$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json) Hash identifier: PrsI2y0ccr1LSAAZ7ijiVrKGsyEm9E0+C89074qukCQ= Subject key identifier: B5:3E:C3:85:34:90:6F:16:18:B4:6D:10:DC:2A:0F:76:1C:34:3B:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629307F4B0EC931640934A40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:f4:b0:ec:93:16:40:93:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=dcf5a3e5-33b8-4f3b-821c-a9a71bef50c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:97:60:f7:c2:63:13:28:f5:a5:01:b6:a3: 76:04:8d:b0:dc:ef:31:5c:58:dc:3f:bc:f2:a4:97: 03:20:79:3b:90:c4:5f:a3:9a:0e:e0:2a:91:4c:e7: f5:fc:5d:73:ac:13:94:cf:00:d9:f2:44:0c:e0:12: 7b:8c:75:a4:1d:10:ff:bf:cd:28:bd:8a:3f:f5:10: a6:c7:96:05:23:17:4c:40:b4:83:0b:0f:e0:6f:3d: 5c:08:3b:e2:9b:41:4a:aa:fd:cb:5f:5f:7f:4f:7a: aa:09:f4:39:7a:8e:bd:5c:cf:c4:30:4f:41:08:af: f6:6c:38:b4:0f:cc:10:bd:e1:39:13:e5:01:14:f9: 3f:a8:0d:c4:37:19:1f:50:76:6d:c3:d6:4c:97:87: 57:fc:01:3a:13:78:a8:01:5a:5c:f5:29:bf:4f:f3: 17:71:05:d8:99:89:7a:63:6e:2f:34:7b:be:c2:0e: 41:42:78:d7:2a:fa:fe:83:23:23:e0:36:8b:9b:51: 52:09:89:cf:9a:b9:d6:b7:92:b0:bd:44:b6:5d:95: 58:70:34:8a:52:69:da:ac:b6:cb:45:e0:e1:d5:65: 6f:90:76:d5:0c:1f:d7:0d:9b:7a:e5:b9:7b:6c:b7: 3c:a1:7b:9d:2c:5d:8e:8c:59:3f:37:f5:c7:84:df: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3E:C3:85:34:90:6F:16:18:B4:6D:10:DC:2A:0F:76:1C:34:3B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6d:c4:5e:e6:21:e1:db:7c:72:f4:18:75:cb:32:69:c3:90: 02:7d:e2:73:fe:90:32:14:9c:70:2c:d2:3f:04:52:0b:4f:06: 7e:73:e0:76:cd:56:b7:bc:25:92:00:01:94:77:52:32:59:ca: fc:fe:c6:55:1d:68:72:73:04:a6:7f:eb:bd:96:33:0e:cf:2d: 47:7b:50:67:55:6a:91:fc:6e:e6:2b:d2:ed:5e:15:ab:03:cd: 6f:4c:f5:23:bf:2a:68:6c:99:9f:81:07:27:96:8f:9b:e3:4b: 2f:5c:d9:db:e2:66:1d:2e:07:8c:2b:9a:2e:34:ec:a7:e6:72: 70:5e:5f:36:2b:8c:47:bb:7a:00:08:01:32:79:70:a1:8e:56: 41:75:4d:99:41:01:10:15:06:63:a8:61:81:63:57:01:27:1a: ee:60:b6:d2:7b:0c:84:07:e0:b7:f9:48:22:69:ea:26:a9:80: 79:e7:c1:5e:ab:ff:f9:fe:e1:3b:2e:11:d9:5d:6a:3c:8d:ad: d1:12:65:6a:3f:96:be:61:e0:1c:c0:a3:e6:c4:c5:88:f7:4a: 6c:02:57:a4:ee:cc:01:21:0d:cf:d4:ae:a9:54:62:59:30:ae: 68:92:ca:2b:cb:21:78:e9:70:50:59:95:7d:09:08:a3:0a:5f: 94:92:36:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwf0sOyTFkCTSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZGNmNWEzZTUtMzNiOC00ZjNiLTgyMWMtYTlhNzFiZWY1MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAeXYPfCYxMo9aUBtqN2BI2w3O8xXFjcP7zy pJcDIHk7kMRfo5oO4CqRTOf1/F1zrBOUzwDZ8kQM4BJ7jHWkHRD/v80ovYo/9RCm x5YFIxdMQLSDCw/gbz1cCDvim0FKqv3LX19/T3qqCfQ5eo69XM/EME9BCK/2bDi0 D8wQveE5E+UBFPk/qA3ENxkfUHZtw9ZMl4dX/AE6E3ioAVpc9Sm/T/MXcQXYmYl6 Y24vNHu+wg5BQnjXKvr+gyMj4DaLm1FSCYnPmrnWt5KwvUS2XZVYcDSKUmnarLbL ReDh1WVvkHbVDB/XDZt65bl7bLc8oXudLF2OjFk/N/XHhN+aSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU+w4U0kG8WGLRtENwqD3YcNDv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhmMzZkOTItNDc5OS0z ZTcxLWFjMjYtNGY4OTczOTMyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhtxF7mIeHbfHL0GHXLMmnDkAJ94nP+kDIUnHAs0j8EUgtPBn5z4HbN Vre8JZIAAZR3UjJZyvz+xlUdaHJzBKZ/672WMw7PLUd7UGdVapH8buYr0u1eFasD zW9M9SO/KmhsmZ+BByeWj5vjSy9c2dviZh0uB4wrmi407KfmcnBeXzYrjEe7egAI ATJ5cKGOVkF1TZlBARAVBmOoYYFjVwEnGu5gttJ7DIQH4Lf5SCJp6iapgHnnwV6r //n+4TsuEdldajyNrdESZWo/lr5h4BzAo+bExYj3SmwCV6TuzAEhDc/UrqlUYlkw rmiSyivLIXjpcFBZlX0JCKMKX5SSNkI= -----END CERTIFICATE-----Generated at Thu Nov 5 17:27:12 2026 by rpki-client