$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa File: c87c6bc1-87e9-3fd3-9602-ac677580c521.roa (raw, json) Hash identifier: KQ4h+t5F08Wca11LTMRg5You5MJiHwwB+Un93J1fH20= Subject key identifier: B5:16:18:76:21:B9:31:C7:47:C3:FB:65:80:1D:42:E4:D2:C4:71:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EB039D3594EAE3B6FBC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:b0:39:d3:59:4e:ae:3b:6f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7a459bd7-6dd9-4616-83c5-fc37022d0de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:85:b8:ee:d3:57:7d:09:dd:25:ef:d5:e8: 07:df:c9:7f:fc:9d:af:28:26:c4:5e:75:e6:62:ae: e3:81:c7:6e:fe:33:dc:5c:bd:aa:cc:e7:e4:83:12: 4b:ad:27:06:3b:7b:57:d6:a6:c9:7e:0a:65:61:e3: a6:6a:9d:4f:4a:2e:c8:97:1b:bf:1d:f7:dd:d8:d7: 33:3d:5b:5f:7c:67:99:7a:0c:e6:b3:e9:54:dd:37: c0:21:57:0a:9f:55:4a:80:05:5c:5f:42:a6:ad:e3: 62:90:38:16:01:16:da:e7:d4:e0:73:b2:f2:30:76: a7:c3:23:6d:73:61:74:82:5f:dd:54:00:55:2f:d0: 34:b1:55:7b:91:c2:05:05:52:fb:72:36:a8:ac:88: fc:39:ba:1a:87:83:2a:3d:6f:db:e9:83:35:b1:b9: 9b:4a:e4:9d:d4:8d:cf:f1:bb:01:7f:e7:64:30:69: 79:e7:16:7b:dc:b9:4b:a6:4e:0a:65:7f:c6:e0:a7: 22:9c:72:27:87:d1:b3:f9:6c:06:28:dd:eb:e7:9d: 5e:ad:e0:5b:59:39:c7:78:4d:3c:6f:b9:89:cc:d9: 36:1e:1c:fe:71:92:fe:cb:6f:40:04:d5:e6:ca:dd: c5:51:2e:72:7a:c0:c0:7c:35:20:92:90:54:f2:42: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:16:18:76:21:B9:31:C7:47:C3:FB:65:80:1D:42:E4:D2:C4:71:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c87c6bc1-87e9-3fd3-9602-ac677580c521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f2:47:43:5c:5d:6a:f8:3f:96:27:73:3a:bb:9c:5d:24:82: 53:7a:18:33:b0:c8:59:17:35:1b:41:86:46:de:7b:80:a2:fc: 2b:12:bc:2d:d3:28:31:31:1b:5e:a8:a8:69:ed:1f:fa:ad:39: 31:92:9f:ff:d5:57:05:36:8f:df:84:23:90:cd:e6:65:e8:cf: c3:09:6d:59:e1:ab:53:ac:07:50:77:fe:86:89:71:05:85:96: eb:ec:bb:14:42:bf:19:f7:75:02:56:37:4b:a5:12:e4:94:96: 46:72:1b:3a:b9:fa:45:1b:17:09:1f:5c:df:39:fa:ce:99:cb: 86:9b:6a:40:1d:6b:15:16:b1:1d:26:41:02:15:5d:a8:ea:2a: f3:f5:b4:92:0f:48:fa:be:25:85:6a:3e:43:07:94:35:f1:4e: 64:02:bc:83:aa:24:b8:71:f3:6d:08:ec:a5:61:e1:3d:33:a7: b3:45:bf:c5:45:bf:3d:0b:bf:49:44:75:a1:01:94:29:b9:82: e2:94:a8:19:f8:4b:bc:68:1c:f3:b9:74:81:76:d3:cb:11:d5: 75:31:bc:91:45:45:af:6b:a7:b7:8e:e3:51:f7:98:4d:1d:a6: cc:b9:82:5c:af:29:56:b5:88:bb:45:6f:2f:0d:b0:54:cd:45: e9:57:40:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnrA501lOrjtvvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2E0NTliZDctNmRkOS00NjE2LTgzYzUtZmMzNzAyMmQwZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklyFuO7TV30J3SXv1egH38l//J2vKCbEXnXm Yq7jgcdu/jPcXL2qzOfkgxJLrScGO3tX1qbJfgplYeOmap1PSi7Ilxu/Hffd2Ncz PVtffGeZegzms+lU3TfAIVcKn1VKgAVcX0KmreNikDgWARba59Tgc7LyMHanwyNt c2F0gl/dVABVL9A0sVV7kcIFBVL7cjaorIj8Oboah4MqPW/b6YM1sbmbSuSd1I3P 8bsBf+dkMGl55xZ73LlLpk4KZX/G4KcinHInh9Gz+WwGKN3r551ereBbWTnHeE08 b7mJzNk2Hhz+cZL+y29ABNXmyt3FUS5yesDAfDUgkpBU8kISMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUWGHYhuTHHR8P7ZYAdQuTSxHG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzg3YzZiYzEtODdlOS0z ZmQzLTk2MDItYWM2Nzc1ODBjNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3yR0NcXWr4P5Ynczq7nF0kglN6GDOwyFkXNRtBhkbee4Ci/CsSvC3T KDExG16oqGntH/qtOTGSn//VVwU2j9+EI5DN5mXoz8MJbVnhq1OsB1B3/oaJcQWF luvsuxRCvxn3dQJWN0ulEuSUlkZyGzq5+kUbFwkfXN85+s6Zy4abakAdaxUWsR0m QQIVXajqKvP1tJIPSPq+JYVqPkMHlDXxTmQCvIOqJLhx820I7KVh4T0zp7NFv8VF vz0Lv0lEdaEBlCm5guKUqBn4S7xoHPO5dIF208sR1XUxvJFFRa9rp7eO41H3mE0d psy5glyvKVa1iLtFby8NsFTNRelXQCQ= -----END CERTIFICATE-----Generated at Wed Jul 29 07:06:21 2026 by rpki-client