$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa File: eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa (raw, json) Hash identifier: RQUA1lADEUO9EwXpmG6iwS3L8r3Ua2riEIXNa5wYOhw= Subject key identifier: 9A:B6:9D:9D:A3:67:FB:15:F0:69:7B:9F:7F:F3:BA:E4:1B:2D:88:DF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3BC038F8503D2BCCFAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 172.253.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3b:c0:38:f8:50:3d:2b:cc:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=82d9c6ae-ec78-48bf-9cfb-de94a228ef76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:b2:6d:5e:35:1e:cb:1e:99:b6:6d:32:cb: 7e:c8:b9:2d:68:ed:19:a7:22:02:ef:59:cb:71:c4: dc:ee:90:fa:ea:3e:da:b8:d1:e9:d9:b9:2c:60:76: 60:72:b3:22:f5:09:bd:1f:7b:3c:de:d3:8c:e1:4a: 29:26:ce:b4:03:8d:d3:ac:64:e9:5b:21:b1:79:de: 5c:61:86:ea:c4:2d:51:ee:cc:33:98:12:ca:df:14: 8b:de:a8:ae:e5:87:ac:ca:61:28:34:cc:a0:f2:90: f8:45:dc:73:53:cf:80:c7:07:e4:82:86:6b:4f:c8: 57:d7:36:ac:70:4f:86:84:50:57:c5:22:a3:ca:4b: 38:45:8c:19:13:74:10:7f:1f:f5:e2:dd:01:e4:e6: 93:e3:5c:1f:f6:4a:ae:60:c7:39:56:4c:4a:c3:d8: d5:04:10:f2:6b:b2:06:0b:3a:c6:de:fd:6e:42:33: 3f:7d:3c:51:18:39:da:87:8f:db:42:6f:62:69:6d: 4c:88:90:62:f5:00:19:70:89:b1:44:36:19:a8:1e: f0:84:2d:fe:5f:f9:85:6b:06:3b:a1:7f:4b:a9:61: d6:b9:b5:04:08:55:02:ba:25:c3:02:d1:01:58:95: 21:fd:15:1b:48:6c:51:14:bc:dd:0f:29:80:7a:f2: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B6:9D:9D:A3:67:FB:15:F0:69:7B:9F:7F:F3:BA:E4:1B:2D:88:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a7:be:6e:53:5a:55:5b:44:c1:39:dd:cd:dd:3f:ee:8c:6f: 7c:ac:7a:4a:be:e4:5b:c1:9c:55:9f:89:48:79:53:9c:92:27: 2d:2f:3d:e0:0a:62:b6:c1:45:f0:f0:d7:a9:01:c6:db:73:e6: 13:6e:26:bc:bd:47:0d:ef:c5:35:d9:a4:62:3d:7d:7c:93:b8: 1b:5b:19:7a:df:b9:c4:07:ad:ac:8d:fe:61:13:aa:b8:b5:44: e1:c6:aa:cf:35:ae:2e:10:51:b9:0c:e2:a5:59:ea:f4:35:36: 17:80:71:cd:9f:23:22:43:d9:fe:9a:4b:8a:c2:f1:91:fd:17: 42:c7:42:71:aa:92:c8:d2:0c:4f:f2:e7:d4:5f:81:24:06:33: ea:80:07:06:79:30:d3:c7:6b:d3:80:3a:ed:14:f5:98:22:f3: c1:1d:52:28:f0:bd:e7:42:37:16:4b:08:95:a7:cf:c7:d7:ef: 28:5a:ef:f5:df:b0:4e:79:c5:eb:c0:b1:69:4c:d7:41:91:a8: 43:73:d0:38:56:63:03:09:2d:71:b6:9c:1f:32:58:bb:57:c6: a0:46:41:52:a5:ab:97:e5:20:99:51:4b:bf:4a:ae:49:7b:5d: 0b:4d:53:e7:40:b4:7e:f5:9b:c8:9f:78:92:27:b5:a7:1a:d0: ab:42:8a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDvAOPhQPSvM+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODJkOWM2YWUtZWM3OC00OGJmLTljZmItZGU5NGEyMjhlZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMWybV41HssembZtMst+yLktaO0ZpyIC71nL ccTc7pD66j7auNHp2bksYHZgcrMi9Qm9H3s83tOM4UopJs60A43TrGTpWyGxed5c YYbqxC1R7swzmBLK3xSL3qiu5YesymEoNMyg8pD4RdxzU8+AxwfkgoZrT8hX1zas cE+GhFBXxSKjyks4RYwZE3QQfx/14t0B5OaT41wf9kquYMc5VkxKw9jVBBDya7IG CzrG3v1uQjM/fTxRGDnah4/bQm9iaW1MiJBi9QAZcImxRDYZqB7whC3+X/mFawY7 oX9LqWHWubUECFUCuiXDAtEBWJUh/RUbSGxRFLzdDymAevL2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq2nZ2jZ/sV8Gl7n3/zuuQbLYjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWI5YjAyN2MtMTllZi0z MTBiLWI0ZDUtMDFhMzM1ZjQ5YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGenvm5TWlVbRME53c3dP+6Mb3ysekq+5FvBnFWfiUh5U5ySJy0vPeAK YrbBRfDw16kBxttz5hNuJry9Rw3vxTXZpGI9fXyTuBtbGXrfucQHrayN/mETqri1 ROHGqs81ri4QUbkM4qVZ6vQ1NheAcc2fIyJD2f6aS4rC8ZH9F0LHQnGqksjSDE/y 59RfgSQGM+qABwZ5MNPHa9OAOu0U9Zgi88EdUijwvedCNxZLCJWnz8fX7yha7/Xf sE55xevAsWlM10GRqENz0DhWYwMJLXG2nB8yWLtXxqBGQVKlq5flIJlRS79Krkl7 XQtNU+dAtH71m8ifeJIntaca0KtCigI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:50 2026 by rpki-client