$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa File: eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa (raw, json) Hash identifier: czkVbG2lk+eVakYlYPNs4XTyvfPL5Ig6dlABQ3//UUE= Subject key identifier: 77:66:50:BF:71:31:22:E9:96:20:BE:19:43:2B:80:0B:D9:FD:CB:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0E600358B2BF27FC2680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 172.253.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0e:60:03:58:b2:bf:27:fc:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7f14f9ba-2a9a-45c7-8645-26a071811497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:12:d9:01:90:ac:54:6f:37:c6:da:cf:f6: 4f:4f:d0:77:ba:7c:8b:81:dd:e0:c0:d9:4b:5a:dc: 9a:93:a6:1e:08:29:42:46:0b:20:7d:3c:57:4c:02: 85:41:fd:16:1d:4d:83:4c:e4:a4:4e:07:d1:ce:47: 67:d6:8d:aa:83:ac:b1:f4:c0:df:e8:8e:21:12:f8: a3:53:db:04:bc:cb:13:73:52:b1:d6:6c:ba:10:fd: e9:44:d7:05:9b:2a:86:59:f9:12:63:d7:8f:bc:b6: 3b:49:d0:49:bf:55:bd:80:c9:0b:a3:8e:ab:64:01: be:26:cb:b2:ab:d0:1e:e7:a6:c8:c2:fa:90:43:bd: 75:45:b8:64:05:6d:a0:2f:f6:f2:88:92:2c:4a:18: e9:08:81:35:01:16:20:f1:7b:b2:e1:91:0f:60:6d: 79:ff:a4:95:a2:9f:33:49:e7:04:98:55:f9:65:09: 3e:e8:9f:e3:7a:29:a5:47:e1:58:68:82:bd:7d:d8: ba:34:42:6d:65:ef:ce:c2:44:56:bf:f6:51:26:c5: fe:b1:93:64:8c:7e:96:1c:7b:24:1c:eb:47:8a:04: e9:f2:99:72:5f:dc:0e:81:51:05:c1:80:be:07:71: b2:11:d1:da:70:3c:5f:5b:e4:7c:7f:a4:41:d7:9d: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:50:BF:71:31:22:E9:96:20:BE:19:43:2B:80:0B:D9:FD:CB:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:86:96:b1:d4:da:56:71:e9:9b:da:1f:0e:81:fb:0f:37:08: 7d:f1:e4:63:d2:96:59:2d:da:7c:9a:bd:60:b3:ef:d8:74:48: c8:80:8a:3d:72:2b:f2:d6:d8:5b:9b:d1:1e:2a:0a:fe:9c:20: 90:a4:59:4a:36:db:99:b5:bc:95:7b:07:cf:1b:e7:c6:68:3c: 47:58:b9:8a:e1:74:85:a3:df:6e:54:5d:b1:83:e0:00:53:e0: c1:6e:25:a4:09:69:93:64:b1:de:48:a2:59:a8:34:93:50:69: bc:02:cb:3b:d1:d0:69:b7:4a:40:d5:1b:29:0a:74:03:ae:c9: b0:57:0f:d0:20:d9:fe:3a:c8:c2:0f:b1:a1:f3:e4:03:cc:18: ab:4b:e4:f1:dc:6d:26:20:48:df:fd:0b:ad:81:c8:b3:1f:73: 60:d5:62:90:6b:b8:19:19:f1:fd:aa:82:f8:48:26:1a:d4:67: 8f:b8:0e:1d:77:40:3e:1b:38:58:8a:f7:61:28:d7:84:52:90: 21:74:7a:a4:d3:99:c0:5e:de:bc:f4:12:55:3c:e5:83:f3:ab: ce:9d:2c:fc:29:c8:c7:3c:67:bf:e7:87:c0:82:9e:b3:cd:64: cd:11:81:4b:84:76:74:03:41:52:12:ca:ec:54:0a:79:30:78: 0b:e1:ae:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg5gA1iyvyf8JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2YxNGY5YmEtMmE5YS00NWM3LTg2NDUtMjZhMDcxODExNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpoS2QGQrFRvN8baz/ZPT9B3unyLgd3gwNlL Wtyak6YeCClCRgsgfTxXTAKFQf0WHU2DTOSkTgfRzkdn1o2qg6yx9MDf6I4hEvij U9sEvMsTc1Kx1my6EP3pRNcFmyqGWfkSY9ePvLY7SdBJv1W9gMkLo46rZAG+Jsuy q9Ae56bIwvqQQ711RbhkBW2gL/byiJIsShjpCIE1ARYg8Xuy4ZEPYG15/6SVop8z SecEmFX5ZQk+6J/jeimlR+FYaIK9fdi6NEJtZe/OwkRWv/ZRJsX+sZNkjH6WHHsk HOtHigTp8plyX9wOgVEFwYC+B3GyEdHacDxfW+R8f6RB1528wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdmUL9xMSLpliC+GUMrgAvZ/cs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWI5YjAyN2MtMTllZi0z MTBiLWI0ZDUtMDFhMzM1ZjQ5YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeGlrHU2lZx6ZvaHw6B+w83CH3x5GPSllkt2nyavWCz79h0SMiAij1y K/LW2Fub0R4qCv6cIJCkWUo225m1vJV7B88b58ZoPEdYuYrhdIWj325UXbGD4ABT 4MFuJaQJaZNksd5IolmoNJNQabwCyzvR0Gm3SkDVGykKdAOuybBXD9Ag2f46yMIP saHz5APMGKtL5PHcbSYgSN/9C62ByLMfc2DVYpBruBkZ8f2qgvhIJhrUZ4+4Dh13 QD4bOFiK92Eo14RSkCF0eqTTmcBe3rz0ElU85YPzq86dLPwpyMc8Z7/nh8CCnrPN ZM0RgUuEdnQDQVISyuxUCnkweAvhrqE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:19 2025 by rpki-client