$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa File: e8ad7381-6239-3390-b529-574e6606e15f.roa (raw, json) Hash identifier: Pg8kXkPWWq869vGHwdxKFCNeYCj/EoLUdYhja8DbjrU= Subject key identifier: 39:3D:A9:86:4F:C7:09:E4:A2:AB:01:21:79:A0:15:FF:60:26:2C:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6F22EE5AE57F6BAEC686CF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 15169 IP address blocks: 172.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:ee:5a:e5:7f:6b:ae:c6:86:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=d4a50652-c956-4334-91ec-cc4ca56d6c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:dd:c6:d2:08:07:38:b4:86:e8:bd:e4:13: 49:88:45:34:49:cc:dc:cb:29:f7:3b:5e:a0:63:94: 4f:80:7c:3a:c3:92:f5:46:43:a6:66:6d:41:37:88: 1a:62:5f:10:53:a9:10:6d:1d:ab:85:50:6f:7d:12: c2:4a:17:8c:c4:e4:a4:9e:31:cd:ac:88:bd:cd:e0: 94:d8:d0:97:20:cb:19:6c:39:38:73:52:16:39:c0: 1e:fe:22:51:4f:92:c0:a2:60:fc:31:df:e2:7b:4c: a3:4a:9e:f5:b7:e4:42:d6:b2:65:ad:b4:00:2c:c2: ad:bb:8c:a8:82:e3:1d:f8:ae:c8:27:32:98:a1:91: 9d:0d:20:f5:a5:18:48:c1:96:e2:0f:10:ad:13:c1: c1:ba:a9:50:aa:1b:68:67:cd:0e:16:46:76:2e:02: 06:84:43:53:ee:a7:9d:d6:b2:54:77:6a:2d:e9:3c: 41:0d:3d:eb:99:74:18:18:87:32:70:62:b7:bc:55: 9d:c7:a6:82:c6:5f:2f:07:65:d1:14:15:18:eb:63: b0:3c:ab:3d:92:99:ec:77:dd:94:f9:43:4c:f8:dd: ca:80:2b:70:55:79:65:c7:07:be:5d:8e:41:12:b6: 7f:04:c6:a6:94:bb:11:8e:3b:e2:aa:aa:22:72:16: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3D:A9:86:4F:C7:09:E4:A2:AB:01:21:79:A0:15:FF:60:26:2C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b0:bc:4e:79:35:87:5c:7f:82:dc:10:98:63:7f:62:c5:06: a1:0b:85:f2:3b:c1:8f:3c:21:a0:8e:03:2d:56:ff:1d:bb:3c: 26:5e:81:d2:76:1d:50:d0:ff:09:6d:9c:e6:51:45:b2:9d:bd: 45:8b:96:5b:ce:5f:06:fa:d6:79:32:d5:a1:77:d4:4a:e7:a8: 86:f3:7e:4a:0b:fb:46:87:e8:0c:e6:af:ee:b4:14:5f:14:af: 69:e6:87:49:93:8b:f3:5b:ef:c5:d3:fc:a9:ad:22:df:8e:41: b0:a1:6c:4d:8f:60:d6:8d:79:ad:08:9c:e1:e4:bc:a0:8e:73: db:73:60:a9:a2:cf:8b:c3:66:b6:cc:1b:75:07:cd:e6:f5:31: ff:c7:a2:4b:3f:fe:05:e3:8c:98:03:17:c8:01:63:ef:17:b2: 6e:b3:94:93:4a:27:57:a2:d7:3b:9f:bc:d5:c0:cf:c0:6f:86: f7:94:c8:f2:b4:2c:e9:ed:18:33:81:1f:9e:e4:9d:0f:91:a8: 7a:8a:cb:dd:8b:69:63:6a:c9:c8:18:fc:52:b5:d0:36:b4:ae: f8:3b:af:73:4a:2e:ce:89:c7:6c:44:a6:1a:88:fd:c7:28:1f: 94:80:02:a8:52:10:9f:c8:63:22:4f:e0:c0:71:46:e1:24:39: 57:a9:6a:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIu5a5X9rrsaGzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDRhNTA2NTItYzk1Ni00MzM0LTkxZWMtY2M0Y2E1NmQ2YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcLdxtIIBzi0hui95BNJiEU0Sczcyyn3O16g Y5RPgHw6w5L1RkOmZm1BN4gaYl8QU6kQbR2rhVBvfRLCSheMxOSknjHNrIi9zeCU 2NCXIMsZbDk4c1IWOcAe/iJRT5LAomD8Md/ie0yjSp71t+RC1rJlrbQALMKtu4yo guMd+K7IJzKYoZGdDSD1pRhIwZbiDxCtE8HBuqlQqhtoZ80OFkZ2LgIGhENT7qed 1rJUd2ot6TxBDT3rmXQYGIcycGK3vFWdx6aCxl8vB2XRFBUY62OwPKs9kpnsd92U +UNM+N3KgCtwVXllxwe+XY5BErZ/BMamlLsRjjviqqoichbPpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk9qYZPxwnkoqsBIXmgFf9gJiz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZThhZDczODEtNjIzOS0z MzkwLWI1MjktNTc0ZTY2MDZlMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFawvE55NYdcf4LcEJhjf2LFBqELhfI7wY88IaCOAy1W/x27PCZegdJ2 HVDQ/wltnOZRRbKdvUWLllvOXwb61nky1aF31ErnqIbzfkoL+0aH6Azmr+60FF8U r2nmh0mTi/Nb78XT/KmtIt+OQbChbE2PYNaNea0InOHkvKCOc9tzYKmiz4vDZrbM G3UHzeb1Mf/Hoks//gXjjJgDF8gBY+8Xsm6zlJNKJ1ei1zufvNXAz8BvhveUyPK0 LOntGDOBH57knQ+RqHqKy92LaWNqycgY/FK10Da0rvg7r3NKLs6Jx2xEphqI/cco H5SAAqhSEJ/IYyJP4MBxRuEkOVepanU= -----END CERTIFICATE-----Generated at Thu Nov 5 17:27:19 2026 by rpki-client