$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa File: 7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa (raw, json) Hash identifier: d5HsS1Q5ADvC4X4NdT/4j0wdmvWC1lWdh2tv6z29iV0= Subject key identifier: DE:49:94:A2:D6:7A:D7:C0:58:56:85:8C:F4:08:38:F8:D9:7C:19:5B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F0ED22FDD06DF92C3DAC9FEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2f:dd:06:df:92:c3:da:c9:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=bc791e3c-19a4-46c9-ac41-a9de3a0468fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:31:f7:9e:3f:19:d4:84:b4:a7:9f:66:b9: 33:d3:08:f7:55:d8:ce:97:69:aa:a2:7b:a7:b7:dc: ae:4e:c8:80:62:a4:a3:46:3b:76:95:44:fe:30:fd: 63:86:93:cf:41:53:eb:a3:3b:55:b2:7c:65:3c:e6: a1:6f:a5:27:0e:28:9b:4d:9a:e6:db:06:c1:03:52: 46:50:c9:a2:93:93:b8:30:90:05:70:5f:d1:cc:fb: c4:37:56:ef:68:f1:20:c0:5d:8d:2b:95:1e:53:48: 06:8a:33:77:25:55:f8:8b:64:6b:ab:11:a5:dc:4a: e1:51:c0:28:1d:ca:bd:71:b3:48:0f:af:50:72:11: c2:fe:91:7c:20:5f:b3:73:7b:7d:7f:6a:fa:2b:da: 0d:ad:7a:9f:71:87:67:a7:7f:9f:76:ba:02:7f:c1: 0a:da:90:45:0b:14:90:29:d4:e4:39:60:35:ea:83: 9a:6c:46:e9:e9:21:1a:77:fa:f9:8a:8d:1d:00:6f: 31:0c:04:5a:18:76:03:3c:83:8a:a0:b1:3d:47:50: 77:0f:aa:7e:e6:92:0e:c1:b7:9c:56:7e:8a:38:69: f9:43:bd:c0:7e:da:03:09:f7:5e:b3:d7:75:43:6f: 00:4a:c2:21:be:d0:36:39:bc:25:cd:ea:61:0e:5e: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:49:94:A2:D6:7A:D7:C0:58:56:85:8C:F4:08:38:F8:D9:7C:19:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7ba9db0a-1b6c-3728-bd58-d1fdd95848bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f3:7f:97:cd:42:54:35:94:8f:9e:e1:64:e7:4e:18:26:74: 26:45:0a:55:92:f3:40:ed:ff:07:03:78:d0:71:d0:2c:3c:6a: 6e:08:b3:03:b1:82:d9:8f:e3:0d:43:95:57:3e:3b:96:0d:a3: 25:77:fd:6a:c3:cd:ea:c7:8b:59:b4:bb:33:d5:8b:24:c6:6c: b5:b6:17:ce:26:66:cd:44:86:a9:ee:d3:15:26:7a:da:e6:a6: 61:82:cb:8c:f5:c2:b6:17:10:23:a6:6b:a9:51:5a:b7:cf:e2: cc:86:4e:9d:55:7c:20:4a:df:ba:6b:73:58:bf:2c:0f:52:8b: 70:d6:16:4e:f5:93:62:0f:e6:2c:4c:79:3d:cb:71:cd:0a:5a: 46:94:f7:f6:e0:46:a5:b4:2f:cd:a4:6b:24:9b:3c:48:a3:73: 55:55:68:d6:ea:dc:27:44:42:f8:b4:3d:ea:9f:af:8f:13:f4: 98:f9:e9:f1:ca:72:c5:63:da:a1:c1:67:41:85:86:70:f6:82: 8a:de:7e:dd:a1:e8:0d:85:81:62:f6:15:e9:85:a0:d4:88:2b: c1:e0:67:21:f7:ae:08:c4:c1:24:72:2f:46:83:7c:59:a8:03: a7:f6:82:c7:6b:77:6b:4d:1d:64:e0:6e:38:20:6e:22:73:83: 86:49:9d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0i/dBt+Sw9rJ/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YmM3OTFlM2MtMTlhNC00NmM5LWFjNDEtYTlkZTNhMDQ2OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosEx954/GdSEtKefZrkz0wj3VdjOl2mqonun t9yuTsiAYqSjRjt2lUT+MP1jhpPPQVProztVsnxlPOahb6UnDiibTZrm2wbBA1JG UMmik5O4MJAFcF/RzPvEN1bvaPEgwF2NK5UeU0gGijN3JVX4i2RrqxGl3ErhUcAo Hcq9cbNID69QchHC/pF8IF+zc3t9f2r6K9oNrXqfcYdnp3+fdroCf8EK2pBFCxSQ KdTkOWA16oOabEbp6SEad/r5io0dAG8xDARaGHYDPIOKoLE9R1B3D6p+5pIOwbec Vn6KOGn5Q73AftoDCfdes9d1Q28ASsIhvtA2ObwlzephDl5nawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5JlKLWetfAWFaFjPQIOPjZfBlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2JhOWRiMGEtMWI2Yy0z NzI4LWJkNTgtZDFmZGQ5NTg0OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILzf5fNQlQ1lI+e4WTnThgmdCZFClWS80Dt/wcDeNBx0Cw8am4IswOx gtmP4w1DlVc+O5YNoyV3/WrDzerHi1m0uzPViyTGbLW2F84mZs1Ehqnu0xUmetrm pmGCy4z1wrYXECOma6lRWrfP4syGTp1VfCBK37prc1i/LA9Si3DWFk71k2IP5ixM eT3Lcc0KWkaU9/bgRqW0L82kaySbPEijc1VVaNbq3CdEQvi0Peqfr48T9Jj56fHK csVj2qHBZ0GFhnD2goreft2h6A2FgWL2FemFoNSIK8HgZyH3rgjEwSRyL0aDfFmo A6f2gsdrd2tNHWTgbjggbiJzg4ZJndM= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:29 2026 by rpki-client