$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa File: 71caa928-410b-3dac-b40d-bf6cf8a7795f.roa (raw, json) Hash identifier: ZFNIZ5yeoxNit9xuAlLo/BY0+IRa9fT8TlPFuABxMhU= Subject key identifier: 89:17:89:54:E5:20:BF:AB:D6:15:17:FA:DB:10:BE:22:DF:06:37:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FB94770D9F9BF6086650 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fb:94:77:0d:9f:9b:f6:08:66:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=11531c73-95cb-4717-80b1-389a001b24b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:51:2e:37:23:13:0e:ab:75:17:92:d8:59: 3a:ea:a8:f6:1f:49:fa:fb:14:d4:df:7e:32:2d:b3: 18:52:af:38:d8:8b:55:65:92:70:22:e2:bc:dc:6f: 70:49:62:b0:02:a7:59:55:c3:10:e2:6e:1e:a0:ca: 6d:02:a5:a9:78:ed:b3:14:db:f9:30:5f:a7:cc:64: d7:0d:43:4d:32:47:fa:75:b4:f9:64:28:c1:c5:ee: e4:e8:a9:0d:32:fe:d0:92:01:78:03:61:9f:01:8f: 7d:14:5f:b7:b2:47:e3:ea:39:fe:8a:30:30:70:71: d7:d3:e9:64:58:54:a0:16:23:10:f6:26:d4:d1:6f: 08:63:87:2a:cd:91:46:1b:05:52:07:2d:68:1f:7f: 53:55:64:80:64:7d:ee:a6:92:15:c4:39:76:bd:b2: e5:d4:2b:ad:7c:0c:e1:c1:2b:77:e7:df:f6:bb:4a: fe:1f:d7:87:63:ed:1f:c4:ba:02:82:bb:e8:88:90: 45:de:21:ad:7f:f7:ef:5d:24:6b:28:ac:b9:91:54: 16:19:7b:7a:bd:d5:2a:fe:b6:50:49:a1:a1:26:d2: 16:9c:b7:7e:24:5a:0e:68:a7:0b:00:95:89:57:5f: 2b:6a:db:ce:19:e8:8d:27:e7:54:a1:4e:cc:06:02: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:89:54:E5:20:BF:AB:D6:15:17:FA:DB:10:BE:22:DF:06:37:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:19:6d:a7:76:c1:79:9b:e8:df:05:e4:f8:0f:21:4d:f3:27: 83:01:31:8c:26:9d:54:e1:e1:be:29:f1:6d:79:74:cb:2a:b8: 57:b2:d7:ff:24:71:99:28:06:f2:a8:62:e0:da:f8:96:08:e8: 0e:d7:a8:75:a8:36:eb:f1:19:a1:c0:b3:2f:9b:dc:16:40:df: 29:ce:7f:29:2d:bf:0e:05:be:5c:e5:3f:1b:5c:87:ab:e3:08: ff:7e:30:74:73:80:40:8a:b8:57:03:64:a9:39:86:0e:c8:8d: 54:9c:28:2d:4f:0e:0f:50:03:0b:d1:2e:7c:0c:a9:e1:1a:9b: 3e:5d:f9:61:3f:47:87:5a:89:66:bc:dc:60:4e:67:59:3a:9e: 76:3e:27:38:b2:fd:14:b6:77:de:03:c2:cf:b8:11:12:6e:85: 2c:17:0b:27:89:dc:a9:18:41:3a:f0:64:85:83:41:b9:57:f0: cf:eb:57:84:39:97:0b:1e:75:be:42:33:1a:79:b7:fc:53:43: 8d:8c:37:8a:45:11:a9:52:25:c6:86:81:34:b8:ab:b0:6a:4a: ba:49:2c:9b:09:7b:0e:dd:fd:c0:7d:24:7f:be:4d:b8:99:64: 22:55:7b:ea:d3:49:32:87:c3:7f:d4:90:87:7b:00:47:dc:c0: 89:1c:52:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPuUdw2fm/YIZlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTE1MzFjNzMtOTVjYi00NzE3LTgwYjEtMzg5YTAwMWIyNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQpRLjcjEw6rdReS2Fk66qj2H0n6+xTU334y LbMYUq842ItVZZJwIuK83G9wSWKwAqdZVcMQ4m4eoMptAqWpeO2zFNv5MF+nzGTX DUNNMkf6dbT5ZCjBxe7k6KkNMv7QkgF4A2GfAY99FF+3skfj6jn+ijAwcHHX0+lk WFSgFiMQ9ibU0W8IY4cqzZFGGwVSBy1oH39TVWSAZH3uppIVxDl2vbLl1CutfAzh wSt359/2u0r+H9eHY+0fxLoCgrvoiJBF3iGtf/fvXSRrKKy5kVQWGXt6vdUq/rZQ SaGhJtIWnLd+JFoOaKcLAJWJV18ratvOGeiNJ+dUoU7MBgL3EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkXiVTlIL+r1hUX+tsQviLfBjc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzFjYWE5MjgtNDEwYi0z ZGFjLWI0MGQtYmY2Y2Y4YTc3OTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIZbad2wXmb6N8F5PgPIU3zJ4MBMYwmnVTh4b4p8W15dMsquFey1/8k cZkoBvKoYuDa+JYI6A7XqHWoNuvxGaHAsy+b3BZA3ynOfyktvw4FvlzlPxtch6vj CP9+MHRzgECKuFcDZKk5hg7IjVScKC1PDg9QAwvRLnwMqeEamz5d+WE/R4daiWa8 3GBOZ1k6nnY+Jziy/RS2d94Dws+4ERJuhSwXCyeJ3KkYQTrwZIWDQblX8M/rV4Q5 lwsedb5CMxp5t/xTQ42MN4pFEalSJcaGgTS4q7BqSrpJLJsJew7d/cB9JH++TbiZ ZCJVe+rTSTKHw3/UkId7AEfcwIkcUuM= -----END CERTIFICATE-----Generated at Fri Sep 25 08:52:40 2026 by rpki-client