$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa File: e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa (raw, json) Hash identifier: r2SggzgElHHbn3nkt6r4K5lViJ+IJdDjXEOqlFIA7lQ= Subject key identifier: D8:D2:B5:9C:3A:CC:65:78:A7:63:25:03:D8:B4:CC:E9:5C:B9:14:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C49DBB2243DB31C8E8FC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:49:db:b2:24:3d:b3:1c:8e:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=af0df6fa-2c80-4578-ba81-494e7e9555ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:97:6c:dd:dd:c7:2b:16:ff:8b:be:9b:99:61: 73:e6:c0:16:d7:ab:45:74:ad:67:70:8a:eb:d4:31: 31:38:14:ae:c5:17:b5:6c:34:bb:ab:86:c4:14:40: 12:c5:59:8e:7a:70:5a:fe:76:76:19:c6:0f:56:b9: fa:71:33:96:bb:14:1e:59:fc:49:bf:60:49:53:ca: 22:e8:7c:82:5b:6f:2f:a6:b7:28:e2:ec:cc:55:92: 4c:93:33:fc:ce:d0:4e:66:83:30:86:12:0e:bd:ea: 08:d6:c4:d9:ee:9b:3b:fc:3e:50:fc:91:3d:1c:34: b9:76:d6:65:a6:bb:ca:1b:e6:bd:67:06:54:e0:ff: 4d:32:83:8e:34:09:b9:8c:ca:5e:9c:0a:be:9e:b4: c1:29:13:38:9e:a2:5f:b5:dc:36:ec:c2:a4:fc:18: 95:61:6c:cc:a2:97:e8:88:61:00:ed:08:0a:81:8c: bc:9d:ec:ef:f9:ed:92:31:55:0e:fc:b0:49:ac:02: fc:80:d3:ad:90:c4:20:f0:43:99:74:f1:90:35:84: eb:0c:2c:4b:6b:2d:78:3d:49:ed:a2:c7:3d:4c:ec: cf:62:9a:06:b8:20:be:0f:35:6e:f2:55:c9:e4:69: 58:b7:d1:80:d9:fc:21:7c:e7:7e:0c:a9:25:c9:cf: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D2:B5:9C:3A:CC:65:78:A7:63:25:03:D8:B4:CC:E9:5C:B9:14:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e31a4227-cb83-364d-856b-4f5cc9ee7fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:70:f1:67:37:66:da:a7:12:ca:d8:20:75:76:ac:98:4a:28: 09:44:14:a9:75:98:34:7e:01:b1:cf:d4:03:84:e8:33:6f:b6: d2:10:53:a9:b1:02:56:d1:12:eb:3c:f3:b7:e4:08:6b:3b:73: 5f:61:45:28:a8:86:6b:8e:f1:25:45:66:bd:7b:21:5e:90:69: 9b:85:e3:b1:35:62:79:ae:05:f3:6c:35:08:3c:20:0c:35:a4: a7:87:cf:d5:cd:70:ef:d9:fc:e9:55:f9:d5:41:1a:dc:3b:8c: c5:8d:0b:e2:e1:9f:23:8d:0a:e2:35:d3:d7:a7:a9:73:ab:70: f1:31:ae:63:cf:bc:b6:a8:0b:81:8d:08:87:fd:f2:9e:2e:de: a6:48:05:d1:a6:61:75:22:dd:7e:70:db:8b:99:a3:02:c1:a6: 9f:06:2a:02:32:32:78:12:14:29:17:cb:7c:c3:42:14:8f:66: 03:0b:8b:eb:74:a4:63:0b:b6:75:3e:fc:2d:7a:9e:9b:84:27: 59:86:01:50:10:24:5d:3d:62:78:64:a6:53:ec:60:c4:52:32: 73:a3:69:3a:19:62:4b:a5:ae:44:bc:23:ba:34:c0:5e:23:98: 03:55:34:77:6a:e6:be:c5:9a:b2:99:bc:fe:03:fe:96:3a:a1: dd:92:4e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEnbsiQ9sxyOj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWYwZGY2ZmEtMmM4MC00NTc4LWJhODEtNDk0ZTdlOTU1NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pds3d3HKxb/i76bmWFz5sAW16tFdK1ncIrr 1DExOBSuxRe1bDS7q4bEFEASxVmOenBa/nZ2GcYPVrn6cTOWuxQeWfxJv2BJU8oi 6HyCW28vprco4uzMVZJMkzP8ztBOZoMwhhIOveoI1sTZ7ps7/D5Q/JE9HDS5dtZl prvKG+a9ZwZU4P9NMoOONAm5jMpenAq+nrTBKRM4nqJftdw27MKk/BiVYWzMopfo iGEA7QgKgYy8nezv+e2SMVUO/LBJrAL8gNOtkMQg8EOZdPGQNYTrDCxLay14PUnt osc9TOzPYpoGuCC+DzVu8lXJ5GlYt9GA2fwhfOd+DKklyc/WLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjStZw6zGV4p2MlA9i0zOlcuRRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTMxYTQyMjctY2I4My0z NjRkLTg1NmItNGY1Y2M5ZWU3ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVw8Wc3ZtqnEsrYIHV2rJhKKAlEFKl1mDR+AbHP1AOE6DNvttIQU6mx AlbREus887fkCGs7c19hRSiohmuO8SVFZr17IV6QaZuF47E1YnmuBfNsNQg8IAw1 pKeHz9XNcO/Z/OlV+dVBGtw7jMWNC+LhnyONCuI109enqXOrcPExrmPPvLaoC4GN CIf98p4u3qZIBdGmYXUi3X5w24uZowLBpp8GKgIyMngSFCkXy3zDQhSPZgMLi+t0 pGMLtnU+/C16npuEJ1mGAVAQJF09YnhkplPsYMRSMnOjaToZYkulrkS8I7o0wF4j mANVNHdq5r7FmrKZvP4D/pY6od2STqs= -----END CERTIFICATE-----Generated at Sat Jun 13 10:29:49 2026 by rpki-client