$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa File: 894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa (raw, json) Hash identifier: WZC3pgaDEPQcHD3etb1Fsj17z6BDJQBFb0yM5k1vseg= Subject key identifier: 44:F5:D5:A9:2D:F3:20:BD:C9:2F:F6:84:47:74:40:BC:74:53:2E:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7920ABDB37ABBFB37C25680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:0a:bd:b3:7a:bb:fb:37:c2:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3c8b23dc-a2d0-4406-84df-f6ca385993f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:50:df:88:3a:bd:54:18:7e:2a:13:4b:e5: 27:07:a6:79:b7:c4:46:ac:3b:75:05:5d:ab:bd:09: 82:73:dd:58:3f:c5:1c:6c:91:9c:99:fd:ee:d5:3f: e0:91:9f:7f:02:55:05:64:ce:63:06:44:57:f9:47: 3a:b0:48:5e:5f:d6:88:cd:7c:fd:41:20:60:5d:96: bf:2a:77:dc:a7:9e:15:f1:6b:31:32:34:0f:a7:b6: 39:4f:90:ef:d9:fd:32:fc:f8:20:b6:4c:f2:b9:cf: f3:07:77:06:f4:1b:4e:80:de:55:60:07:0c:b2:72: af:ef:37:77:23:d2:01:43:b9:df:04:fa:2e:b6:e2: 48:a5:86:a1:fc:a2:3d:a0:c2:6d:57:30:bd:c1:fa: d6:b5:11:64:67:b2:a8:e1:f6:de:8d:5a:08:1b:b5: fe:06:48:8e:9a:39:38:99:40:5d:bb:33:6c:02:4f: 1a:5f:98:75:03:be:22:ce:3e:02:2c:b0:da:6f:23: 59:19:26:a4:1a:80:64:98:8e:ea:f2:32:d8:98:3d: dc:b4:e6:85:b8:6a:b2:81:e3:c0:88:62:89:29:47: a9:e1:98:a0:a0:8c:3f:25:22:57:e2:cf:65:75:94: c3:89:95:12:4d:d8:5a:c2:02:bb:ca:41:71:e6:5f: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F5:D5:A9:2D:F3:20:BD:C9:2F:F6:84:47:74:40:BC:74:53:2E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/894b93e7-22a5-36b7-95e5-cb8fa97a4f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:98:bf:da:4b:60:af:3d:fc:ec:02:50:07:db:e4:0c:c7:18: 60:4b:c3:5d:c0:b5:b0:b2:52:c8:7a:2a:09:f2:2e:6f:5f:a6: c8:b6:27:5c:2a:d1:19:ca:09:5f:d3:9f:3a:d1:b0:a1:00:c4: dc:11:e6:5a:35:63:73:18:96:b5:0d:60:49:8e:d9:ce:da:7e: 71:a4:eb:a7:a9:57:83:78:fb:e5:65:a7:6e:88:54:5f:86:94: f8:51:1d:d5:3d:b5:ba:a1:59:4b:8c:da:39:2a:bd:94:1b:62: 5b:a6:ce:d5:88:c3:ae:eb:d6:61:91:90:f5:83:52:22:bf:79: cb:16:84:ec:e4:0d:e0:34:97:99:06:99:23:74:99:5d:7a:8e: ab:02:f6:ce:c9:74:46:a8:64:81:9c:c7:c7:4f:cf:ca:96:a4: 90:31:51:0a:58:39:06:66:14:20:40:ae:31:6b:36:f7:ab:08: c0:87:97:53:19:e1:d1:af:6f:c7:04:a3:6c:73:f1:fa:92:58: 00:8e:cb:d1:ca:3e:a0:f3:e4:a5:f3:ce:94:1c:c9:fd:69:48: 33:0e:79:c4:f4:86:1f:07:e0:50:54:bc:66:05:3a:e7:03:5e: 09:9e:c3:8c:ad:d5:6c:64:22:28:ee:01:d5:d1:05:a8:e5:c7: 08:ba:52:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkgq9s3q7+zfCVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2M4YjIzZGMtYTJkMC00NDA2LTg0ZGYtZjZjYTM4NTk5M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7dQ34g6vVQYfioTS+UnB6Z5t8RGrDt1BV2r vQmCc91YP8UcbJGcmf3u1T/gkZ9/AlUFZM5jBkRX+Uc6sEheX9aIzXz9QSBgXZa/ Knfcp54V8WsxMjQPp7Y5T5Dv2f0y/Pggtkzyuc/zB3cG9BtOgN5VYAcMsnKv7zd3 I9IBQ7nfBPoutuJIpYah/KI9oMJtVzC9wfrWtRFkZ7Ko4fbejVoIG7X+BkiOmjk4 mUBduzNsAk8aX5h1A74izj4CLLDabyNZGSakGoBkmI7q8jLYmD3ctOaFuGqygePA iGKJKUep4ZigoIw/JSJX4s9ldZTDiZUSTdhawgK7ykFx5l/lVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET11akt8yC9yS/2hEd0QLx0Uy41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk0YjkzZTctMjJhNS0z NmI3LTk1ZTUtY2I4ZmE5N2E0ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuYv9pLYK89/OwCUAfb5AzHGGBLw13AtbCyUsh6KgnyLm9fpsi2J1wq 0RnKCV/TnzrRsKEAxNwR5lo1Y3MYlrUNYEmO2c7afnGk66epV4N4++Vlp26IVF+G lPhRHdU9tbqhWUuM2jkqvZQbYlumztWIw67r1mGRkPWDUiK/ecsWhOzkDeA0l5kG mSN0mV16jqsC9s7JdEaoZIGcx8dPz8qWpJAxUQpYOQZmFCBArjFrNverCMCHl1MZ 4dGvb8cEo2xz8fqSWACOy9HKPqDz5KXzzpQcyf1pSDMOecT0hh8H4FBUvGYFOucD Xgmew4yt1WxkIijuAdXRBajlxwi6Uu4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:07:56 2026 by rpki-client