$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa File: 935bd29f-5047-300b-b66d-40395de7b976.roa (raw, json) Hash identifier: qcYK5oqn628/hB9KzRFNkOarQlzQBuAv7k1sCEQXV0Y= Subject key identifier: 5A:23:E4:95:2E:0F:4E:4D:65:70:23:B4:08:F4:F5:AD:86:3D:26:E0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD3058C5191E60F91D280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 396982 IP address blocks: 172.253.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d3:05:8c:51:91:e6:0f:91:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ae72589c-becc-4dc5-839b-135fb7ccf425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:e2:20:6b:5c:d9:8c:0f:d7:30:92:18:ff: b3:43:5e:fc:f2:b3:e5:f6:d8:0a:48:7d:32:95:6c: 9b:8a:1a:25:89:0b:6f:af:77:8b:0a:b4:f7:bf:02: e2:62:ee:05:2a:8b:f5:e8:29:4b:b1:cb:27:fe:3e: aa:22:56:84:f0:b8:07:95:c9:dc:ae:07:80:bd:7a: f5:f0:88:57:f6:f2:2b:c2:f5:c8:a3:c1:84:d7:fe: 2b:66:29:c6:e7:57:2a:6e:35:45:98:61:9c:a3:48: cb:68:4d:da:d8:41:66:78:3d:d0:91:64:ab:45:61: b3:5f:56:0f:c2:9f:b3:b3:4a:62:2b:fa:6e:bc:62: cc:36:e8:cc:c7:6b:d3:6a:a5:1c:e6:62:f2:c2:29: e2:ca:fe:6c:ba:ce:f0:2f:d6:26:66:5a:8d:e6:0b: 38:ff:93:27:d9:8a:da:3b:b2:72:67:0a:9c:5f:3a: a0:8d:1d:65:38:7f:55:53:f3:dc:48:5f:18:33:05: 20:3c:7c:03:24:6a:19:f9:1d:e0:86:15:60:85:ff: 81:38:2c:55:0f:c6:00:cf:9f:59:64:6e:dd:c5:f1: c4:b7:6e:43:51:59:bc:56:ff:52:37:2a:f8:84:41: d1:c5:67:fe:29:ee:31:95:e5:e8:0d:8d:e4:50:8d: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:E4:95:2E:0F:4E:4D:65:70:23:B4:08:F4:F5:AD:86:3D:26:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/935bd29f-5047-300b-b66d-40395de7b976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0a:d6:b0:f4:07:08:de:2e:95:61:bd:c6:8b:7f:39:37:0d: a1:e2:ac:1d:a4:27:10:8c:4d:61:6e:d0:1d:95:04:0e:1f:9c: 7a:ed:61:e4:0e:b9:eb:f2:2b:6c:53:3b:d1:8b:b9:7b:93:5f: 42:fe:e5:e7:76:ec:9c:95:d5:a5:35:67:2d:93:ca:13:47:f5: f4:1c:0b:38:1f:14:6a:b7:a4:45:48:90:65:36:49:8f:74:e3: 70:f4:a0:a2:69:4a:b2:ff:4a:06:d5:d6:1d:f3:5c:87:14:08: 37:14:dc:90:de:90:8e:51:94:02:d4:5e:70:66:73:4e:65:cd: 4c:87:b1:45:51:88:43:b6:1e:1e:24:19:e9:1f:1f:f2:2d:ba: fb:d9:5d:3c:2b:5b:0c:15:bd:e2:37:68:69:ee:90:6b:8a:b6: c4:c4:7a:cf:72:a1:41:78:02:c8:b0:42:f0:3f:2a:f9:98:0c: 1d:f1:a6:83:24:80:a2:48:3b:da:cc:24:cb:ea:b9:a0:69:34: 91:c4:92:dd:ef:e8:5b:63:24:5c:d2:a6:97:d2:5a:ba:fd:21: 4a:3d:24:7b:b6:b1:93:fc:2a:eb:a6:64:00:12:c1:d7:4f:74: be:4b:e7:b8:66:b9:95:c7:f5:bd:52:ff:5c:d7:f5:6c:82:db: 59:2b:b1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9MFjFGR5g+R0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWU3MjU4OWMtYmVjYy00ZGM1LTgzOWItMTM1ZmI3Y2NmNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod7iIGtc2YwP1zCSGP+zQ1788rPl9tgKSH0y lWybiholiQtvr3eLCrT3vwLiYu4FKov16ClLscsn/j6qIlaE8LgHlcncrgeAvXr1 8IhX9vIrwvXIo8GE1/4rZinG51cqbjVFmGGco0jLaE3a2EFmeD3QkWSrRWGzX1YP wp+zs0piK/puvGLMNujMx2vTaqUc5mLywiniyv5sus7wL9YmZlqN5gs4/5Mn2Yra O7JyZwqcXzqgjR1lOH9VU/PcSF8YMwUgPHwDJGoZ+R3ghhVghf+BOCxVD8YAz59Z ZG7dxfHEt25DUVm8Vv9SNyr4hEHRxWf+Ke4xleXoDY3kUI1eywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoj5JUuD05NZXAjtAj09a2GPSbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTM1YmQyOWYtNTA0Ny0z MDBiLWI2NmQtNDAzOTVkZTdiOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMK1rD0BwjeLpVhvcaLfzk3DaHirB2kJxCMTWFu0B2VBA4fnHrtYeQO uevyK2xTO9GLuXuTX0L+5ed27JyV1aU1Zy2TyhNH9fQcCzgfFGq3pEVIkGU2SY90 43D0oKJpSrL/SgbV1h3zXIcUCDcU3JDekI5RlALUXnBmc05lzUyHsUVRiEO2Hh4k GekfH/ItuvvZXTwrWwwVveI3aGnukGuKtsTEes9yoUF4AsiwQvA/KvmYDB3xpoMk gKJIO9rMJMvquaBpNJHEkt3v6FtjJFzSppfSWrr9IUo9JHu2sZP8KuumZAASwddP dL5L57hmuZXH9b1S/1zX9WyC21krsXk= -----END CERTIFICATE-----Generated at Sat Jun 13 13:48:51 2026 by rpki-client