$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa File: 70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa (raw, json) Hash identifier: 3xC0oZbveF4qhcCyMJBz5L3hs1ZZ1o3HjyqBhwl/C4A= Subject key identifier: E7:56:1A:0D:A8:D1:16:95:92:B4:E8:A2:7A:F9:52:BB:18:8E:DA:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F9BCDE8B6E66A76C4D27833C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 15169 IP address blocks: 172.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e8:b6:e6:6a:76:c4:d2:78:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=55627342-2a5c-43d6-a392-4501d438e004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:a5:23:12:ae:93:17:f7:e7:b8:59:40:ea: 3d:b6:26:8b:ff:9c:a3:8d:ff:5d:3e:c6:df:b0:1b: 27:67:29:ae:f9:30:c6:17:91:d4:eb:88:f2:f7:ef: 7f:a0:f8:1c:8d:75:af:f1:f2:77:d2:d2:e8:a0:83: d3:93:a4:f0:75:ec:10:e9:20:fa:76:5b:2c:0b:52: 1b:e2:93:d7:fe:56:14:4d:ae:5b:09:b4:b2:97:d6: 0d:34:cd:8d:d1:2c:d2:4d:a3:51:1c:4b:f3:96:c6: 36:05:7f:5d:c1:48:17:21:4e:cc:1e:02:56:9f:ce: 5b:eb:73:c8:27:3b:a8:74:5b:b9:9c:a0:da:69:97: f6:fd:f4:d0:c2:2a:07:44:a5:8b:59:e0:b4:4b:0a: 84:54:06:07:90:0c:9e:43:6c:62:83:c6:a7:a1:e6: fe:7e:84:8f:b7:4d:e9:96:ce:4b:4b:57:e9:d9:d7: 17:a3:98:fe:b3:53:d5:38:4d:ff:09:2d:7a:33:48: a2:2e:cf:34:94:1c:76:8a:8b:5d:6f:d9:cc:9d:36: f9:53:f2:75:84:47:54:a3:db:dd:e6:ef:24:95:2e: 11:84:a4:b7:5e:d8:8d:e0:7b:2b:6f:ff:e6:13:e4: f2:79:ea:c7:b0:fe:eb:ac:15:b5:22:db:75:8b:dc: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:56:1A:0D:A8:D1:16:95:92:B4:E8:A2:7A:F9:52:BB:18:8E:DA:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70d7a549-1b7e-3158-84b1-376dbfc20c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ee:54:ec:e1:c4:5a:d4:ae:98:35:d5:0b:cd:e9:bf:61:f6: 67:fa:aa:46:84:8a:5a:8b:2b:22:90:e2:5c:6a:3b:9c:a5:29: c9:30:9b:42:17:58:e7:13:cb:0d:4e:f8:11:c7:93:2a:25:68: d7:59:19:87:81:85:e7:13:51:96:0e:d5:fe:ee:a0:60:75:16: 36:bd:23:1e:f8:82:ed:9d:f0:21:aa:07:be:4f:31:ce:28:28: a2:d6:32:fe:ce:31:a6:6e:5b:f3:31:21:b3:6e:f5:d3:43:5e: 5f:ad:64:28:8d:b1:99:f1:db:bc:49:b9:ac:46:97:42:dc:d0: f4:1a:d7:9b:b5:c3:63:35:69:03:d8:c3:5c:73:52:11:26:6a: 47:e5:bc:ea:8e:07:3f:eb:ca:74:73:b0:85:85:02:15:14:6a: 91:78:13:c4:4f:93:2a:b6:c2:9a:1e:53:01:1d:63:78:8a:fa: d0:8e:62:77:38:04:56:62:f3:c0:62:6e:f8:48:d8:98:9c:4d: b2:9d:74:a6:d3:d0:0f:3e:b6:e9:3d:f4:70:45:14:c7:ce:1b: 37:e0:ff:5a:45:96:15:33:8a:f0:d7:b0:e2:9d:4c:2a:a0:47: 6e:4e:d6:58:ca:d2:f1:ad:aa:1b:7d:4d:af:7f:da:5f:5f:fa: fe:91:92:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzei25mp2xNJ4M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NTU2MjczNDItMmE1Yy00M2Q2LWEzOTItNDUwMWQ0MzhlMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPGlIxKukxf357hZQOo9tiaL/5yjjf9dPsbf sBsnZymu+TDGF5HU64jy9+9/oPgcjXWv8fJ30tLooIPTk6TwdewQ6SD6dlssC1Ib 4pPX/lYUTa5bCbSyl9YNNM2N0SzSTaNRHEvzlsY2BX9dwUgXIU7MHgJWn85b63PI JzuodFu5nKDaaZf2/fTQwioHRKWLWeC0SwqEVAYHkAyeQ2xig8anoeb+foSPt03p ls5LS1fp2dcXo5j+s1PVOE3/CS16M0iiLs80lBx2iotdb9nMnTb5U/J1hEdUo9vd 5u8klS4RhKS3XtiN4Hsrb//mE+TyeerHsP7rrBW1Itt1i9yW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdWGg2o0RaVkrToonr5UrsYjtr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBkN2E1NDktMWI3ZS0z MTU4LTg0YjEtMzc2ZGJmYzIwYzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInuVOzhxFrUrpg11QvN6b9h9mf6qkaEilqLKyKQ4lxqO5ylKckwm0IX WOcTyw1O+BHHkyolaNdZGYeBhecTUZYO1f7uoGB1Fja9Ix74gu2d8CGqB75PMc4o KKLWMv7OMaZuW/MxIbNu9dNDXl+tZCiNsZnx27xJuaxGl0Lc0PQa15u1w2M1aQPY w1xzUhEmakflvOqOBz/rynRzsIWFAhUUapF4E8RPkyq2wpoeUwEdY3iK+tCOYnc4 BFZi88BibvhI2JicTbKddKbT0A8+tuk99HBFFMfOGzfg/1pFlhUzivDXsOKdTCqg R25O1ljK0vGtqht9Ta9/2l9f+v6RkgA= -----END CERTIFICATE-----Generated at Thu Nov 5 19:50:12 2026 by rpki-client