$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa File: b9223ba9-c001-3f64-a368-a9d91e996b1c.roa (raw, json) Hash identifier: 4JzpVPx49aMRPhpeH+lqAH7Wmaqzw3NV+MSofeatwE0= Subject key identifier: FC:44:66:0C:A6:3C:0B:69:F5:0D:08:81:3F:9D:5F:2A:DD:F9:A3:C8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B609C8CD76462BD59BB36F000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 172.253.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8c:d7:64:62:bd:59:bb:36:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=a500f976-d9fe-4206-b9e2-968c5c7420e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:81:bb:06:17:c8:5d:42:44:5e:6a:8a:61: 8b:9b:e1:89:0a:4a:f3:4c:e8:c2:ec:36:09:6d:9c: 15:74:70:c2:fc:48:42:92:77:47:d2:4a:18:15:62: fd:3e:58:10:cf:9c:fd:4a:06:b7:69:3b:0f:b2:69: 0f:cb:20:82:50:5a:c9:98:5d:c1:89:91:c5:d5:d0: cf:41:f2:b7:c7:d9:53:c0:c6:3f:f2:33:4a:1b:02: 5a:04:d6:93:cf:ae:36:68:1a:b2:3f:07:da:3c:55: ac:76:a6:19:42:83:64:a3:42:fa:a4:b1:21:cd:7a: 92:47:9a:a0:14:f6:ed:45:3b:f2:ce:44:75:d2:94: 75:fd:b8:c0:e8:c4:be:e5:e8:e1:ee:fd:5e:d0:f2: a1:ff:7b:f6:4e:1e:8d:ca:78:45:62:40:d2:d5:7c: f1:59:a0:4d:34:a3:96:04:9d:db:0b:6d:6a:82:e2: 14:52:4c:ed:30:c9:02:07:37:93:55:30:43:3d:05: 0d:03:53:51:d9:3f:d4:78:6c:a7:c5:ee:48:20:47: 3e:40:3a:12:21:b5:d3:53:f2:21:41:d5:a1:1a:1d: 98:58:b4:2d:b6:0d:85:ba:1b:6d:8b:9e:ad:31:61: e8:af:e2:ca:fa:f3:62:9c:64:3f:87:3c:71:67:d0: 79:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:44:66:0C:A6:3C:0B:69:F5:0D:08:81:3F:9D:5F:2A:DD:F9:A3:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:16:aa:fd:1b:37:ed:a0:ac:a6:5c:16:6c:64:30:41:bd:6b: 72:d7:c5:d4:d8:17:11:25:d4:3c:17:14:41:1f:2a:3e:49:81: 7f:46:b3:96:63:23:78:b8:eb:f2:1d:d7:51:f3:7b:b9:13:42: 85:22:45:34:f7:6d:b4:7c:c2:2a:b7:35:16:69:cb:a2:bc:31: 64:21:40:56:6f:96:16:79:ce:4c:6c:14:65:d0:32:7c:ec:cc: c0:d6:59:97:c9:a8:f3:d7:3f:76:69:69:77:a9:e7:2e:63:74: 9d:b3:ed:a0:e0:14:42:b2:87:38:55:5c:a8:c7:50:9f:ea:bd: fd:1f:53:7e:c4:39:24:5a:e8:fe:40:ed:fb:42:d7:ab:61:76: 6a:28:a6:15:63:a3:00:7a:60:9c:f4:12:4a:2c:15:b9:6a:7c: 93:a3:5b:ec:f3:ac:30:e1:6e:38:25:e3:57:a8:71:e5:57:82: 5c:51:a8:ec:79:8f:e0:39:65:17:99:dc:81:27:6c:9e:0c:05: fd:f1:a1:43:fd:b0:17:77:bd:71:eb:36:14:ff:1d:fa:bb:31: 15:d8:d2:a1:e2:da:8f:c1:08:42:23:cc:c4:1b:31:d4:72:0c: b2:36:36:8e:0b:41:c1:44:83:cd:15:28:b9:76:14:4a:16:8b: 1f:05:0e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnIzXZGK9Wbs28AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YTUwMGY5NzYtZDlmZS00MjA2LWI5ZTItOTY4YzVjNzQyMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXiBuwYXyF1CRF5qimGLm+GJCkrzTOjC7DYJ bZwVdHDC/EhCkndH0koYFWL9PlgQz5z9Sga3aTsPsmkPyyCCUFrJmF3BiZHF1dDP QfK3x9lTwMY/8jNKGwJaBNaTz642aBqyPwfaPFWsdqYZQoNko0L6pLEhzXqSR5qg FPbtRTvyzkR10pR1/bjA6MS+5ejh7v1e0PKh/3v2Th6NynhFYkDS1XzxWaBNNKOW BJ3bC21qguIUUkztMMkCBzeTVTBDPQUNA1NR2T/UeGynxe5IIEc+QDoSIbXTU/Ih QdWhGh2YWLQttg2Fuhtti56tMWHor+LK+vNinGQ/hzxxZ9B5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxEZgymPAtp9Q0IgT+dXyrd+aPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjkyMjNiYTktYzAwMS0z ZjY0LWEzNjgtYTlkOTFlOTk2YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoWqv0bN+2grKZcFmxkMEG9a3LXxdTYFxEl1DwXFEEfKj5JgX9Gs5Zj I3i46/Id11Hze7kTQoUiRTT3bbR8wiq3NRZpy6K8MWQhQFZvlhZ5zkxsFGXQMnzs zMDWWZfJqPPXP3ZpaXep5y5jdJ2z7aDgFEKyhzhVXKjHUJ/qvf0fU37EOSRa6P5A 7ftC16thdmoophVjowB6YJz0EkosFblqfJOjW+zzrDDhbjgl41eoceVXglxRqOx5 j+A5ZReZ3IEnbJ4MBf3xoUP9sBd3vXHrNhT/Hfq7MRXY0qHi2o/BCEIjzMQbMdRy DLI2No4LQcFEg80VKLl2FEoWix8FDnU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:42 2025 by rpki-client