$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa File: afebb486-0f96-3759-8dac-4c467b19c8de.roa (raw, json) Hash identifier: 5RoFSAkjd45irfaRxK+N5bQ130+VPib3ZHDL9MxTgaw= Subject key identifier: 9C:9C:82:23:4D:82:BD:85:18:B5:C4:D1:F9:19:B1:47:5D:9B:BF:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DE84B5E44C931CE269518B6A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 15169 IP address blocks: 172.253.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:5e:44:c9:31:ce:26:95:18:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=41c184fc-91a0-436e-ae7a-bd5444d8da3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:f4:b6:73:3a:bb:ae:d7:ff:0c:a5:f1:df: 71:2f:01:26:48:e4:b3:b0:c5:ed:13:ad:2c:7f:1a: f7:de:05:6a:41:fd:02:c5:91:fb:b2:9f:b1:30:2d: 0c:76:b3:39:3c:ed:59:ac:af:44:44:65:d2:9f:2b: 9f:40:48:72:7f:46:cb:96:7e:ad:12:56:66:7e:7f: 6f:92:98:3c:bf:fc:68:9d:75:61:9d:8d:ff:2e:01: 53:72:a6:0c:a9:2e:36:05:d2:7d:2b:ed:98:75:d1: 49:06:54:86:07:5d:81:8a:b0:40:c9:24:f6:28:1a: b0:69:7a:91:df:29:84:b3:2a:df:d9:be:a7:97:9c: f9:2e:b5:a8:68:c0:88:9a:b5:a4:f1:cb:c2:42:42: ca:29:9b:41:6b:33:f3:ec:0b:a6:af:ce:41:85:04: 03:17:18:c4:99:b3:29:5d:7a:c1:f2:30:8f:3c:f2: cd:dc:ca:a9:6d:f0:35:79:b2:df:e4:07:5c:02:e7: 88:3e:ca:65:32:a8:52:d4:78:05:da:b7:d9:62:af: 03:94:f2:5e:17:00:30:11:6e:d4:a3:c8:78:24:30: 9f:aa:02:d4:d6:74:4e:06:5f:18:56:e6:f5:6b:3b: dc:c8:23:06:d2:b7:3e:08:32:06:56:26:8b:a5:31: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9C:82:23:4D:82:BD:85:18:B5:C4:D1:F9:19:B1:47:5D:9B:BF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/afebb486-0f96-3759-8dac-4c467b19c8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:28:9e:a4:aa:75:ac:94:69:8c:51:05:16:6c:83:a8:28:5f: 4d:5c:26:81:50:05:bb:62:b7:b7:1e:ec:c1:68:96:bc:aa:64: 57:8b:e5:9f:3f:9c:ff:e5:8d:66:55:64:f1:68:3e:08:ea:13: 4b:ec:58:30:5d:36:e0:bf:1c:84:83:89:39:c5:c2:c8:55:70: 41:55:92:53:b3:a6:4c:40:2f:6c:86:c2:2e:bf:4b:09:ff:b1: d6:44:73:7f:bc:e3:79:41:8b:49:4c:ed:79:29:c2:9f:c2:ee: 32:4c:75:9d:db:bd:0a:3c:29:c7:b3:31:10:54:5b:99:6b:36: 4d:77:c2:c3:8d:89:04:d3:f9:16:27:28:14:92:d6:b7:b3:56: 97:1c:0b:41:62:86:0c:0f:8d:fd:c1:ed:01:fa:a1:0e:26:62: f4:56:57:a6:2d:80:3a:f3:6a:5d:ca:28:8f:ed:4c:9d:1b:19: 48:49:5e:3b:7b:b7:1e:d4:0b:d0:d6:68:1e:5e:c5:2e:5f:2c: 71:5a:66:19:d6:ae:14:dc:fa:20:ee:5f:ef:be:9d:75:f0:9c: fa:a1:38:c0:af:cb:09:08:37:9b:ff:c5:7d:d6:a9:b9:b1:e1: ca:9f:1b:d1:71:3f:47:48:1f:ca:91:3f:44:94:2b:f4:d2:b9: 48:00:56:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS15EyTHOJpUYtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk NDFjMTg0ZmMtOTFhMC00MzZlLWFlN2EtYmQ1NDQ0ZDhkYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1P0tnM6u67X/wyl8d9xLwEmSOSzsMXtE60s fxr33gVqQf0CxZH7sp+xMC0MdrM5PO1ZrK9ERGXSnyufQEhyf0bLln6tElZmfn9v kpg8v/xonXVhnY3/LgFTcqYMqS42BdJ9K+2YddFJBlSGB12BirBAyST2KBqwaXqR 3ymEsyrf2b6nl5z5LrWoaMCImrWk8cvCQkLKKZtBazPz7Aumr85BhQQDFxjEmbMp XXrB8jCPPPLN3MqpbfA1ebLf5AdcAueIPsplMqhS1HgF2rfZYq8DlPJeFwAwEW7U o8h4JDCfqgLU1nROBl8YVub1azvcyCMG0rc+CDIGViaLpTHYNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJycgiNNgr2FGLXE0fkZsUddm79LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWZlYmI0ODYtMGY5Ni0z NzU5LThkYWMtNGM0NjdiMTljOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYonqSqdayUaYxRBRZsg6goX01cJoFQBbtit7ce7MFolryqZFeL5Z8/ nP/ljWZVZPFoPgjqE0vsWDBdNuC/HISDiTnFwshVcEFVklOzpkxAL2yGwi6/Swn/ sdZEc3+843lBi0lM7Xkpwp/C7jJMdZ3bvQo8KcezMRBUW5lrNk13wsONiQTT+RYn KBSS1rezVpccC0FihgwPjf3B7QH6oQ4mYvRWV6YtgDrzal3KKI/tTJ0bGUhJXjt7 tx7UC9DWaB5exS5fLHFaZhnWrhTc+iDuX+++nXXwnPqhOMCvywkIN5v/xX3Wqbmx 4cqfG9FxP0dIH8qRP0SUK/TSuUgAVhI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:00 2026 by rpki-client