$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17ce5323-19be-3099-8a3b-f5ed8166b02f.roa File: 17ce5323-19be-3099-8a3b-f5ed8166b02f.roa (raw, json) Hash identifier: D1yaIGLXjjF8YAVleOHZbw58pxEgEHdLyob2qXYIt40= Subject key identifier: D5:DB:35:6D:FE:0F:98:7F:AF:CB:82:53:94:B4:90:47:CF:CD:65:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E482485D5A3A96B49631EED40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17ce5323-19be-3099-8a3b-f5ed8166b02f.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.253.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:85:d5:a3:a9:6b:49:63:1e:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=d39470e5-3472-4813-bf3a-69e5d311abf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:0d:63:fa:4d:93:e7:f6:0f:b3:32:80:18: ce:45:27:81:f6:2a:5e:16:99:83:dd:86:ad:22:b8: 0c:90:d6:e9:f4:88:74:22:ad:fb:15:10:d9:d8:84: 2b:18:5e:a0:c9:d2:8b:a1:be:2e:8f:0e:21:53:3b: ef:14:5d:13:33:7f:85:b2:e6:f9:df:f7:a1:6a:03: d2:74:54:bd:64:a3:1f:c7:7a:22:1a:32:f8:ee:64: 8d:e1:98:8b:a4:1c:75:69:2a:c5:be:41:b2:16:ab: b3:86:55:18:83:0b:4c:16:5c:ba:12:d8:bd:82:ce: 30:ad:43:06:2b:7d:40:c8:ea:ec:9d:ff:c7:e2:13: 3a:28:02:3b:fb:a7:72:9f:99:c3:12:65:3a:d0:b4: 46:9f:e3:11:b9:36:03:5a:e2:3e:34:9b:df:5a:cb: ce:45:d1:02:31:c7:14:33:1d:f4:11:c9:76:de:ee: df:5d:78:12:eb:91:6b:ac:97:22:00:d9:24:68:74: bf:5e:94:28:74:70:fd:2a:20:22:4d:93:bc:57:a2: 88:c9:03:2e:ce:f7:19:be:14:74:13:11:93:e4:01: bc:4c:82:55:5f:4e:5a:10:4f:08:51:19:c0:0e:f3: 0f:f7:11:83:51:a0:2f:45:2a:5a:65:3c:71:2b:39: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DB:35:6D:FE:0F:98:7F:AF:CB:82:53:94:B4:90:47:CF:CD:65:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17ce5323-19be-3099-8a3b-f5ed8166b02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c7:71:6e:73:35:1f:c5:cb:52:18:b9:8e:7b:c4:cf:ed:d5: 7d:f7:46:1b:79:61:82:b6:4d:52:ee:81:5d:dd:6b:fb:71:6c: 7b:7b:01:f4:da:e3:1b:2d:e0:12:56:de:2e:b1:6b:2a:ee:b3: 14:b3:36:39:8b:eb:e4:ef:36:7b:a2:91:2c:c8:ab:15:d4:0b: 75:73:a9:87:45:34:5a:2b:bc:95:8e:91:d0:60:d4:b4:30:60: 77:ff:5d:e3:0b:cf:e0:80:a1:6c:51:c4:45:68:d4:57:13:9a: f0:10:b4:19:c6:50:00:18:3b:8e:7e:f6:e7:46:62:a9:e6:4c: 05:e1:d2:30:e5:46:0f:3b:4d:89:06:66:ed:2d:0b:88:e6:a6: e1:5e:58:ca:1a:c6:a4:e1:e3:49:c5:79:bd:0c:a9:5d:aa:17: 47:78:70:38:3a:8a:0e:c7:ea:d2:b6:da:26:58:dd:0d:77:c2: e5:3c:fb:4e:ca:ea:af:bf:59:1b:37:5c:c9:c3:b2:be:44:a9: f6:6d:8b:6a:50:6e:35:f5:10:2b:c5:53:21:3b:37:f6:81:16: 8f:82:9a:fb:e9:fd:2f:56:55:28:68:70:a4:98:b2:0a:42:1a: 99:ce:07:78:cf:50:d1:1d:09:26:00:47:9c:1b:36:4e:c0:02: 02:17:21:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIXVo6lrSWMe7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDM5NDcwZTUtMzQ3Mi00ODEzLWJmM2EtNjllNWQzMTFhYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs98NY/pNk+f2D7MygBjORSeB9ipeFpmD3Yat IrgMkNbp9Ih0Iq37FRDZ2IQrGF6gydKLob4ujw4hUzvvFF0TM3+Fsub53/ehagPS dFS9ZKMfx3oiGjL47mSN4ZiLpBx1aSrFvkGyFquzhlUYgwtMFly6Eti9gs4wrUMG K31AyOrsnf/H4hM6KAI7+6dyn5nDEmU60LRGn+MRuTYDWuI+NJvfWsvORdECMccU Mx30Ecl23u7fXXgS65FrrJciANkkaHS/XpQodHD9KiAiTZO8V6KIyQMuzvcZvhR0 ExGT5AG8TIJVX05aEE8IURnADvMP9xGDUaAvRSpaZTxxKznN7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXbNW3+D5h/r8uCU5S0kEfPzWUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTdjZTUzMjMtMTliZS0z MDk5LThhM2ItZjVlZDgxNjZiMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDHcW5zNR/Fy1IYuY57xM/t1X33Rht5YYK2TVLugV3da/txbHt7AfTa 4xst4BJW3i6xayrusxSzNjmL6+TvNnuikSzIqxXUC3VzqYdFNForvJWOkdBg1LQw YHf/XeMLz+CAoWxRxEVo1FcTmvAQtBnGUAAYO45+9udGYqnmTAXh0jDlRg87TYkG Zu0tC4jmpuFeWMoaxqTh40nFeb0MqV2qF0d4cDg6ig7H6tK22iZY3Q13wuU8+07K 6q+/WRs3XMnDsr5EqfZti2pQbjX1ECvFUyE7N/aBFo+Cmvvp/S9WVShocKSYsgpC GpnOB3jPUNEdCSYAR5wbNk7AAgIXIUA= -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:34 2026 by rpki-client