$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa File: 7055a96f-f858-3768-bc22-8014d46b2b9b.roa (raw, json) Hash identifier: E4rVVc4G8AqNKInPTJl4+ouKdOpW/E8jDphcHALK6io= Subject key identifier: E4:FE:32:F4:93:82:8B:87:95:ED:80:1B:B8:04:12:53:4A:85:1C:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629308175E8A103DEDC01900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 172.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:08:17:5e:8a:10:3d:ed:c0:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0c8b931d-d7db-4ba8-8621-d680e1c64716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fd:00:e1:09:24:7c:3c:cb:66:e5:09:bb:78: 92:48:f2:a2:ff:3f:d1:a1:89:22:1d:4f:d6:25:e1: 81:42:c2:d2:4c:ef:63:9c:29:16:eb:01:fd:54:27: bd:b6:b4:08:b5:e6:08:1d:fa:11:42:2c:d1:d3:6b: 0a:0b:f3:8b:07:5b:6c:3d:e4:fb:da:15:8e:76:ae: 11:9e:93:d6:01:50:ef:1e:3e:6c:c1:bd:b1:ea:bd: c6:5a:94:20:71:c5:2f:bc:ae:ad:99:4b:c8:59:0a: f0:8f:bf:18:03:ea:21:33:10:71:e5:d6:33:21:d3: 9b:fd:73:38:1b:dc:6a:fd:31:75:41:e9:4e:9a:8e: 48:c5:96:cc:e0:00:14:34:49:27:d0:87:64:77:4f: e8:c6:0d:62:cf:a8:1d:75:6a:60:d3:a6:4d:3a:b1: a8:63:fe:06:63:45:c5:6c:8b:bf:2d:1f:9f:88:86: ae:51:82:09:43:1c:f6:9c:1c:7f:21:61:d6:af:07: 5a:3a:d0:78:3a:c5:f5:b7:ca:bd:29:4e:7d:2b:63: 67:b5:e2:96:53:89:48:0c:ab:0c:25:b1:b2:41:93: 8e:47:74:e4:c9:6e:74:8f:72:d7:6a:2e:75:61:9b: 4f:62:40:81:48:ff:81:4e:73:4d:bd:3c:8d:3a:2c: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:32:F4:93:82:8B:87:95:ED:80:1B:B8:04:12:53:4A:85:1C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7055a96f-f858-3768-bc22-8014d46b2b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c6:d9:96:66:80:b5:e8:73:e2:ab:3e:ea:af:4d:62:c1:db: aa:49:46:9c:8f:dc:90:49:11:5b:2d:1e:e1:3d:e3:a0:c3:74: 00:d8:94:1c:18:58:64:e3:60:e5:ce:fb:69:8b:97:67:29:86: 58:58:94:5b:c7:81:2b:31:4f:c6:b6:e6:69:8d:95:17:db:ad: 05:4d:41:1f:ab:77:a9:44:d4:e5:1e:ee:16:eb:9d:73:0c:70: 1f:32:9c:82:c0:1e:ca:c7:ef:86:8c:9d:06:fe:d1:8d:02:9d: 2b:9a:ed:60:82:ea:64:fd:9d:bb:af:de:59:2e:03:6f:8a:e7: 32:f2:0c:25:2e:e3:92:9c:fb:53:8a:c7:7a:2c:7a:96:c3:62: de:2d:2e:07:4f:c8:1b:95:a7:cf:9a:87:9c:bb:8a:57:2f:a1: ce:df:5b:61:72:5b:92:b8:fe:d9:bf:93:40:70:97:51:53:22: c9:26:65:67:30:aa:f2:d6:05:47:f5:a6:69:d1:31:2a:6d:74: 1d:22:23:71:f9:9e:b1:4c:e4:e2:8a:d9:c3:09:8f:41:d2:a5: 88:23:31:ae:48:ee:61:3b:e6:71:62:57:de:56:43:af:b3:02: e5:77:10:7f:0d:b6:e4:8d:a0:21:62:67:fd:7b:aa:47:f7:cf: a6:aa:07:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwgXXooQPe3AGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGM4YjkzMWQtZDdkYi00YmE4LTg2MjEtZDY4MGUxYzY0NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/0A4QkkfDzLZuUJu3iSSPKi/z/RoYkiHU/W JeGBQsLSTO9jnCkW6wH9VCe9trQIteYIHfoRQizR02sKC/OLB1tsPeT72hWOdq4R npPWAVDvHj5swb2x6r3GWpQgccUvvK6tmUvIWQrwj78YA+ohMxBx5dYzIdOb/XM4 G9xq/TF1QelOmo5IxZbM4AAUNEkn0Idkd0/oxg1iz6gddWpg06ZNOrGoY/4GY0XF bIu/LR+fiIauUYIJQxz2nBx/IWHWrwdaOtB4OsX1t8q9KU59K2NnteKWU4lIDKsM JbGyQZOOR3TkyW50j3LXai51YZtPYkCBSP+BTnNNvTyNOizJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT+MvSTgouHle2AG7gEElNKhRwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzA1NWE5NmYtZjg1OC0z NzY4LWJjMjItODAxNGQ0NmIyYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXG2ZZmgLXoc+KrPuqvTWLB26pJRpyP3JBJEVstHuE946DDdADYlBwY WGTjYOXO+2mLl2cphlhYlFvHgSsxT8a25mmNlRfbrQVNQR+rd6lE1OUe7hbrnXMM cB8ynILAHsrH74aMnQb+0Y0CnSua7WCC6mT9nbuv3lkuA2+K5zLyDCUu45Kc+1OK x3osepbDYt4tLgdPyBuVp8+ah5y7ilcvoc7fW2FyW5K4/tm/k0Bwl1FTIskmZWcw qvLWBUf1pmnRMSptdB0iI3H5nrFM5OKK2cMJj0HSpYgjMa5I7mE75nFiV95WQ6+z AuV3EH8NtuSNoCFiZ/17qkf3z6aqB3g= -----END CERTIFICATE-----Generated at Thu Nov 5 17:27:24 2026 by rpki-client