$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa File: 9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa (raw, json) Hash identifier: bF1icdKlz/I3tvZ9LN6Dah3C/j/z4DjT5JyBKCkc76Q= Subject key identifier: E6:D2:5C:31:40:B0:55:6F:C8:39:EA:0D:C4:81:23:BC:BE:94:DB:7A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CEBC2230603A36E6A282576E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 15169 IP address blocks: 172.253.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:23:06:03:a3:6e:6a:28:25:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=cae4a9c8-a638-49f4-89e2-4b07e75386e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:25:1c:6c:96:6b:9d:00:4a:84:23:69:26: cb:05:33:49:d1:3c:fc:66:f0:25:b5:78:8a:10:eb: fe:6a:c2:e6:29:af:a0:e9:d3:21:a8:14:5a:6a:9d: cd:35:9c:0b:63:d3:3c:e1:2f:48:57:d8:0f:f5:bd: f7:7b:2a:47:0b:a0:9e:18:f9:cb:c6:11:05:d2:1e: 6a:69:b4:dd:6f:d6:14:90:7f:61:2e:ab:04:90:02: 44:06:9c:40:61:dc:26:7e:87:d0:de:a8:d1:10:fc: dd:27:cb:79:0f:22:ae:26:ed:b4:6e:c5:97:b0:75: e0:3b:34:2e:39:ba:e5:f0:92:70:a6:21:88:80:bf: 74:1f:89:60:95:39:12:09:05:e5:3c:4c:f1:0d:32: a6:8f:cf:94:7c:85:f6:fa:4f:62:d6:d9:5a:f3:80: 0d:da:48:b6:4f:f6:9b:61:77:25:0d:60:d5:35:7c: a6:bb:48:9d:47:cc:92:da:1c:98:26:7d:f1:47:61: 9a:11:cd:7f:e7:ab:20:9f:79:95:a3:45:be:bd:96: bf:cd:4e:98:a6:31:01:b2:f8:48:ee:43:7d:08:ca: a6:b9:10:12:36:ca:30:65:08:5c:4e:42:bd:4c:ae: b9:33:48:01:34:0a:25:4f:fb:d8:3b:ae:db:69:4a: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D2:5C:31:40:B0:55:6F:C8:39:EA:0D:C4:81:23:BC:BE:94:DB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bf0564b-8ad0-322d-b383-e021ef36c1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7e:25:62:92:a7:70:2f:4b:c3:8a:bc:4c:68:64:75:70:fb: a3:d6:0f:bd:51:d6:7e:44:99:3f:11:26:f8:83:14:c2:83:60: 00:4e:57:b5:46:ec:c0:e4:a7:75:6b:c7:d2:ef:e6:fc:96:34: 44:0a:d6:05:0e:8e:fd:21:01:9e:db:17:53:cb:8a:30:00:00: 09:24:a6:c4:f2:20:9e:54:e3:b4:f0:c7:26:72:e2:02:c0:10: 38:cb:9b:7e:8e:38:51:f0:05:27:a0:e0:61:01:c3:12:91:03: 20:ee:45:32:51:18:b7:cc:3a:3f:8e:b6:fc:fa:ed:89:90:c1: 39:75:91:e3:32:85:7d:ae:16:26:b8:6b:22:1f:e0:6f:7c:a6: b5:d4:71:e0:73:55:f5:99:dd:9a:e0:43:98:70:e6:03:36:2c: 4a:d4:75:f0:fd:48:17:a5:a3:3d:f8:1d:32:65:f9:5d:5e:b3: 17:e9:44:8f:77:2c:e1:73:65:b8:34:65:12:20:63:70:60:26: 6f:a2:91:82:50:67:f1:c7:9b:fe:97:02:91:fc:0a:7e:71:2c: dc:a1:6d:af:56:eb:7b:f1:64:b9:45:96:3b:fb:f5:2c:f0:aa: 91:a6:e9:44:93:88:47:50:30:8b:03:8a:0f:9b:86:d9:3f:0e: 4c:74:d3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwiMGA6NuaiglduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk Y2FlNGE5YzgtYTYzOC00OWY0LTg5ZTItNGIwN2U3NTM4NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVQlHGyWa50ASoQjaSbLBTNJ0Tz8ZvAltXiK EOv+asLmKa+g6dMhqBRaap3NNZwLY9M84S9IV9gP9b33eypHC6CeGPnLxhEF0h5q abTdb9YUkH9hLqsEkAJEBpxAYdwmfofQ3qjREPzdJ8t5DyKuJu20bsWXsHXgOzQu Obrl8JJwpiGIgL90H4lglTkSCQXlPEzxDTKmj8+UfIX2+k9i1tla84AN2ki2T/ab YXclDWDVNXymu0idR8yS2hyYJn3xR2GaEc1/56sgn3mVo0W+vZa/zU6YpjEBsvhI 7kN9CMqmuRASNsowZQhcTkK9TK65M0gBNAolT/vYO67baUqgsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObSXDFAsFVvyDnqDcSBI7y+lNt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWJmMDU2NGItOGFkMC0z MjJkLWIzODMtZTAyMWVmMzZjMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp+JWKSp3AvS8OKvExoZHVw+6PWD71R1n5EmT8RJviDFMKDYABOV7VG 7MDkp3Vrx9Lv5vyWNEQK1gUOjv0hAZ7bF1PLijAAAAkkpsTyIJ5U47TwxyZy4gLA EDjLm36OOFHwBSeg4GEBwxKRAyDuRTJRGLfMOj+Otvz67YmQwTl1keMyhX2uFia4 ayIf4G98prXUceBzVfWZ3ZrgQ5hw5gM2LErUdfD9SBeloz34HTJl+V1esxfpRI93 LOFzZbg0ZRIgY3BgJm+ikYJQZ/HHm/6XApH8Cn5xLNyhba9W63vxZLlFljv79Szw qpGm6USTiEdQMIsDig+bhtk/Dkx00yw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:56 2026 by rpki-client