$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa File: 87a46c38-0b2e-3092-98ab-e7574f1b0614.roa (raw, json) Hash identifier: hOMRGphT07rFQdZe8KwliRrugr/l3BMrWqyEQvIFvKI= Subject key identifier: 64:7D:2B:7A:4F:90:9F:BF:B5:29:B0:8A:13:98:96:68:EB:68:35:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CE62CD3EB9BF159DEB806FDCB Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 172.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:d3:eb:9b:f1:59:de:b8:06:fd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=eb5f3534-d3e6-4fbe-8fd3-19f282681a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:91:24:37:e7:63:91:a4:08:5a:8e:e3:a3: f8:06:93:c0:6e:58:d5:52:09:88:aa:0f:f4:dd:a5: c3:08:5a:6c:17:e5:b7:6a:1a:b4:a5:b1:28:cc:e0: 6c:4b:1a:80:a4:95:42:fc:53:8c:1a:e0:a6:22:eb: c1:0f:d6:16:a0:b5:ce:76:78:89:f6:40:b5:a4:3d: 3b:cf:34:27:9e:2f:1a:5f:b7:ef:1f:45:62:1e:6e: 02:2e:df:57:32:99:55:39:9a:17:61:dd:57:45:1d: 22:6d:e4:16:37:d2:90:96:47:2c:2e:19:3c:34:db: 5d:a5:55:bb:76:61:39:44:5a:2d:9f:b8:43:ed:bd: 58:8d:60:c0:77:d8:36:88:b4:b3:b2:dd:5d:e5:fd: 8f:63:28:44:e2:2e:a4:8c:2b:7e:50:99:b9:8b:6c: c4:c5:cf:7c:78:e1:e6:58:0f:69:53:e2:72:02:95: fb:8a:af:ef:8d:15:9b:d2:1e:3b:da:12:de:0d:29: 5a:47:b0:d1:69:ff:79:f9:91:4f:92:56:55:19:01: b9:91:24:d3:fd:ef:9b:25:36:f0:29:02:43:d0:ef: 8b:b2:f2:ca:68:23:87:28:25:22:c2:17:7a:6c:65: 01:cb:bf:f5:fd:14:b9:66:08:28:b6:b8:10:d2:53: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7D:2B:7A:4F:90:9F:BF:B5:29:B0:8A:13:98:96:68:EB:68:35:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:27:5f:43:17:f7:c7:17:5e:92:12:11:a9:10:a5:67:99:5a: 28:1c:de:6c:52:24:08:99:35:74:34:b2:ce:56:1b:a8:b8:02: f5:d9:ff:fa:a8:06:87:07:e5:ad:f6:e8:09:67:e2:b1:12:18: 86:33:3d:5c:ab:2a:0d:3a:5f:5c:95:4b:3d:2f:04:9e:c6:c6: 42:28:ef:7a:30:24:bf:83:d7:15:26:94:83:20:7c:aa:58:cf: 63:bf:71:10:5b:1f:8e:bf:a9:5c:b7:aa:74:f8:38:05:41:fb: 09:5a:3b:93:c7:bb:17:ef:77:76:9c:86:47:3b:30:5f:22:cc: 52:ca:3e:b7:e2:2b:27:dc:3f:79:69:d2:28:c5:78:d1:9e:da: c7:cf:1e:02:95:93:e7:9d:db:b6:5a:60:75:47:bf:a9:c7:48: 92:52:a0:b1:d5:1d:0e:7f:28:9c:ba:da:06:f0:80:58:56:7a: 00:39:d7:b5:f6:f5:26:dd:b6:b4:5a:1e:fd:be:04:aa:27:74: 86:0f:8d:45:f1:73:56:f7:29:9b:8b:58:6f:8a:84:86:44:71: 7c:f3:56:d6:78:a1:de:fe:c5:4a:52:7b:b3:a3:62:c2:02:c6: a4:f5:c0:86:ca:57:af:7e:cb:ed:09:7c:e1:e1:34:19:23:c9: 38:eb:80:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLNPrm/FZ3rgG/cswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZWI1ZjM1MzQtZDNlNi00ZmJlLThmZDMtMTlmMjgyNjgxYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1mRJDfnY5GkCFqO46P4BpPAbljVUgmIqg/0 3aXDCFpsF+W3ahq0pbEozOBsSxqApJVC/FOMGuCmIuvBD9YWoLXOdniJ9kC1pD07 zzQnni8aX7fvH0ViHm4CLt9XMplVOZoXYd1XRR0ibeQWN9KQlkcsLhk8NNtdpVW7 dmE5RFotn7hD7b1YjWDAd9g2iLSzst1d5f2PYyhE4i6kjCt+UJm5i2zExc98eOHm WA9pU+JyApX7iq/vjRWb0h472hLeDSlaR7DRaf95+ZFPklZVGQG5kSTT/e+bJTbw KQJD0O+LsvLKaCOHKCUiwhd6bGUBy7/1/RS5ZggotrgQ0lMpfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR9K3pPkJ+/tSmwihOYlmjraDWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdhNDZjMzgtMGIyZS0z MDkyLTk4YWItZTc1NzRmMWIwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFInX0MX98cXXpISEakQpWeZWigc3mxSJAiZNXQ0ss5WG6i4AvXZ//qo BocH5a326Aln4rESGIYzPVyrKg06X1yVSz0vBJ7GxkIo73owJL+D1xUmlIMgfKpY z2O/cRBbH46/qVy3qnT4OAVB+wlaO5PHuxfvd3achkc7MF8izFLKPrfiKyfcP3lp 0ijFeNGe2sfPHgKVk+ed27ZaYHVHv6nHSJJSoLHVHQ5/KJy62gbwgFhWegA517X2 9SbdtrRaHv2+BKondIYPjUXxc1b3KZuLWG+KhIZEcXzzVtZ4od7+xUpSe7OjYsIC xqT1wIbKV69+y+0JfOHhNBkjyTjrgG4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:47 2026 by rpki-client