$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa File: d5fd37bd-341a-30b3-a5bf-c402e4909202.roa (raw, json) Hash identifier: bJrThYcfE6aYOR1HhM5L/V/LZ9JsckZcI/yuRMhzpMo= Subject key identifier: B1:62:86:34:1D:60:D0:E4:51:B6:00:6B:7D:30:04:91:FF:2D:BE:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4563E19B66D504FEFD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:45:63:e1:9b:66:d5:04:fe:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=84fab588-03f3-47e7-bf0b-5a437d218e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c5:c0:a9:1f:57:80:02:ad:28:58:b4:c3:95: 17:22:40:d9:d3:80:90:d1:7c:84:ae:a6:62:60:e7: c7:ab:f5:7b:85:67:30:26:31:f4:03:35:b4:23:47: 84:da:ce:14:0b:00:d0:57:1f:16:eb:c9:43:75:82: 8b:fb:bf:0c:2f:25:68:47:8c:e4:46:03:37:1c:61: 39:26:fd:bb:ed:05:05:30:3c:f2:86:8b:42:85:31: c4:e8:2e:96:ed:f1:be:f3:5d:a1:98:31:18:10:1a: c9:de:d9:9b:61:af:8d:90:97:ba:f4:0f:c9:fc:20: d0:67:40:12:48:72:b5:c0:5c:7a:04:7c:ee:8a:03: 4c:54:b8:22:f4:2f:61:8e:f1:ce:5f:2a:9a:e9:27: 63:4f:c1:3f:7b:e7:a8:75:f4:33:a0:5e:69:ca:29: ba:8d:57:a3:86:ac:d2:05:c4:36:17:23:26:5e:1f: ab:e4:7c:9c:64:5f:2f:02:1a:2d:a9:ef:67:13:8e: 38:1b:3f:50:6b:d8:1f:13:b7:a6:34:b9:1c:68:b4: 4d:cc:42:a2:19:b1:ae:c8:e5:73:c3:f5:45:cb:60: 97:3b:0e:b2:c2:ba:33:70:b8:0a:ac:6f:da:70:65: a4:1c:9f:63:09:75:b0:ea:1b:b5:ac:eb:15:9b:e2: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:86:34:1D:60:D0:E4:51:B6:00:6B:7D:30:04:91:FF:2D:BE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5fd37bd-341a-30b3-a5bf-c402e4909202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b2:f4:2c:d7:9c:23:69:6c:74:90:ae:a0:e2:69:bc:c6:fa: 47:61:2c:3e:eb:69:bd:aa:da:12:d9:ad:b3:d4:fa:c0:96:26: d2:f5:30:6a:60:f9:ce:8d:36:f5:cc:6a:1a:e2:61:35:00:ae: 20:bf:6a:c2:11:11:1a:75:ed:76:b1:55:47:90:dc:21:bb:14: d8:3a:4c:cd:be:e9:bb:d6:69:aa:5b:8d:dd:83:87:09:88:c1: 5d:ac:e3:d1:bb:e4:83:33:50:f0:9e:73:40:8f:c0:6d:a6:7e: ec:f6:85:d0:94:b7:aa:93:0f:00:19:91:12:81:bb:3e:bc:d3: 47:27:4f:2b:74:08:51:56:dc:f7:e9:cf:9d:db:71:30:3a:3a: fc:bc:be:a5:48:23:73:61:61:53:9f:b7:b9:85:14:76:87:92: f5:00:34:af:a8:a3:a9:1a:ff:41:8c:85:3f:72:c5:0d:a4:39: 69:32:bd:0a:6e:64:65:f8:ac:ba:ab:2c:ae:1f:fa:2e:21:cc: a3:81:a3:97:1d:80:2c:a1:60:50:35:ed:ab:35:74:97:e4:c0: af:19:b0:44:4f:0b:7b:49:31:cb:fd:f1:16:2a:ac:3b:dd:3b: ea:2e:3a:09:7a:d6:ea:bd:27:0d:d7:91:07:7a:c8:9b:75:67: c2:62:11:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEVj4Ztm1QT+/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODRmYWI1ODgtMDNmMy00N2U3LWJmMGItNWE0MzdkMjE4ZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MXAqR9XgAKtKFi0w5UXIkDZ04CQ0XyErqZi YOfHq/V7hWcwJjH0AzW0I0eE2s4UCwDQVx8W68lDdYKL+78MLyVoR4zkRgM3HGE5 Jv277QUFMDzyhotChTHE6C6W7fG+812hmDEYEBrJ3tmbYa+NkJe69A/J/CDQZ0AS SHK1wFx6BHzuigNMVLgi9C9hjvHOXyqa6SdjT8E/e+eodfQzoF5pyim6jVejhqzS BcQ2FyMmXh+r5HycZF8vAhotqe9nE444Gz9Qa9gfE7emNLkcaLRNzEKiGbGuyOVz w/VFy2CXOw6ywrozcLgKrG/acGWkHJ9jCXWw6hu1rOsVm+LnqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFihjQdYNDkUbYAa30wBJH/Lb6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVmZDM3YmQtMzQxYS0z MGIzLWE1YmYtYzQwMmU0OTA5MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOy9CzXnCNpbHSQrqDiabzG+kdhLD7rab2q2hLZrbPU+sCWJtL1MGpg +c6NNvXMahriYTUAriC/asIRERp17XaxVUeQ3CG7FNg6TM2+6bvWaapbjd2DhwmI wV2s49G75IMzUPCec0CPwG2mfuz2hdCUt6qTDwAZkRKBuz6800cnTyt0CFFW3Pfp z53bcTA6Ovy8vqVII3NhYVOft7mFFHaHkvUANK+oo6ka/0GMhT9yxQ2kOWkyvQpu ZGX4rLqrLK4f+i4hzKOBo5cdgCyhYFA17as1dJfkwK8ZsERPC3tJMcv98RYqrDvd O+ouOgl61uq9Jw3XkQd6yJt1Z8JiEcU= -----END CERTIFICATE-----Generated at Sat Jun 13 11:23:48 2026 by rpki-client