$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa File: 1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa (raw, json) Hash identifier: HvUJTzo3zreK0KQrfLW58sOWtxwkiHgIsD11oFWEm5U= Subject key identifier: 40:DC:A6:57:B8:D4:A3:4A:7A:87:6A:18:D7:A6:F4:F4:B9:8C:63:68 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497314BD70EBBA98F2D6C9C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:14:bd:70:eb:ba:98:f2:d6:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb501e68-ea3e-4200-8fc8-f1dbe362d7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:1d:09:58:e4:a8:56:46:00:ff:7f:e3:6e: f5:cb:03:dc:f4:57:83:a6:18:0e:15:f0:7c:23:8a: 8a:26:54:41:6a:bc:bb:76:b5:1a:49:bf:25:fb:15: 5a:f1:55:42:a4:38:e3:d7:dc:77:e2:5e:7b:ea:bd: 72:75:62:b2:e2:a5:bf:05:2c:03:0a:cb:5e:dc:38: cc:cb:9d:d8:27:3f:a4:42:12:19:4d:21:a3:e4:f9: ca:4b:48:9d:09:59:2a:4f:69:d4:6b:c0:38:37:0d: 13:d2:f5:08:69:af:a5:a2:61:d9:44:3f:c6:16:bc: 70:bd:04:b8:75:87:80:5f:53:05:07:7f:d8:f7:3f: bb:96:5d:0f:17:7b:1e:bb:25:67:c2:18:e8:d6:66: bc:fb:b9:6b:6e:2b:d5:4a:75:9a:88:99:49:d1:6e: fa:29:8b:2d:0b:eb:50:09:40:3f:ff:36:b3:00:1c: f0:a7:8e:d1:ae:9d:5a:fe:c1:d6:ec:f5:37:ea:ea: 5c:94:cc:e3:91:e4:be:f3:49:b0:df:18:ed:c0:d4: 99:22:7b:e9:15:1b:d3:2e:16:ad:40:ec:5b:f6:5a: c3:07:cb:08:2b:a1:86:77:7f:a0:40:06:c8:ec:60: 88:47:37:40:9e:10:32:d7:08:45:87:44:bc:51:7c: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:A6:57:B8:D4:A3:4A:7A:87:6A:18:D7:A6:F4:F4:B9:8C:63:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e7c1bc3-5481-3ee2-9510-d6f77cec67e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d9:7c:60:38:cc:9f:d5:00:6e:8d:bf:31:b4:eb:d1:aa:76: 95:b7:65:61:dc:09:d4:f0:97:ff:b7:e9:de:e6:0b:59:7f:2d: 03:37:20:5a:74:8c:94:01:e2:b7:cb:f0:d0:e0:31:c6:91:45: 77:5d:94:fb:29:41:4f:8d:28:26:0b:0e:a6:38:14:ce:62:44: 2d:44:a3:cf:4f:19:33:ca:fb:42:3b:56:2a:8d:5e:2b:1b:2c: 2b:12:ff:b2:0d:ce:0f:eb:c1:72:2d:e2:34:57:d1:59:15:1f: 75:28:fb:10:f8:1f:4a:4b:03:3a:d1:2d:7d:3c:13:e6:1b:89: c7:02:2c:1c:28:45:05:05:fd:d7:a1:a8:e9:08:53:f0:a7:b1: 0c:dc:6e:e5:2f:95:53:3e:c3:ea:58:22:9a:97:1c:53:76:0d: ce:51:9b:5a:7c:cc:00:39:ee:bd:68:74:30:2a:43:ff:cd:53: 31:aa:8a:b4:d5:f8:4d:00:0d:a8:31:20:f8:53:71:76:8c:95: 16:a2:12:87:83:2e:f1:b8:e0:02:e1:4b:48:a1:4f:10:be:14: 1c:2d:2f:ea:13:83:e4:ec:d8:ba:06:29:bf:7f:38:d8:87:b3: e4:b4:1f:f9:5e:19:b9:16:29:e6:3d:88:0d:07:ad:9c:1d:38: 0a:d1:5b:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxS9cOu6mPLWycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWI1MDFlNjgtZWEzZS00MjAwLThmYzgtZjFkYmUzNjJkN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHUdCVjkqFZGAP9/4271ywPc9FeDphgOFfB8 I4qKJlRBary7drUaSb8l+xVa8VVCpDjj19x34l576r1ydWKy4qW/BSwDCste3DjM y53YJz+kQhIZTSGj5PnKS0idCVkqT2nUa8A4Nw0T0vUIaa+lomHZRD/GFrxwvQS4 dYeAX1MFB3/Y9z+7ll0PF3seuyVnwhjo1ma8+7lrbivVSnWaiJlJ0W76KYstC+tQ CUA//zazABzwp47Rrp1a/sHW7PU36upclMzjkeS+80mw3xjtwNSZInvpFRvTLhat QOxb9lrDB8sIK6GGd3+gQAbI7GCIRzdAnhAy1whFh0S8UXy9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDcple41KNKeodqGNem9PS5jGNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU3YzFiYzMtNTQ4MS0z ZWUyLTk1MTAtZDZmNzdjZWM2N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ZfGA4zJ/VAG6NvzG069GqdpW3ZWHcCdTwl/+36d7mC1l/LQM3IFp0 jJQB4rfL8NDgMcaRRXddlPspQU+NKCYLDqY4FM5iRC1Eo89PGTPK+0I7ViqNXisb LCsS/7INzg/rwXIt4jRX0VkVH3Uo+xD4H0pLAzrRLX08E+YbiccCLBwoRQUF/deh qOkIU/CnsQzcbuUvlVM+w+pYIpqXHFN2Dc5Rm1p8zAA57r1odDAqQ//NUzGqirTV +E0ADagxIPhTcXaMlRaiEoeDLvG44ALhS0ihTxC+FBwtL+oTg+Ts2LoGKb9/ONiH s+S0H/leGbkWKeY9iA0HrZwdOArRWxA= -----END CERTIFICATE-----Generated at Fri Sep 25 16:27:36 2026 by rpki-client