$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa File: 52603226-b4de-3bb1-a725-54436b999c2e.roa (raw, json) Hash identifier: PZxdeTQ3yXP0wH9mdE8J45QN8gGBUJKb33zSMMwX+vQ= Subject key identifier: 5D:BF:29:7B:86:FA:64:D6:C6:44:F8:5A:69:12:4D:0E:79:96:C5:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00045C9DC9E83E2A556C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:5c:9d:c9:e8:3e:2a:55:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9c8873a3-644f-4b68-8e94-5ba29794eff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:f6:5c:03:58:a8:fd:a2:23:c7:2e:7a:a4: 97:4d:a8:68:ce:de:59:84:32:c3:5b:30:63:eb:fe: 52:48:45:0e:ff:cc:ee:cc:70:1b:cc:3d:17:08:38: 09:0f:78:7a:76:2c:9a:c2:f2:53:9f:85:90:0b:e9: ab:55:47:70:d3:d6:fb:64:96:45:65:e5:19:c7:64: 8c:5a:30:70:5b:e5:7f:fd:78:5d:db:8e:3b:9e:91: 00:25:d3:1f:2b:a1:a5:b6:63:38:88:a1:d8:76:19: 3a:bf:81:76:f9:66:49:7f:79:66:e7:47:04:f3:27: 7f:18:5b:0a:fd:0f:03:27:70:9a:6d:11:d8:08:13: 68:98:af:53:fa:7a:5f:ca:4c:4c:a3:93:6c:6c:98: b2:35:9f:99:90:80:66:d9:1d:e2:96:2b:21:40:bb: ba:23:21:c3:3e:9f:6c:3c:59:40:45:1c:2e:93:98: 83:5d:26:49:a5:5e:84:1a:d9:5f:cc:fd:54:5f:5c: d6:b5:e6:98:e5:30:f9:92:6c:b5:79:76:d2:3c:51: 9b:47:47:4a:e2:7d:fc:ed:ab:82:61:9d:e1:19:94: d4:ff:25:72:74:84:43:45:02:b0:d7:c4:ca:57:77: 09:8e:43:ef:05:f6:50:61:ad:6a:7e:ad:3d:d2:8e: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:29:7B:86:FA:64:D6:C6:44:F8:5A:69:12:4D:0E:79:96:C5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ed:34:10:91:8b:61:29:a0:03:6e:63:1a:03:86:ce:96:4c: e2:60:6a:cf:cf:ba:27:63:7b:35:72:fe:29:34:7b:16:7c:a5: db:79:47:05:30:2f:1f:70:bd:a8:b9:56:ff:ba:38:72:f9:02: 4f:5c:de:f0:50:55:2c:ad:11:24:82:ff:0a:1c:13:ac:98:c9: 42:23:2c:4c:0d:c2:4a:55:ad:bc:a2:1a:ab:61:bf:c3:70:be: 02:59:1d:95:cd:0f:91:1a:a9:93:75:2b:bd:d9:bf:7a:c6:74: 4d:0f:5f:37:48:42:83:9c:f6:d5:1c:3f:58:85:06:3d:8a:ae: ab:76:1a:2f:d3:3b:7c:b7:14:1b:8e:6c:f0:c7:a4:14:d6:6d: 5a:e7:d9:ac:cf:9b:10:4b:9a:cc:a4:b5:a7:6d:54:e3:89:3a: 03:f5:cd:0f:79:9d:b9:c4:fa:2f:d1:b4:a7:c8:21:d1:15:e9: e1:2a:fe:8c:a2:62:53:38:40:de:b8:65:43:4c:1d:a9:e3:88: 41:3d:d3:a4:65:38:45:ce:7b:8e:cb:1b:10:4a:54:6c:5e:e8: e6:6a:03:da:94:21:db:3b:66:44:c9:ad:0a:62:60:ea:55:34: c9:98:da:5b:6d:15:d0:f2:8b:14:c0:d1:97:4f:a4:fa:d3:e2: 44:4a:0d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AARcncnoPipVbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWM4ODczYTMtNjQ0Zi00YjY4LThlOTQtNWJhMjk3OTRlZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1D2XANYqP2iI8cueqSXTahozt5ZhDLDWzBj 6/5SSEUO/8zuzHAbzD0XCDgJD3h6diyawvJTn4WQC+mrVUdw09b7ZJZFZeUZx2SM WjBwW+V//Xhd2447npEAJdMfK6GltmM4iKHYdhk6v4F2+WZJf3lm50cE8yd/GFsK /Q8DJ3CabRHYCBNomK9T+npfykxMo5NsbJiyNZ+ZkIBm2R3ilishQLu6IyHDPp9s PFlARRwuk5iDXSZJpV6EGtlfzP1UX1zWteaY5TD5kmy1eXbSPFGbR0dK4n387auC YZ3hGZTU/yVydIRDRQKw18TKV3cJjkPvBfZQYa1qfq090o4aBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2/KXuG+mTWxkT4WmkSTQ55lsVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTI2MDMyMjYtYjRkZS0z YmIxLWE3MjUtNTQ0MzZiOTk5YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvtNBCRi2EpoANuYxoDhs6WTOJgas/PuidjezVy/ik0exZ8pdt5RwUw Lx9wvai5Vv+6OHL5Ak9c3vBQVSytESSC/wocE6yYyUIjLEwNwkpVrbyiGqthv8Nw vgJZHZXND5EaqZN1K73Zv3rGdE0PXzdIQoOc9tUcP1iFBj2Krqt2Gi/TO3y3FBuO bPDHpBTWbVrn2azPmxBLmsyktadtVOOJOgP1zQ95nbnE+i/RtKfIIdEV6eEq/oyi YlM4QN64ZUNMHanjiEE906RlOEXOe47LGxBKVGxe6OZqA9qUIds7ZkTJrQpiYOpV NMmY2lttFdDyixTA0ZdPpPrT4kRKDa0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:27 2026 by rpki-client