$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa File: 9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa (raw, json) Hash identifier: 5hS1dvss7PpeEZHs0pzSWGglXHMJp6YRc474+2S2yM8= Subject key identifier: AC:17:BB:1F:EA:BA:95:6A:B0:9F:4F:78:8D:58:8A:F7:8A:6B:46:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DFA70A2908E29A0D6501F3B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a2:90:8e:29:a0:d6:50:1f:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=de885df6-346b-4cf0-95c2-8a8250b8db22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:ce:29:31:b7:f5:a3:b0:41:b4:85:5b:3e: d6:9f:60:ad:8a:ac:f1:39:04:aa:32:1e:c5:72:36: bd:34:c5:f1:35:b9:08:29:19:bc:36:f4:6c:fc:66: 82:84:e6:61:55:d0:8d:f3:94:42:28:29:7b:dc:b2: c8:7f:7b:0c:b5:ef:c2:8f:62:ab:56:d9:a4:16:46: 7f:c5:00:39:d1:6a:23:de:bf:d4:c3:72:e7:a1:a8: 47:47:34:0e:82:7a:ff:27:ca:e4:4c:88:da:9d:30: c9:04:e0:94:3b:66:99:d7:c2:04:4b:f9:09:0c:a2: 2a:f2:3e:41:65:ac:59:16:de:98:22:3b:b2:86:9f: 09:85:0b:a8:7b:2b:d2:5e:3b:f4:03:d9:1e:16:13: a9:f6:cb:0e:41:33:2e:7d:8d:68:2f:47:65:c7:1e: e1:e8:2c:71:e5:75:90:23:a3:b7:4d:22:f1:6c:0c: 41:8f:7d:bc:e6:f0:b1:a4:ef:09:40:f6:28:d0:7e: 9b:1e:67:25:e7:20:77:ba:ac:72:98:ee:9a:88:09: 56:a9:75:8f:5b:18:4f:13:45:2f:03:b2:d6:c1:f2: 56:2c:2f:d4:25:67:57:11:4d:73:03:17:d6:fb:de: 39:5c:3d:53:f9:ab:2d:a1:c7:32:11:c6:db:fe:10: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:BB:1F:EA:BA:95:6A:B0:9F:4F:78:8D:58:8A:F7:8A:6B:46:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a0b0b1c-513d-3875-81ba-5bfd762d0469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:90:18:24:88:39:f4:92:3e:23:19:33:91:bc:5c:bd:7c:20: 80:5a:7a:dd:9f:df:46:22:a3:c5:a4:59:8c:74:b2:ed:ff:cf: fe:33:51:11:c3:5c:e7:77:6e:22:56:e9:55:cc:df:71:cc:eb: dc:ba:76:12:7b:83:08:75:59:36:10:6b:dd:b2:01:18:30:6f: 78:f1:34:08:c1:f6:44:eb:6b:4d:0c:b5:e3:c0:e9:ae:ca:d5: ef:20:89:95:b3:3b:4b:b8:d1:ad:b8:12:09:53:86:95:8d:93: 51:d5:ae:cc:e5:fd:34:31:dd:c0:ac:ea:ad:78:52:34:ee:74: 07:4f:04:5d:d8:c7:5d:d2:e8:98:45:b4:c7:55:40:5c:7a:11: 4a:e8:fb:96:bf:a5:ae:d7:8b:f8:f4:eb:7f:b7:cf:8c:1d:87: f6:9d:f5:db:be:0a:7a:83:3c:89:ee:f6:a5:81:e5:bb:9a:1e: cb:60:ca:73:e6:e5:32:7a:df:5b:35:13:b4:7a:2d:5e:c1:6a: 6c:dc:df:a1:b4:f8:93:70:6d:aa:db:07:b3:ce:ee:0a:99:60: 15:0f:69:93:5e:68:ed:b9:8a:16:f3:15:e0:c8:0f:f6:39:4d: 28:e5:e3:41:f0:bb:0c:44:80:af:d1:50:45:4e:13:0c:b5:fc: 21:58:2a:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKKQjimg1lAfO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZGU4ODVkZjYtMzQ2Yi00Y2YwLTk1YzItOGE4MjUwYjhkYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7DOKTG39aOwQbSFWz7Wn2CtiqzxOQSqMh7F cja9NMXxNbkIKRm8NvRs/GaChOZhVdCN85RCKCl73LLIf3sMte/Cj2KrVtmkFkZ/ xQA50Woj3r/Uw3LnoahHRzQOgnr/J8rkTIjanTDJBOCUO2aZ18IES/kJDKIq8j5B ZaxZFt6YIjuyhp8JhQuoeyvSXjv0A9keFhOp9ssOQTMufY1oL0dlxx7h6Cxx5XWQ I6O3TSLxbAxBj3285vCxpO8JQPYo0H6bHmcl5yB3uqxymO6aiAlWqXWPWxhPE0Uv A7LWwfJWLC/UJWdXEU1zAxfW+945XD1T+astoccyEcbb/hBrgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwXux/qupVqsJ9PeI1YiveKa0YkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWEwYjBiMWMtNTEzZC0z ODc1LTgxYmEtNWJmZDc2MmQwNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESQGCSIOfSSPiMZM5G8XL18IIBaet2f30Yio8WkWYx0su3/z/4zURHD XOd3biJW6VXM33HM69y6dhJ7gwh1WTYQa92yARgwb3jxNAjB9kTra00MtePA6a7K 1e8giZWzO0u40a24EglThpWNk1HVrszl/TQx3cCs6q14UjTudAdPBF3Yx13S6JhF tMdVQFx6EUro+5a/pa7Xi/j063+3z4wdh/ad9du+CnqDPInu9qWB5buaHstgynPm 5TJ631s1E7R6LV7Bamzc36G0+JNwbarbB7PO7gqZYBUPaZNeaO25ihbzFeDID/Y5 TSjl40HwuwxEgK/RUEVOEwy1/CFYKhU= -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:08 2026 by rpki-client