$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa File: eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa (raw, json) Hash identifier: GbNk9bdbsCMnJdGUjVEBaAonneetAO5g5QqQkGw/TlM= Subject key identifier: 70:AB:BA:43:03:E7:21:5E:A0:74:73:9E:D9:8E:6E:BC:2C:14:C2:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A033726B337228DCF27F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 172.253.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:33:72:6b:33:72:28:dc:f2:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4cfab2b0-a5d8-4b17-aad6-35906f5e846f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:35:8c:7b:79:58:29:24:b4:b6:e2:37:8f: 4c:ed:e3:38:d4:f0:be:fd:cf:78:dd:f8:4a:28:5b: 9b:3d:ac:9d:1a:98:d5:69:78:72:2c:02:80:f6:2c: 6b:fa:5d:e5:9a:77:27:6c:98:9d:92:f6:cb:7f:24: 94:98:45:db:02:74:49:fd:fb:03:40:b8:af:76:4b: f9:d4:29:f2:8b:34:1e:60:5c:e1:96:50:93:20:6a: 5c:0c:10:50:d7:d7:e8:7a:8d:dd:d1:6a:4b:aa:94: 0c:0e:b5:19:ea:1d:97:16:28:35:3c:8b:49:32:0d: 18:3d:47:3a:dd:d5:62:31:26:af:02:5e:b0:fc:d4: 4f:4b:d6:d0:cf:a9:ed:8a:01:61:b5:55:71:a4:ba: db:f2:f7:66:4e:89:f4:21:82:a2:40:35:9f:86:63: 22:5c:55:46:92:b0:29:24:ab:28:26:f8:da:46:48: e9:32:31:64:4e:ca:07:5b:d6:c8:7c:7e:82:d5:15: d7:e6:07:07:d9:d7:d4:e8:cf:20:ef:df:61:f3:88: f4:a1:94:28:51:b0:3b:cc:67:b0:be:c5:05:95:a4: 21:e5:03:25:c2:df:70:3d:2a:4d:5b:b6:fb:83:26: 29:71:a2:f5:3d:39:ab:e1:b3:9f:7b:a3:97:8f:24: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AB:BA:43:03:E7:21:5E:A0:74:73:9E:D9:8E:6E:BC:2C:14:C2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f1:2d:af:33:e7:f6:a0:ad:f7:a3:43:fd:78:3e:10:93:71: 94:b6:1d:76:c3:c4:2e:84:b9:62:55:61:0d:ae:55:c7:5a:15: a7:16:65:fb:b0:1f:53:dc:35:4d:1b:2f:46:fb:54:e6:17:2c: 59:5f:d1:fb:4e:39:f5:88:d0:e4:f5:94:9a:6c:0f:d1:19:d9: 87:3d:74:a1:c2:13:b8:da:ad:8f:24:94:19:54:fd:72:81:8e: 08:f2:b3:bf:6d:66:62:08:d3:10:01:07:b8:66:7e:40:35:5c: 73:1f:9b:8a:68:14:0c:cb:54:1e:ca:f1:ab:67:0d:81:d0:97: f0:97:bc:c1:70:50:62:fb:a1:4a:fe:d5:6e:e6:fe:45:d0:f1: 85:79:eb:5d:0e:f5:62:8d:c8:94:85:73:fe:2a:94:a9:df:b5: 79:3e:b4:9e:aa:ed:df:dd:81:e3:ee:1f:5c:af:d9:a8:c3:cf: 71:35:8d:8c:df:a7:92:e2:94:a6:94:de:a6:7f:66:e9:a6:c3: 55:ea:23:6b:03:0c:3d:d3:c2:ab:27:13:56:e4:30:24:28:87: eb:63:87:d1:ce:9c:15:8e:1d:a3:45:c6:86:84:cc:1d:51:c3: 96:60:27:91:38:43:94:d0:7e:85:87:6f:d9:69:9d:8f:21:b2: 9d:5a:bd:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noDNyazNyKNzyfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGNmYWIyYjAtYTVkOC00YjE3LWFhZDYtMzU5MDZmNWU4NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSM1jHt5WCkktLbiN49M7eM41PC+/c943fhK KFubPaydGpjVaXhyLAKA9ixr+l3lmncnbJidkvbLfySUmEXbAnRJ/fsDQLivdkv5 1CnyizQeYFzhllCTIGpcDBBQ19foeo3d0WpLqpQMDrUZ6h2XFig1PItJMg0YPUc6 3dViMSavAl6w/NRPS9bQz6ntigFhtVVxpLrb8vdmTon0IYKiQDWfhmMiXFVGkrAp JKsoJvjaRkjpMjFkTsoHW9bIfH6C1RXX5gcH2dfU6M8g799h84j0oZQoUbA7zGew vsUFlaQh5QMlwt9wPSpNW7b7gyYpcaL1PTmr4bOfe6OXjySrKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCrukMD5yFeoHRzntmObrwsFMIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWI5YjAyN2MtMTllZi0z MTBiLWI0ZDUtMDFhMzM1ZjQ5YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLxLa8z5/agrfejQ/14PhCTcZS2HXbDxC6EuWJVYQ2uVcdaFacWZfuw H1PcNU0bL0b7VOYXLFlf0ftOOfWI0OT1lJpsD9EZ2Yc9dKHCE7jarY8klBlU/XKB jgjys79tZmII0xABB7hmfkA1XHMfm4poFAzLVB7K8atnDYHQl/CXvMFwUGL7oUr+ 1W7m/kXQ8YV5610O9WKNyJSFc/4qlKnftXk+tJ6q7d/dgePuH1yv2ajDz3E1jYzf p5LilKaU3qZ/Zummw1XqI2sDDD3TwqsnE1bkMCQoh+tjh9HOnBWOHaNFxoaEzB1R w5ZgJ5E4Q5TQfoWHb9lpnY8hsp1avYo= -----END CERTIFICATE-----Generated at Wed Jul 29 03:49:35 2026 by rpki-client