$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa File: b9223ba9-c001-3f64-a368-a9d91e996b1c.roa (raw, json) Hash identifier: EQcj0Yn+CXCHJSn39gx8LD3U8JAiZ2JBh3u0gxbeDRM= Subject key identifier: C1:75:97:EF:E9:0E:B0:CC:D5:36:F8:70:B8:8A:0E:AD:61:B3:D1:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E016B2C0530D19C5C81A2D540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 15169 IP address blocks: 172.253.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:2c:05:30:d1:9c:5c:81:a2:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=f722868d-fcf2-4cd0-aa2e-9b5b2c932913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:50:8d:c7:c3:b9:87:de:1e:9f:f3:0b:a0: 01:9f:9f:d5:a1:08:ee:cb:0f:68:34:fe:4a:1d:d6: 09:e6:4d:2c:94:ff:38:84:dd:51:3c:cb:f9:a7:12: 90:dd:59:19:96:71:82:7b:ed:5d:c4:4f:1b:b2:79: b9:8a:c0:91:ef:18:c5:95:d5:dc:b0:d3:f6:ec:fd: b8:7b:df:d5:d8:b9:66:0b:88:4c:92:09:8b:d5:a1: 25:d1:eb:6d:3f:d8:53:ac:78:c7:11:1a:a1:ab:69: e5:b4:11:0c:49:91:bb:55:22:50:94:f7:c8:1e:3d: 51:3d:e6:01:f5:b5:1b:b1:c2:8f:36:2b:23:4f:aa: 19:b0:1c:39:91:60:3b:27:ed:df:c4:46:77:8c:fc: c9:1d:f0:a8:41:dd:dc:85:cf:c9:9f:cd:c7:7f:78: c1:0a:c5:06:43:41:70:0c:54:4a:9e:50:38:dd:77: 22:86:6d:75:1c:89:f7:ae:9c:c1:e8:bd:1f:db:78: 77:bf:9d:7b:fa:99:20:44:9f:68:07:3c:fd:b9:f5: 3f:d6:6e:3a:2d:ad:27:7c:5b:9f:c7:da:0c:87:17: ed:dc:cf:09:c2:45:07:65:63:1a:7c:51:27:91:5e: a0:d9:ea:e6:e9:a6:db:de:f0:54:02:05:0e:b2:00: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:75:97:EF:E9:0E:B0:CC:D5:36:F8:70:B8:8A:0E:AD:61:B3:D1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9223ba9-c001-3f64-a368-a9d91e996b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:86:fa:f6:74:ed:99:4d:f9:02:6c:c8:e0:5c:b1:8f:e1:12: 06:79:06:c3:b7:1a:f9:a5:ea:cd:aa:6c:64:44:9d:d6:bf:ef: d9:8c:c5:d0:cb:b1:e9:13:70:6e:f4:70:57:e4:44:83:6e:8b: cb:ff:a9:0c:e5:6e:28:6b:fe:2a:18:29:2d:66:67:e3:20:59: b7:f7:c2:9d:f9:27:b6:5e:7d:a1:b3:ca:1a:53:bc:ce:a9:37: 27:b8:ae:5d:59:48:d2:7c:58:6a:0b:d9:77:05:34:f4:ae:dd: b0:b5:16:ba:f1:bd:0e:a2:fe:ed:39:3e:52:c4:63:36:e6:b8: bd:db:3d:91:cb:c7:ab:72:ea:a0:3e:64:4f:cf:29:1e:b9:dd: 89:27:ad:f8:2e:38:86:1a:df:a4:f3:5a:d3:68:d1:ca:df:54: 5a:03:0e:a4:93:f2:b0:c7:c4:75:79:4f:8c:88:4f:37:82:d7: a0:68:ed:47:c9:71:bf:8f:d1:64:ae:83:2a:b2:d9:52:92:e5: ac:a2:ae:74:24:5f:e5:8a:5b:d2:6f:99:97:ef:fe:73:04:63: 24:65:2a:5a:95:91:b3:aa:47:c6:b5:92:82:a9:cb:34:12:4a: e9:1f:32:bc:48:fd:ac:08:2d:9d:be:e2:a1:c0:36:2e:cd:92: 7c:c7:fc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4BaywFMNGcXIGi1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk ZjcyMjg2OGQtZmNmMi00Y2QwLWFhMmUtOWI1YjJjOTMyOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusZQjcfDuYfeHp/zC6ABn5/VoQjuyw9oNP5K HdYJ5k0slP84hN1RPMv5pxKQ3VkZlnGCe+1dxE8bsnm5isCR7xjFldXcsNP27P24 e9/V2LlmC4hMkgmL1aEl0ettP9hTrHjHERqhq2nltBEMSZG7VSJQlPfIHj1RPeYB 9bUbscKPNisjT6oZsBw5kWA7J+3fxEZ3jPzJHfCoQd3chc/Jn83Hf3jBCsUGQ0Fw DFRKnlA43Xcihm11HIn3rpzB6L0f23h3v517+pkgRJ9oBzz9ufU/1m46La0nfFuf x9oMhxft3M8JwkUHZWMafFEnkV6g2erm6abb3vBUAgUOsgCD3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF1l+/pDrDM1Tb4cLiKDq1hs9GLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjkyMjNiYTktYzAwMS0z ZjY0LWEzNjgtYTlkOTFlOTk2YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaG+vZ07ZlN+QJsyOBcsY/hEgZ5BsO3Gvml6s2qbGREnda/79mMxdDL sekTcG70cFfkRINui8v/qQzlbihr/ioYKS1mZ+MgWbf3wp35J7ZefaGzyhpTvM6p Nye4rl1ZSNJ8WGoL2XcFNPSu3bC1FrrxvQ6i/u05PlLEYzbmuL3bPZHLx6ty6qA+ ZE/PKR653YknrfguOIYa36TzWtNo0crfVFoDDqST8rDHxHV5T4yITzeC16Bo7UfJ cb+P0WSugyqy2VKS5ayirnQkX+WKW9JvmZfv/nMEYyRlKlqVkbOqR8a1koKpyzQS SukfMrxI/awILZ2+4qHANi7NknzH/G4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:47:20 2026 by rpki-client