$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json) Hash identifier: /QXnh4dMa4EScYXG+OVJcXK/DIkim9ck1bEKMcXD720= Subject key identifier: 76:01:D3:D8:5C:10:91:6A:3F:EA:08:3A:4A:2F:B5:34:55:5B:74:DD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448EABA1C72ACCBFEDA840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8e:ab:a1:c7:2a:cc:bf:ed:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=dbbfe790-e58f-4dad-b265-c7d83cc3877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:04:4a:79:3e:d4:a4:01:d8:48:5a:3d:3b: 42:8f:7d:a5:58:2d:a0:b6:43:93:52:b8:3a:93:65: 3f:11:65:a1:ee:16:d1:82:8a:5c:3e:f9:c5:c8:78: 71:a7:62:77:c6:3d:84:0d:d3:d0:ca:cc:c8:bd:45: b0:b1:d0:e2:b5:11:8d:39:ef:49:be:12:0f:53:c7: d1:41:1b:9f:ee:de:5e:2a:18:0a:82:82:28:c0:20: 2b:96:dc:cc:71:bd:36:8d:5f:48:70:93:06:ee:cf: aa:4b:35:c1:4e:77:ce:6a:27:0f:ec:69:38:54:17: ec:dd:7d:26:82:f4:c0:6f:00:2a:46:04:ee:27:99: 4b:9b:29:4e:b4:32:7e:8a:89:c9:0b:f3:87:1a:ee: b8:ec:90:1e:2b:15:06:31:61:e4:45:30:a6:9c:84: 2d:37:7c:98:d9:0a:ef:39:eb:87:24:d5:d1:8d:f2: 28:de:5b:c5:3e:bc:5a:4f:f2:46:5b:55:7a:1f:08: 58:1f:d0:b3:3f:0a:e1:f5:b5:1b:fb:07:4b:8f:77: 3b:c4:ef:f6:11:d1:36:9d:f0:56:d1:08:f7:e9:22: 4e:de:7f:27:bb:f2:c7:8c:f9:bf:ec:3a:b5:d9:24: a3:64:5b:5e:9f:ab:e9:a2:8e:7b:f3:7c:45:5a:c6: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:01:D3:D8:5C:10:91:6A:3F:EA:08:3A:4A:2F:B5:34:55:5B:74:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:68:58:88:c4:45:fa:84:2a:8e:8e:64:0e:aa:53:2d:79:2c: b8:46:89:aa:c9:00:c0:b9:07:f0:22:a2:3b:e4:be:31:d0:e7: f3:b3:cd:f6:9e:26:ea:23:fe:cc:46:02:d2:36:68:c9:b0:6c: 0e:1e:8e:96:06:1f:ce:c3:64:a0:22:0f:01:d9:62:99:46:cb: c5:81:8d:70:ce:1e:04:64:bd:e0:20:16:6a:88:07:ed:fb:0f: 38:d1:52:be:a1:57:90:32:ee:50:1e:f2:c8:5f:99:db:1a:03: 2d:06:f5:c7:41:86:73:10:17:40:0e:26:8e:32:48:30:ee:a8: 87:9e:92:32:10:4b:d4:ca:87:bc:b2:4e:77:08:ca:59:b0:e6: 30:8a:ff:2b:00:51:d6:e2:5e:ed:61:16:56:6d:20:8c:b1:69: 86:aa:14:83:9f:71:f7:fe:07:f8:70:68:31:e0:0a:fe:7e:01: 7c:62:2d:fe:02:b0:cd:db:9f:2b:cf:c9:ce:ca:e5:ee:57:8f: cf:5f:8c:8f:f3:b9:8b:29:38:bc:ea:26:14:56:8e:9d:0f:67: 07:a3:fb:f1:a3:f2:c7:cf:28:36:65:34:ec:a2:a4:3e:e6:7a: dc:32:89:59:39:40:ca:e8:94:e7:79:af:54:cc:e8:a7:b1:1d: 44:99:25:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI6roccqzL/tqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZGJiZmU3OTAtZTU4Zi00ZGFkLWIyNjUtYzdkODNjYzM4NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYwESnk+1KQB2EhaPTtCj32lWC2gtkOTUrg6 k2U/EWWh7hbRgopcPvnFyHhxp2J3xj2EDdPQyszIvUWwsdDitRGNOe9JvhIPU8fR QRuf7t5eKhgKgoIowCArltzMcb02jV9IcJMG7s+qSzXBTnfOaicP7Gk4VBfs3X0m gvTAbwAqRgTuJ5lLmylOtDJ+ionJC/OHGu647JAeKxUGMWHkRTCmnIQtN3yY2Qrv OeuHJNXRjfIo3lvFPrxaT/JGW1V6HwhYH9CzPwrh9bUb+wdLj3c7xO/2EdE2nfBW 0Qj36SJO3n8nu/LHjPm/7Dq12SSjZFten6vpoo5783xFWsa6eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYB09hcEJFqP+oIOkovtTRVW3TdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhmMzZkOTItNDc5OS0z ZTcxLWFjMjYtNGY4OTczOTMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5oWIjERfqEKo6OZA6qUy15LLhGiarJAMC5B/AiojvkvjHQ5/Ozzfae Juoj/sxGAtI2aMmwbA4ejpYGH87DZKAiDwHZYplGy8WBjXDOHgRkveAgFmqIB+37 DzjRUr6hV5Ay7lAe8shfmdsaAy0G9cdBhnMQF0AOJo4ySDDuqIeekjIQS9TKh7yy TncIylmw5jCK/ysAUdbiXu1hFlZtIIyxaYaqFIOfcff+B/hwaDHgCv5+AXxiLf4C sM3bnyvPyc7K5e5Xj89fjI/zuYspOLzqJhRWjp0PZwej+/Gj8sfPKDZlNOyipD7m etwyiVk5QMrolOd5r1TM6KexHUSZJa8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:45 2026 by rpki-client