$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa File: 856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa (raw, json) Hash identifier: vpQAkZU1wlEfNZPPQYpuU1QVYUPe1MLGNuT2oajXqcc= Subject key identifier: E4:4F:66:EC:24:F4:FA:1D:ED:39:4B:95:02:1C:EA:61:7A:5D:BF:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CB3EC664F98F55B5D9592A580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:ec:66:4f:98:f5:5b:5d:95:92:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=96e6bca8-356f-45bc-a2db-a7ef77ed8412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:6b:c1:10:17:0a:33:cb:71:44:d4:b3:ac: 99:cb:3f:e6:74:7d:8a:fc:6d:c9:ae:b6:7d:3e:4b: 31:e6:d4:e9:68:91:eb:02:e6:40:bf:65:71:b8:a9: d4:2a:b9:07:fc:13:8d:f3:89:2d:77:e8:8a:dc:45: 59:8a:cb:ed:ec:12:09:3e:c3:a2:40:40:27:fd:c8: f0:b5:8b:18:3d:d0:c7:38:85:f9:81:62:bc:37:9f: 4d:92:61:74:8d:8d:96:03:87:5a:67:05:ce:b1:2e: aa:3b:2b:ac:84:80:96:77:1b:08:41:2f:05:ee:3c: 28:29:1b:79:ac:e9:fa:55:ba:29:4c:41:9f:4d:51: 57:97:20:26:61:27:c5:7d:5d:6f:c6:d3:f2:53:87: 62:89:77:a6:e0:24:15:b7:d5:5f:be:d6:d2:0c:a6: d1:9c:37:b8:fa:1a:d7:2a:e9:e0:9b:d9:e6:05:01: 57:a8:c7:62:b4:0e:81:80:82:7b:88:38:54:40:b1: 25:6a:0c:91:05:bd:0f:92:c2:f9:70:da:3b:e3:fd: 68:16:43:e2:32:1a:8d:d5:a8:9d:c2:e2:b7:e1:56: cc:3d:bb:5a:91:d0:f5:b5:40:07:93:37:bb:94:c3: 97:5a:b9:ee:35:d6:0e:6e:6c:3f:11:87:57:c4:9d: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4F:66:EC:24:F4:FA:1D:ED:39:4B:95:02:1C:EA:61:7A:5D:BF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2a:f1:49:5a:3d:e6:23:2f:b4:5f:16:90:13:8f:de:50:39: e2:9a:55:3e:52:33:28:89:1f:55:33:b1:55:fa:95:c9:2b:56: 74:9f:a7:58:86:21:bd:25:6f:c0:77:62:58:c6:38:37:94:a9: 10:47:b0:2f:9a:b1:4b:3d:62:5f:f6:dd:a9:df:09:9f:a0:87: de:3c:20:95:9b:46:62:a6:54:21:75:03:2c:4a:09:a4:17:b1: 85:65:8c:b1:2f:30:d9:1d:ec:0f:37:6c:8d:39:7f:47:e3:6f: 90:3f:8e:86:c4:bc:bc:4b:81:75:87:1b:1c:1f:10:a0:6d:aa: fb:c5:52:2a:08:ce:dd:53:03:fb:1f:d8:2e:f1:a5:c2:cf:3c: dd:cb:a4:93:d2:db:82:79:ec:f0:fa:07:52:54:ee:28:98:13: 82:4c:24:58:2c:ae:68:d8:16:cd:dc:55:ea:74:d4:31:e1:a7: 26:1e:4a:3b:c2:d2:a3:95:b0:d3:0f:54:83:36:34:d4:6d:40: c2:26:b3:fe:e9:ff:ac:21:fb:13:b4:e2:e9:a5:b9:00:33:ed: c5:2e:72:31:4d:7c:eb:ad:aa:4b:62:5c:0b:d1:d4:92:0b:7f: e8:6a:7c:d1:4c:67:7d:03:88:87:ae:c4:d6:0f:85:61:b8:7b: 01:04:f6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GZPmPVbXZWSpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk OTZlNmJjYTgtMzU2Zi00NWJjLWEyZGItYTdlZjc3ZWQ4NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvatrwRAXCjPLcUTUs6yZyz/mdH2K/G3JrrZ9 Pksx5tTpaJHrAuZAv2VxuKnUKrkH/BON84ktd+iK3EVZisvt7BIJPsOiQEAn/cjw tYsYPdDHOIX5gWK8N59NkmF0jY2WA4daZwXOsS6qOyushICWdxsIQS8F7jwoKRt5 rOn6VbopTEGfTVFXlyAmYSfFfV1vxtPyU4diiXem4CQVt9VfvtbSDKbRnDe4+hrX Kungm9nmBQFXqMditA6BgIJ7iDhUQLElagyRBb0PksL5cNo74/1oFkPiMhqN1aid wuK34VbMPbtakdD1tUAHkze7lMOXWrnuNdYObmw/EYdXxJ1X6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORPZuwk9Pod7TlLlQIc6mF6Xb+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU2YTYyYjMtZWVkYS0z YWNkLWI3ZDUtYmU3ZDhhOWY5Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAq8UlaPeYjL7RfFpATj95QOeKaVT5SMyiJH1UzsVX6lckrVnSfp1iG Ib0lb8B3YljGODeUqRBHsC+asUs9Yl/23anfCZ+gh948IJWbRmKmVCF1AyxKCaQX sYVljLEvMNkd7A83bI05f0fjb5A/jobEvLxLgXWHGxwfEKBtqvvFUioIzt1TA/sf 2C7xpcLPPN3LpJPS24J57PD6B1JU7iiYE4JMJFgsrmjYFs3cVep01DHhpyYeSjvC 0qOVsNMPVIM2NNRtQMIms/7p/6wh+xO04umluQAz7cUucjFNfOutqktiXAvR1JIL f+hqfNFMZ30DiIeuxNYPhWG4ewEE9rw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:20 2026 by rpki-client