$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa File: a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa (raw, json) Hash identifier: TR6QrNOxHnhUqywAWCDN4aSjzbeZWlF4InaJ+aB9H4k= Subject key identifier: 89:7E:05:5F:8F:48:45:77:94:77:5F:58:8F:94:0E:AA:C1:F4:25:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79E8547FE7DCB39880C6D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:85:47:fe:7d:cb:39:88:0c:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0a232174-92e4-4f98-bd65-c5ff1871fdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:5a:75:72:69:be:b5:8c:fc:58:bb:88:7a: 3e:ab:26:b5:af:7a:66:90:63:cd:2b:90:0f:13:9b: 6c:24:73:52:fb:52:70:29:b5:c5:1d:03:ad:a8:e1: 0e:04:cc:3d:2f:7f:fb:ac:66:3e:e8:ed:69:94:4a: 67:f1:74:bf:c1:4b:70:4b:90:3a:c1:75:c1:6d:c5: 09:3e:86:00:9a:1f:3a:4b:12:32:7f:20:31:9e:f6: 33:1e:74:b7:c4:dd:2f:28:4d:54:9b:cf:4c:66:b1: 44:95:cd:4c:b5:74:67:4a:5d:4f:db:a0:4a:32:ff: 7a:dc:a3:1e:76:22:3c:4a:ca:60:21:f8:b4:fe:b2: 1c:83:7e:84:5f:89:0b:97:d8:2e:ae:21:f4:9a:db: d9:f6:9f:a7:03:3e:80:0b:33:3a:ed:b1:01:e3:e7: ee:ef:36:46:5d:85:93:75:cf:8c:bd:cc:ff:78:2c: 53:82:58:c8:61:e9:31:af:fa:4d:5e:9f:4b:0e:7c: c6:34:42:f6:38:2d:49:ed:7c:9d:40:57:7c:72:ca: e8:c8:e8:29:ce:e2:7c:9a:dc:33:e8:a7:6a:d5:43: 07:11:de:99:7c:c2:b5:c1:7b:7c:b7:a6:61:02:1f: 1e:94:b4:0d:16:35:7d:08:d7:a0:f1:44:68:09:69: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7E:05:5F:8F:48:45:77:94:77:5F:58:8F:94:0E:AA:C1:F4:25:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f4:fc:7f:fb:c3:e2:9a:56:c9:8f:4e:c4:41:b4:ec:72:23: 0c:b0:16:d6:b1:62:ca:7e:1d:9d:f2:34:d5:f3:84:1e:19:47: 6a:b2:a0:e4:5f:67:ad:77:a2:05:d4:d2:92:34:c9:16:da:62: 35:c9:af:98:b2:65:d9:f5:26:5b:be:ef:15:13:04:3a:64:56: 62:4e:57:60:b5:6c:7c:ab:3d:83:ca:15:9e:cd:9a:3c:57:ba: 32:d7:d0:e6:54:a3:cb:97:bf:ef:34:13:d1:b8:60:32:a3:88: 5d:d3:70:8b:b2:1f:03:50:23:b4:2f:d6:3d:4c:84:ce:eb:87: 82:b1:c7:75:ae:67:d6:cd:f6:82:63:17:83:98:cf:9a:c5:2a: c3:cf:59:40:03:ad:6c:8f:b3:9b:d7:0e:95:12:ca:cf:96:7e: 0e:ac:70:9b:b6:89:bd:38:ae:90:e9:52:9a:5b:5c:7e:42:92: cc:c1:3f:5c:73:83:f1:82:f5:95:91:3c:6f:08:47:ca:de:65: 33:7f:50:d7:18:76:51:8a:1f:81:4d:46:2c:ab:75:29:c2:5c: cb:47:bd:6c:96:13:59:a4:03:1a:87:ed:f5:bc:81:fa:21:5d: e7:62:f0:f6:41:2b:da:7f:6a:67:22:c2:82:3a:94:55:1d:48: c6:db:8c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnoVH/n3LOYgMbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGEyMzIxNzQtOTJlNC00Zjk4LWJkNjUtYzVmZjE4NzFmZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QFadXJpvrWM/Fi7iHo+qya1r3pmkGPNK5AP E5tsJHNS+1JwKbXFHQOtqOEOBMw9L3/7rGY+6O1plEpn8XS/wUtwS5A6wXXBbcUJ PoYAmh86SxIyfyAxnvYzHnS3xN0vKE1Um89MZrFElc1MtXRnSl1P26BKMv963KMe diI8SspgIfi0/rIcg36EX4kLl9guriH0mtvZ9p+nAz6ACzM67bEB4+fu7zZGXYWT dc+Mvcz/eCxTgljIYekxr/pNXp9LDnzGNEL2OC1J7XydQFd8csroyOgpzuJ8mtwz 6Kdq1UMHEd6ZfMK1wXt8t6ZhAh8elLQNFjV9CNeg8URoCWnnFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl+BV+PSEV3lHdfWI+UDqrB9CWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQ5NTc1MjAtOTM5Ny0z N2JiLWIwMmYtYmUyZTBlOWU0ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz0/H/7w+KaVsmPTsRBtOxyIwywFtaxYsp+HZ3yNNXzhB4ZR2qyoORf Z613ogXU0pI0yRbaYjXJr5iyZdn1Jlu+7xUTBDpkVmJOV2C1bHyrPYPKFZ7NmjxX ujLX0OZUo8uXv+80E9G4YDKjiF3TcIuyHwNQI7Qv1j1MhM7rh4Kxx3WuZ9bN9oJj F4OYz5rFKsPPWUADrWyPs5vXDpUSys+Wfg6scJu2ib04rpDpUppbXH5CkszBP1xz g/GC9ZWRPG8IR8reZTN/UNcYdlGKH4FNRiyrdSnCXMtHvWyWE1mkAxqH7fW8gfoh Xedi8PZBK9p/amciwoI6lFUdSMbbjHs= -----END CERTIFICATE-----Generated at Wed Jul 29 08:11:16 2026 by rpki-client