$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa File: e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa (raw, json) Hash identifier: +ntkLBopQqYT/3PeeI/JsJh4FbYBnYMQ09P5p5A9NrA= Subject key identifier: F6:3F:B2:2A:54:E6:A2:5F:05:BB:05:0B:99:FA:89:E8:95:B6:C1:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4D1550EB948E4C97D880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4d:15:50:eb:94:8e:4c:97:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=2d2294ec-9d30-449e-a05c-245bcb188334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:ef:e6:9a:3f:ab:91:b9:15:5e:cd:4e:7d: f2:f5:d3:f7:e8:b1:ad:78:9c:a3:70:45:a8:93:8f: 55:2d:26:4a:3d:d7:2a:87:7c:c5:b7:c0:42:01:62: a5:cb:41:d7:cb:d7:52:51:2d:b9:29:42:a9:b3:7a: 3e:8f:b4:7b:23:9f:63:78:03:21:3e:ff:2b:cd:76: 35:73:fb:e2:b4:68:84:ac:17:f9:65:9e:2a:f7:8e: 70:30:19:cb:5f:43:22:7b:ec:11:81:27:a1:ac:67: 5e:dd:c6:ca:11:22:a2:33:ea:cd:14:60:7c:fa:e8: 8a:e1:de:93:fe:4d:38:06:ff:34:23:77:60:67:cc: 4d:ba:bd:2a:0f:aa:24:e6:80:78:3e:7d:d7:a4:82: 0e:01:c3:75:05:3a:a7:39:ee:68:90:90:84:78:39: 82:95:e1:69:66:ab:10:b6:a3:be:59:0e:e5:f9:0d: f5:58:56:ee:96:cb:6f:52:c9:03:bd:2b:22:65:90: 15:c7:5b:d2:a2:b0:75:63:76:bc:4f:66:3a:0c:60: 6c:95:47:dc:61:0e:2e:e4:0a:88:c7:af:32:27:52: 26:a0:24:87:f6:a2:af:33:16:3f:eb:82:20:10:84: 95:cf:89:d7:1b:8e:48:a3:b1:bd:68:19:98:55:ec: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:B2:2A:54:E6:A2:5F:05:BB:05:0B:99:FA:89:E8:95:B6:C1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e91ef3a9-e7a2-3507-9f33-24b0053ea3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c0:40:1a:54:97:2a:14:e6:bf:dc:54:c9:00:50:42:96:48: f4:44:13:00:61:15:79:f7:5c:3d:44:44:90:c9:19:0a:8b:8c: c6:d4:2a:e2:0f:27:2f:f6:a4:38:dd:46:b3:9b:01:95:00:e6: 73:a3:52:66:d1:55:27:30:5b:52:a4:ec:58:a8:e8:7f:90:2c: a9:91:04:91:52:dd:41:3c:08:ec:61:77:1f:d0:33:c2:60:a3: bb:e0:00:d4:5b:ec:f6:de:7d:2c:67:50:aa:73:19:c8:a7:85: 23:95:4a:6f:b3:ce:3d:db:14:4b:b4:e3:1d:e5:68:94:f3:37: 8a:d6:f2:0e:97:63:a6:2b:27:ed:96:2b:bd:c8:d4:c0:0f:63: 26:96:10:d3:66:37:31:df:13:2c:3e:63:02:d9:cb:2a:5f:63: 83:88:d0:70:47:7a:01:e9:63:93:10:94:82:1e:60:d1:88:9d: 37:e8:ec:1a:72:8d:96:47:bd:51:30:e5:f9:e6:c2:50:16:0c: 04:c4:0b:c2:ed:9e:e4:19:96:26:21:03:98:df:ea:89:0b:a6: ae:f4:0c:09:cb:91:a7:47:59:70:e2:ba:5a:46:fe:dd:6f:57: 45:3d:09:89:84:8e:4c:41:8b:35:7d:68:69:0e:9a:ed:82:d8: 88:8d:03:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnE0VUOuUjkyX2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MmQyMjk0ZWMtOWQzMC00NDllLWEwNWMtMjQ1YmNiMTg4MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ovv5po/q5G5FV7NTn3y9dP36LGteJyjcEWo k49VLSZKPdcqh3zFt8BCAWKly0HXy9dSUS25KUKps3o+j7R7I59jeAMhPv8rzXY1 c/vitGiErBf5ZZ4q945wMBnLX0Mie+wRgSehrGde3cbKESKiM+rNFGB8+uiK4d6T /k04Bv80I3dgZ8xNur0qD6ok5oB4Pn3XpIIOAcN1BTqnOe5okJCEeDmCleFpZqsQ tqO+WQ7l+Q31WFbulstvUskDvSsiZZAVx1vSorB1Y3a8T2Y6DGBslUfcYQ4u5AqI x68yJ1ImoCSH9qKvMxY/64IgEISVz4nXG45Io7G9aBmYVew/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY/sipU5qJfBbsFC5n6ieiVtsFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTkxZWYzYTktZTdhMi0z NTA3LTlmMzMtMjRiMDA1M2VhM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvAQBpUlyoU5r/cVMkAUEKWSPREEwBhFXn3XD1ERJDJGQqLjMbUKuIP Jy/2pDjdRrObAZUA5nOjUmbRVScwW1Kk7Fio6H+QLKmRBJFS3UE8COxhdx/QM8Jg o7vgANRb7PbefSxnUKpzGcinhSOVSm+zzj3bFEu04x3laJTzN4rW8g6XY6YrJ+2W K73I1MAPYyaWENNmNzHfEyw+YwLZyypfY4OI0HBHegHpY5MQlIIeYNGInTfo7Bpy jZZHvVEw5fnmwlAWDATEC8LtnuQZliYhA5jf6okLpq70DAnLkadHWXDiulpG/t1v V0U9CYmEjkxBizV9aGkOmu2C2IiNA4A= -----END CERTIFICATE-----Generated at Wed Jun 17 09:15:57 2026 by rpki-client