$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json) Hash identifier: FLpZuk4wmtXYjb+wv+Kox6DQ71xllFqrAiDTIsCnwuM= Subject key identifier: 7E:B7:72:9B:54:BB:84:BC:4C:41:C6:4C:DF:91:C3:B7:D0:4B:7D:7A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD5A498F469126D562AE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 172.253.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5a:49:8f:46:91:26:d5:62:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=180f55ee-e8bf-4155-ac6a-a174a327a5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:db:0a:02:9a:33:17:8e:e8:7a:5b:63:2f: bc:15:0f:51:af:c4:5e:89:70:4a:90:a7:53:a1:60: e8:45:3d:41:e2:a8:c0:0a:73:c5:25:54:6c:fc:dc: d0:6a:fc:b4:dd:56:67:2f:0e:de:5f:d2:25:bc:53: fc:ce:1a:85:46:1c:3e:00:b4:23:db:03:2f:de:b0: 9e:33:52:40:71:9b:36:eb:67:da:f4:28:53:91:7c: 2d:32:d7:ea:61:20:18:7d:99:01:42:6e:58:d7:95: 3b:c0:fc:c1:63:2c:f3:20:51:f1:e0:5a:53:41:bb: 8a:c1:d6:e7:ad:84:8a:45:3c:dc:0f:45:53:9d:28: 49:43:f0:be:82:cd:52:23:77:d7:fc:e0:0d:15:a6: 61:51:dd:b4:04:f8:fb:75:53:ad:54:24:f2:00:16: 20:c7:85:17:4d:5e:72:19:30:86:69:be:ff:63:6b: ff:ee:58:70:e6:a1:a2:61:35:9b:38:b5:5c:d8:71: ec:dc:ab:e0:3c:b7:47:ed:78:b5:2d:b0:e7:35:71: 00:82:a9:8f:d1:3f:c4:99:4a:7b:99:77:19:98:23: 5c:26:41:fa:b0:e0:fa:a3:97:6c:df:93:5b:23:b4: 6b:17:3c:8c:b2:71:7e:df:8e:d7:04:58:f6:35:d4: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B7:72:9B:54:BB:84:BC:4C:41:C6:4C:DF:91:C3:B7:D0:4B:7D:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:41:42:99:a2:85:70:ef:58:e5:72:a1:00:96:d0:33:ad:75: 52:c4:a7:79:95:5f:38:21:9d:8c:1c:71:42:b7:f0:14:eb:fc: 5c:b2:63:07:cd:b1:a3:3b:0f:8e:79:bc:c1:f2:bf:e8:1c:f6: 51:92:85:28:75:fd:29:ab:e4:16:78:19:f2:fe:67:36:2d:a2: c0:2d:e7:ac:d1:61:8b:bc:6f:12:b0:3a:9e:fe:46:04:14:78: a4:7a:5a:bb:9d:16:b0:85:2e:f1:41:bb:12:f0:7e:cd:41:2a: 99:16:1d:51:be:90:fc:30:b0:50:5b:89:34:40:ad:21:b2:f0: 43:fe:44:58:99:56:f1:aa:67:45:a8:7d:ec:87:62:2a:1b:d9: ad:98:6c:a5:f8:8a:b3:0e:7b:08:2e:65:dc:d1:78:91:4a:74: d9:40:ab:25:d9:2f:3a:c9:ba:69:55:9c:d2:86:20:75:51:2d: 6c:8f:b1:fd:42:f1:89:66:ea:03:e0:5a:d5:99:88:6d:ad:86: ca:6f:67:ca:c2:0b:85:11:32:9b:ac:f4:57:2c:28:6d:24:22: da:da:c7:76:4a:b2:41:6f:0f:a6:de:23:6c:05:9a:bc:72:1e: 3b:65:34:2d:e6:93:1f:5d:b5:eb:fa:76:95:ea:40:d3:14:1f: 0d:c0:48:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVpJj0aRJtVirgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTgwZjU1ZWUtZThiZi00MTU1LWFjNmEtYTE3NGEzMjdhNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBTbCgKaMxeO6HpbYy+8FQ9Rr8ReiXBKkKdT oWDoRT1B4qjACnPFJVRs/NzQavy03VZnLw7eX9IlvFP8zhqFRhw+ALQj2wMv3rCe M1JAcZs262fa9ChTkXwtMtfqYSAYfZkBQm5Y15U7wPzBYyzzIFHx4FpTQbuKwdbn rYSKRTzcD0VTnShJQ/C+gs1SI3fX/OANFaZhUd20BPj7dVOtVCTyABYgx4UXTV5y GTCGab7/Y2v/7lhw5qGiYTWbOLVc2HHs3KvgPLdH7Xi1LbDnNXEAgqmP0T/EmUp7 mXcZmCNcJkH6sOD6o5ds35NbI7RrFzyMsnF+347XBFj2NdSY3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH63cptUu4S8TEHGTN+Rw7fQS316MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJBQpmihXDvWOVyoQCW0DOtdVLEp3mVXzghnYwccUK38BTr/FyyYwfN saM7D455vMHyv+gc9lGShSh1/Smr5BZ4GfL+ZzYtosAt56zRYYu8bxKwOp7+RgQU eKR6WrudFrCFLvFBuxLwfs1BKpkWHVG+kPwwsFBbiTRArSGy8EP+RFiZVvGqZ0Wo feyHYiob2a2YbKX4irMOewguZdzReJFKdNlAqyXZLzrJumlVnNKGIHVRLWyPsf1C 8Ylm6gPgWtWZiG2thspvZ8rCC4URMpus9FcsKG0kItrax3ZKskFvD6beI2wFmrxy HjtlNC3mkx9dtev6dpXqQNMUHw3ASFA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:15:00 2025 by rpki-client