$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa File: 0915a78c-e339-34ed-bcdd-c8c141febb0d.roa (raw, json) Hash identifier: GzS9/8hA9hrTErRY2xGzKfIhGZw6g/y5ripYQRTsY40= Subject key identifier: BB:C7:AC:AF:92:4C:D5:E7:81:F4:08:D9:5E:CC:F4:B2:77:07:A5:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD38593B7AFCCC7DDBF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d3:85:93:b7:af:cc:c7:dd:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ae28b40c-f604-4470-85e0-8974d2ef4b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:ca:25:8e:a8:1b:2d:d8:56:98:4b:6c:6f: bb:4d:9f:21:05:a5:e3:60:64:2d:20:e8:e2:2d:12: be:5e:c0:b8:13:a3:13:89:41:81:61:05:61:37:ce: c2:65:6e:97:fb:d1:f7:01:0d:86:d0:fe:91:f4:9a: 97:e2:7c:a1:64:df:c4:a2:24:ac:c5:8f:82:60:0c: cc:34:b1:59:34:cf:77:32:80:ce:6f:ad:5c:f3:a0: fa:b7:b6:0b:55:1d:f3:3e:7d:b1:3d:e5:d4:67:97: 65:56:80:0e:48:bd:a5:de:69:69:37:d3:34:5b:c3: 9b:c0:f2:b5:e5:d5:8d:39:d3:4a:76:3e:8f:70:40: 68:6d:bd:e6:32:1d:4c:e4:7c:80:ea:81:68:62:d5: 01:e5:1b:6d:c2:2a:bf:91:22:b9:76:ed:a5:35:ce: 53:0e:ca:16:86:b5:90:17:e3:be:52:c5:33:f4:8d: 9b:2f:1f:c7:7c:4e:41:bf:ae:fd:5a:a2:16:02:0d: d3:26:a3:2e:19:76:a7:22:03:92:ba:8e:89:e0:d6: 78:9e:7c:65:6c:c7:d0:7c:29:a8:b0:e5:33:80:66: cc:8e:a6:7e:4c:b2:84:a3:cb:0e:27:f0:b8:89:e2: d5:57:4e:07:7f:e8:3f:1c:f9:60:c3:25:f5:8b:ab: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:AC:AF:92:4C:D5:E7:81:F4:08:D9:5E:CC:F4:B2:77:07:A5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cc:a1:33:c5:95:50:01:14:d4:9a:df:83:bb:e5:74:c3:cc: 89:b3:59:08:95:90:2d:c4:b2:a2:3d:2e:fe:6a:6f:89:2e:1c: 7a:56:cb:07:27:60:53:92:93:bc:4f:c5:4c:bf:f4:5c:26:b3: a0:04:99:56:87:c0:63:37:e7:f5:b6:f8:81:8b:6c:d3:d4:02: ad:82:77:66:9f:cb:03:29:4b:a0:76:f7:2b:2c:7e:92:8a:c3: 7c:85:ae:f8:04:a8:59:a3:26:0e:ef:fc:f2:bf:26:e3:d4:4b: 20:28:c3:48:1e:27:98:8a:f7:d5:b7:03:81:9d:20:62:0b:a4: 7a:fe:42:b4:a0:07:61:55:cd:46:33:83:7b:60:a9:2a:66:09: df:d7:19:6e:20:79:0b:8a:1d:a2:11:c6:a1:d5:64:38:c0:95: c3:40:17:81:b9:23:21:e5:3f:57:c9:72:60:c8:4b:f6:9a:75: 33:07:2f:62:45:76:ec:41:30:3d:a6:dc:55:2c:d7:95:f3:0e: 28:24:07:02:0e:e5:f2:df:7a:5a:6a:2a:cd:66:1d:36:67:cd: 76:1d:54:b7:79:63:86:aa:85:5c:fb:13:6d:53:ae:68:61:a1: be:0f:9d:9d:fb:80:d3:f3:e6:ef:3d:23:73:e9:2d:d2:13:38: 5f:25:a5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9OFk7evzMfdv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWUyOGI0MGMtZjYwNC00NDcwLTg1ZTAtODk3NGQyZWY0YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/jKJY6oGy3YVphLbG+7TZ8hBaXjYGQtIOji LRK+XsC4E6MTiUGBYQVhN87CZW6X+9H3AQ2G0P6R9JqX4nyhZN/EoiSsxY+CYAzM NLFZNM93MoDOb61c86D6t7YLVR3zPn2xPeXUZ5dlVoAOSL2l3mlpN9M0W8ObwPK1 5dWNOdNKdj6PcEBobb3mMh1M5HyA6oFoYtUB5Rttwiq/kSK5du2lNc5TDsoWhrWQ F+O+UsUz9I2bLx/HfE5Bv679WqIWAg3TJqMuGXanIgOSuo6J4NZ4nnxlbMfQfCmo sOUzgGbMjqZ+TLKEo8sOJ/C4ieLVV04Hf+g/HPlgwyX1i6tDqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvHrK+STNXngfQI2V7M9LJ3B6U9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDkxNWE3OGMtZTMzOS0z NGVkLWJjZGQtYzhjMTQxZmViYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjMoTPFlVABFNSa34O75XTDzImzWQiVkC3EsqI9Lv5qb4kuHHpWywcn YFOSk7xPxUy/9Fwms6AEmVaHwGM35/W2+IGLbNPUAq2Cd2afywMpS6B29yssfpKK w3yFrvgEqFmjJg7v/PK/JuPUSyAow0geJ5iK99W3A4GdIGILpHr+QrSgB2FVzUYz g3tgqSpmCd/XGW4geQuKHaIRxqHVZDjAlcNAF4G5IyHlP1fJcmDIS/aadTMHL2JF duxBMD2m3FUs15XzDigkBwIO5fLfelpqKs1mHTZnzXYdVLd5Y4aqhVz7E21Trmhh ob4PnZ37gNPz5u89I3PpLdITOF8lpb8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:37 2026 by rpki-client