$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa File: 8c008d44-98e9-3f98-b352-39572488247b.roa (raw, json) Hash identifier: wQlxl9duYkfEveFwBF9uEi6wuUh8BwDFznU2Z2GnA4A= Subject key identifier: A5:06:26:C8:90:8A:75:0F:DF:B9:2A:81:AB:96:E7:F9:13:CC:9B:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC7B371AD8AD96B952100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c7:b3:71:ad:8a:d9:6b:95:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=f4e6deed-c300-4c8b-bd3b-4a2b74fa008c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:fe:ff:ee:80:ba:df:02:0d:d1:70:ee:4d: 55:0b:02:b5:b0:32:d9:a5:71:9a:35:68:d3:aa:fe: d8:7e:a9:24:23:78:a8:d3:81:3e:a7:8a:8b:92:fd: 3f:a8:63:e7:6a:19:b2:a4:00:f3:99:bd:00:ac:a8: d9:01:71:51:20:48:e4:65:32:af:69:55:72:17:4a: db:67:c7:10:5a:6d:da:3e:ea:c1:0e:cd:71:d0:88: c4:55:f3:b2:89:ed:c2:1d:4c:cb:85:80:07:21:2a: 0f:8e:09:e3:46:65:9e:1b:f4:d6:44:36:c3:6c:44: 30:5c:de:71:1f:7b:8b:3c:38:5e:97:ad:fb:d0:bf: be:f7:46:d8:f6:1c:3e:2f:7a:77:0f:61:ff:29:5d: f2:de:d3:dd:8f:b8:17:59:0b:73:5a:53:99:9a:0e: ef:26:b7:d0:29:39:cd:35:99:e2:bb:84:60:54:60: 8e:a3:32:86:70:0c:ab:58:36:e5:2c:8e:bd:0a:f3: 76:24:fa:2e:75:14:20:43:39:ce:85:73:a7:9f:e3: b8:c8:86:55:da:a9:2f:b4:93:85:cc:13:f0:4a:6c: fe:f9:de:fc:56:93:bb:03:8d:a3:7d:93:63:89:ba: ff:82:a0:ac:a6:3d:c3:2b:31:a7:26:75:0a:01:7e: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:06:26:C8:90:8A:75:0F:DF:B9:2A:81:AB:96:E7:F9:13:CC:9B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f8:df:f2:1f:44:52:f2:8b:bb:54:15:27:0c:86:ef:7f:45: 3b:a1:76:1c:f8:d2:89:6f:31:b0:c1:d1:75:36:42:9c:0b:50: 10:a7:bb:0c:e9:c8:87:73:79:54:ce:aa:52:a3:02:c2:c1:a2: 60:2a:06:8b:6b:1b:d9:72:89:e4:f6:c3:b4:0b:11:b3:27:cd: 0a:8c:03:f8:d5:b3:81:71:bf:51:74:c3:c9:19:c2:06:b2:a2: 4c:bb:eb:95:51:ff:6c:17:87:ab:2a:e1:fd:ac:23:15:f8:c3: f8:3e:ea:67:54:e5:95:28:0e:ea:24:c4:c7:c5:70:6b:36:12: 8d:48:fd:dc:fe:31:99:df:75:3e:c6:6d:de:b3:3d:d5:d2:6d: 2a:b2:55:b9:ba:66:9e:8f:53:14:fd:e8:33:1d:ef:7e:a7:40: ae:57:26:fa:20:b6:58:8b:63:cb:55:51:37:93:47:e8:28:d9: 9a:99:58:b5:f9:6e:50:ee:e4:53:4a:df:30:b9:9e:c1:33:b4: 99:93:2e:5f:41:89:e1:04:bb:c9:c3:d4:ab:f6:77:e8:65:64: 67:dd:62:bd:bf:cb:70:72:ba:b0:b7:6e:10:af:5d:b3:c4:71: f0:fc:b6:7b:20:7a:cc:3d:5a:7c:e0:64:06:d0:66:30:b3:03: 9b:6e:f6:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8ezca2K2WuVIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZjRlNmRlZWQtYzMwMC00YzhiLWJkM2ItNGEyYjc0ZmEwMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunj+/+6Aut8CDdFw7k1VCwK1sDLZpXGaNWjT qv7YfqkkI3io04E+p4qLkv0/qGPnahmypADzmb0ArKjZAXFRIEjkZTKvaVVyF0rb Z8cQWm3aPurBDs1x0IjEVfOyie3CHUzLhYAHISoPjgnjRmWeG/TWRDbDbEQwXN5x H3uLPDhel6370L++90bY9hw+L3p3D2H/KV3y3tPdj7gXWQtzWlOZmg7vJrfQKTnN NZniu4RgVGCOozKGcAyrWDblLI69CvN2JPoudRQgQznOhXOnn+O4yIZV2qkvtJOF zBPwSmz++d78VpO7A42jfZNjibr/gqCspj3DKzGnJnUKAX7UoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUGJsiQinUP37kqgauW5/kTzJtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGMwMDhkNDQtOThlOS0z Zjk4LWIzNTItMzk1NzI0ODgyNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/43/IfRFLyi7tUFScMhu9/RTuhdhz40olvMbDB0XU2QpwLUBCnuwzp yIdzeVTOqlKjAsLBomAqBotrG9lyieT2w7QLEbMnzQqMA/jVs4Fxv1F0w8kZwgay oky765VR/2wXh6sq4f2sIxX4w/g+6mdU5ZUoDuokxMfFcGs2Eo1I/dz+MZnfdT7G bd6zPdXSbSqyVbm6Zp6PUxT96DMd736nQK5XJvogtliLY8tVUTeTR+go2ZqZWLX5 blDu5FNK3zC5nsEztJmTLl9BieEEu8nD1Kv2d+hlZGfdYr2/y3ByurC3bhCvXbPE cfD8tnsgesw9WnzgZAbQZjCzA5tu9oc= -----END CERTIFICATE-----Generated at Sat Jun 13 14:02:42 2026 by rpki-client