$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa File: 8c008d44-98e9-3f98-b352-39572488247b.roa (raw, json) Hash identifier: 1ykyO+HjFwYgenzfyKoNfCzPvd/cHp2Gt/XekWnr6T0= Subject key identifier: CE:D3:99:57:10:15:1C:EA:B2:CD:63:C5:B4:3E:4D:53:74:4B:76:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EB4805034EC51724D5C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:b4:80:50:34:ec:51:72:4d:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=95d09f17-e882-4e66-9a85-cc85cc9cb2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:1c:0c:87:74:ab:68:17:43:69:ad:e9:52: 79:67:8b:67:b9:80:a7:ce:f8:c1:a7:e9:94:00:0d: 38:d6:70:85:a9:81:e2:7d:ac:84:76:43:97:34:c3: fc:6a:6c:ce:1c:33:5b:31:55:c5:27:65:f2:82:35: b3:4e:05:ec:80:e0:7f:ec:58:57:49:78:40:41:53: 53:62:ec:84:83:d7:d1:04:e8:99:8a:35:37:03:73: 70:81:16:1b:e6:da:54:c6:ae:98:dd:2f:e7:d1:02: e4:f2:3d:59:01:e6:0b:70:b9:70:f0:8d:ab:31:5a: 3a:af:2b:0a:f8:2d:b0:ee:4e:ba:40:54:3a:88:07: 3a:f5:cd:99:cb:ff:05:51:b9:c3:6c:e8:10:2d:9e: 4d:57:0f:bf:3c:53:f9:9d:f6:bb:be:7e:ea:5c:c1: a2:98:20:63:06:3b:5a:fe:74:b2:7c:e7:2b:f6:b1: 75:d9:5c:bb:0e:a1:58:1d:a5:54:dc:01:22:fc:74: 0d:00:d4:32:d0:cf:9f:bf:26:ed:f1:fb:80:41:0f: 40:a9:1a:a6:8c:58:ea:b1:7e:6d:c0:7b:27:5b:74: 38:f7:b3:da:5c:74:ce:c2:60:f4:8f:ba:1f:48:21: 23:a3:66:1a:38:31:11:57:53:ef:6d:c4:a8:f9:3f: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D3:99:57:10:15:1C:EA:B2:CD:63:C5:B4:3E:4D:53:74:4B:76:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c008d44-98e9-3f98-b352-39572488247b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:25:71:75:e3:0f:dd:29:04:bf:84:ec:60:c8:4c:75:fc:26: ab:71:f0:74:6a:a8:1b:99:72:c6:3e:e5:69:4a:7b:52:d8:dc: 5a:6c:29:83:c3:88:b1:b9:27:ad:e7:1e:9d:2e:23:2c:01:91: 32:73:8e:46:11:4b:eb:4c:ed:f8:12:4a:af:18:31:dc:fb:83: b8:89:05:62:84:bf:3e:18:9e:db:13:8d:95:f7:1c:ca:ea:b0: dc:56:b4:ed:6c:c6:4d:d3:9a:53:8f:e9:f7:c7:3c:02:43:43: 08:e5:07:0f:32:fd:9a:51:cf:ac:35:56:3f:a0:e5:d9:bb:2d: b5:89:a1:bc:ad:8a:24:b9:70:c9:8b:ad:6b:f4:ab:a3:24:21: 76:8b:89:98:14:6d:c0:ca:7a:33:5d:4a:fc:a6:50:ba:05:8f: 6d:96:9a:79:7e:b6:9b:f9:10:b5:36:9f:2a:d0:35:9e:7e:f0: ec:22:16:99:8f:fb:b7:5a:9f:a6:df:44:76:8a:92:39:8e:6f: fd:07:8c:68:5e:a1:04:61:04:d6:7f:15:2a:fc:86:ae:fd:70: 6a:66:34:48:b2:ef:47:52:00:66:5a:16:4f:2e:14:31:30:b4: d2:15:4d:33:d8:fd:2c:c5:a6:d1:9e:33:33:40:36:61:80:e3: 89:c9:fb:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnrSAUDTsUXJNXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTVkMDlmMTctZTg4Mi00ZTY2LTlhODUtY2M4NWNjOWNiMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijEcDId0q2gXQ2mt6VJ5Z4tnuYCnzvjBp+mU AA041nCFqYHifayEdkOXNMP8amzOHDNbMVXFJ2XygjWzTgXsgOB/7FhXSXhAQVNT YuyEg9fRBOiZijU3A3NwgRYb5tpUxq6Y3S/n0QLk8j1ZAeYLcLlw8I2rMVo6rysK +C2w7k66QFQ6iAc69c2Zy/8FUbnDbOgQLZ5NVw+/PFP5nfa7vn7qXMGimCBjBjta /nSyfOcr9rF12Vy7DqFYHaVU3AEi/HQNANQy0M+fvybt8fuAQQ9AqRqmjFjqsX5t wHsnW3Q497PaXHTOwmD0j7ofSCEjo2YaODERV1PvbcSo+T/1hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7TmVcQFRzqss1jxbQ+TVN0S3bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGMwMDhkNDQtOThlOS0z Zjk4LWIzNTItMzk1NzI0ODgyNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJElcXXjD90pBL+E7GDITHX8Jqtx8HRqqBuZcsY+5WlKe1LY3FpsKYPD iLG5J63nHp0uIywBkTJzjkYRS+tM7fgSSq8YMdz7g7iJBWKEvz4YntsTjZX3HMrq sNxWtO1sxk3TmlOP6ffHPAJDQwjlBw8y/ZpRz6w1Vj+g5dm7LbWJobytiiS5cMmL rWv0q6MkIXaLiZgUbcDKejNdSvymULoFj22Wmnl+tpv5ELU2nyrQNZ5+8OwiFpmP +7dan6bfRHaKkjmOb/0HjGheoQRhBNZ/FSr8hq79cGpmNEiy70dSAGZaFk8uFDEw tNIVTTPY/SzFptGeMzNANmGA44nJ+zc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:32:20 2026 by rpki-client