCJIaOOU+4theraf4uBhhedGLmRlom9 LxepXqg/UX3+PfS8M6Zkx2IMXS7kDU/4qxubJ48kClihJU9Obzw1T8L09iaLoqpB vvZHb6EhtIlSvHD1fQVwSxr/XISjwD6rZG/rhgReL+KJIq57GrDaUk4LT4RUAq5r Idf7J3mG29Mq16uiynOYcBsKTkGBdtZDwvmICGmECCU6Aqgiqqh05yVgx5NIEUYn lKr6AWs8v20WwBoGC3umCRkhGDwG474= -----END CERTIFICATE-----Generated at Sat Jun 13 13:35:40 2026 by rpki-client