$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa File: a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa (raw, json) Hash identifier: Kgn+oUdEoEySGPFkNEEluSjI+54TSb7eP3+B1M7W4mI= Subject key identifier: 30:21:20:DA:CA:7C:F4:D7:AE:AB:89:B2:64:E1:93:49:18:7A:CC:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4CF73D67C258C4A38100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4c:f7:3d:67:c2:58:c4:a3:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=43edfd80-5ddc-4ec0-b555-ade2a714d735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:75:a0:55:e9:fc:f4:6f:1d:87:d8:96:1e: 7a:25:f4:ee:23:2b:89:bb:b9:3f:e8:69:4d:2c:93: 4f:0b:0e:9b:96:93:5a:ab:2b:eb:ea:5d:ee:70:08: b4:03:20:69:1f:c7:90:90:63:65:c8:3d:0e:0b:21: 25:a5:f0:ec:25:27:1d:95:f6:87:21:91:78:55:85: 71:64:de:d4:fe:07:e0:7b:3b:bd:16:98:75:43:4f: ef:d2:a7:93:36:79:e7:c4:ff:d8:40:d8:aa:99:4f: 21:96:7d:73:27:68:6d:03:a8:5c:ef:40:6d:43:e3: 80:de:ec:0b:49:f0:61:7b:3a:cb:75:8c:2c:8b:b0: bd:ba:a5:c3:d0:b8:bb:21:c7:cd:e5:a7:61:98:69: ab:b0:4a:bb:fa:9b:2c:a9:30:d0:c1:a7:27:7b:9d: 8a:e5:64:2b:14:83:d4:c8:72:c3:52:9e:ea:3c:2f: e9:fd:97:87:d7:22:2c:a5:5f:63:c2:56:6d:5b:b8: dd:45:93:77:fc:cb:93:b5:f3:c6:83:98:0c:3d:a9: b3:10:7c:22:e1:45:8d:cd:3b:94:88:22:20:2d:f3: cc:e3:98:a6:a6:50:e7:6a:67:0e:8c:8c:47:43:88: f1:2b:28:27:e2:ac:d5:74:17:de:bc:61:4a:50:4c: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:21:20:DA:CA:7C:F4:D7:AE:AB:89:B2:64:E1:93:49:18:7A:CC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a4957520-9397-37bb-b02f-be2e0e9e4e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d9:3d:b1:cb:77:69:b8:6f:74:09:68:62:3e:24:45:60:f6: 33:96:ad:e7:07:55:8a:c4:23:df:09:b3:a8:53:0c:24:7f:2d: 5f:ae:95:0e:a0:cd:86:59:2e:b0:99:e9:06:32:4b:e2:8a:b6: eb:73:8a:d2:75:69:0a:7d:96:35:dc:f1:c8:9d:37:16:94:eb: c6:0e:1b:a4:e1:93:fe:64:53:5c:1d:62:25:42:9d:6a:62:83: 82:82:b5:72:af:b8:d4:7b:0b:8a:bf:36:56:9a:0c:4f:25:a1: 8f:10:65:3a:9a:02:b4:f8:89:0a:4c:85:b4:2d:70:99:ee:8c: 02:8a:6b:c9:98:c3:74:f7:a3:fa:20:b1:2a:74:03:37:89:da: 58:b4:32:a1:02:cb:c2:42:21:df:bf:7d:64:a7:fe:15:04:90: 69:b4:6f:1d:8f:0b:19:d1:5b:18:8d:52:7e:c3:6d:b2:b9:5f: 34:fc:63:40:c8:18:bc:b6:e6:ef:36:fc:6c:43:67:f6:d2:6d: eb:da:6c:b3:d7:d6:bb:e2:d6:0f:3f:1a:66:5a:82:a6:eb:e5: e3:14:85:ba:cb:0b:91:08:fb:32:62:54:2a:5a:73:11:8d:a3: ad:ec:c1:c7:4f:9e:fc:9e:0b:8b:00:0c:f6:19:5b:3f:4a:4b: de:f7:6e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUz3PWfCWMSjgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDNlZGZkODAtNWRkYy00ZWMwLWI1NTUtYWRlMmE3MTRkNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj11oFXp/PRvHYfYlh56JfTuIyuJu7k/6GlN LJNPCw6blpNaqyvr6l3ucAi0AyBpH8eQkGNlyD0OCyElpfDsJScdlfaHIZF4VYVx ZN7U/gfgezu9Fph1Q0/v0qeTNnnnxP/YQNiqmU8hln1zJ2htA6hc70BtQ+OA3uwL SfBhezrLdYwsi7C9uqXD0Li7IcfN5adhmGmrsEq7+pssqTDQwacne52K5WQrFIPU yHLDUp7qPC/p/ZeH1yIspV9jwlZtW7jdRZN3/MuTtfPGg5gMPamzEHwi4UWNzTuU iCIgLfPM45implDnamcOjIxHQ4jxKygn4qzVdBfevGFKUExp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAhINrKfPTXrquJsmThk0kYesxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQ5NTc1MjAtOTM5Ny0z N2JiLWIwMmYtYmUyZTBlOWU0ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjZPbHLd2m4b3QJaGI+JEVg9jOWrecHVYrEI98Js6hTDCR/LV+ulQ6g zYZZLrCZ6QYyS+KKtutzitJ1aQp9ljXc8cidNxaU68YOG6Thk/5kU1wdYiVCnWpi g4KCtXKvuNR7C4q/NlaaDE8loY8QZTqaArT4iQpMhbQtcJnujAKKa8mYw3T3o/og sSp0AzeJ2li0MqECy8JCId+/fWSn/hUEkGm0bx2PCxnRWxiNUn7DbbK5XzT8Y0DI GLy25u82/GxDZ/bSbevabLPX1rvi1g8/GmZagqbr5eMUhbrLC5EI+zJiVCpacxGN o63swcdPnvyeC4sADPYZWz9KS973bl4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:11 2025 by rpki-client