$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa File: 75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa (raw, json) Hash identifier: 8FOq88sP4clf+s0NdgWOYtug62baKHm133R1G1mCIyk= Subject key identifier: BE:2B:0A:F6:D9:05:ED:2A:F4:0C:01:DD:B1:B4:15:C3:DA:74:00:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CFAF8308EE3956F1A2E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:fa:f8:30:8e:e3:95:6f:1a:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3944a390-85e7-4fd3-a594-8c63205db614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:04:d0:01:2c:f1:fe:7c:f1:40:62:44:aa: dc:e2:c0:e4:4b:04:3f:94:77:00:ec:1a:53:9f:3f: 94:5e:c1:b5:0d:c1:b6:70:bb:40:27:fa:fd:a2:f6: df:e3:33:eb:5e:3c:3f:36:0a:9c:18:18:af:f2:c6: d5:ff:6c:8e:26:8e:0d:ee:02:3c:77:47:b6:29:81: 34:8c:39:2c:69:cb:c6:3c:ec:c9:61:3f:a1:b9:4d: 6f:c1:a1:d0:ec:24:20:03:2a:10:50:0d:59:36:39: e1:6d:41:10:e4:e1:44:f0:95:29:7e:f2:be:b5:cd: 4c:b9:8a:08:b7:5f:a7:32:8a:78:e9:b3:41:8e:ed: 91:93:70:86:44:9e:4c:60:9c:d1:6b:03:38:91:fa: 65:1e:09:63:2a:9e:19:9a:35:a8:35:b4:08:21:f0: 6e:2c:b9:f8:df:1f:4f:77:88:02:86:dc:51:da:8b: a2:d9:86:a3:3d:a5:6e:99:67:b2:2f:25:05:72:3d: 49:70:99:da:a8:37:ba:16:f5:4b:1c:06:5b:a2:af: 03:62:0b:c2:96:48:76:1b:b0:db:5d:b8:d9:d5:3c: 1d:15:95:2c:72:2e:39:5d:87:2d:a9:09:c7:ac:20: 96:ac:71:25:e3:d1:a4:b3:1f:3a:71:db:d1:1c:4d: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2B:0A:F6:D9:05:ED:2A:F4:0C:01:DD:B1:B4:15:C3:DA:74:00:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75eb61b2-a7ae-3a66-b642-a112bf9206a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:02:7d:8b:66:d1:d8:26:81:15:66:d4:1d:5c:b4:66:d6:31: 57:3d:da:f6:47:d9:d7:e5:6b:b6:f9:ef:f8:72:e6:de:ee:2c: 32:96:4f:28:7a:c8:2e:23:17:c4:44:7a:81:2e:ba:75:7c:24: e4:49:6b:cd:c9:ef:6d:ed:b9:14:89:10:1a:1b:7a:69:3f:65: d3:cc:d9:5a:2a:c1:c2:5d:d2:82:80:29:0a:75:14:2d:1a:b3: bb:07:17:74:84:28:34:eb:a7:a9:88:f2:55:5b:95:83:ea:d0: 80:35:88:17:37:3b:89:fb:36:1b:a7:4c:24:50:33:ab:14:5c: 83:9e:96:69:57:3c:35:5b:b2:31:10:b7:44:2a:be:ab:48:c2: 7a:36:5a:23:f3:ad:1e:14:22:87:34:0d:f1:23:d2:f3:79:20: cd:4a:29:7c:a6:69:ba:50:58:a3:e4:7d:9c:88:98:1c:2d:15: 37:b5:b1:09:8e:07:01:0b:b2:8f:5e:1f:28:30:b8:3e:3f:1c: 83:08:c4:6f:10:e6:2f:f6:c6:00:35:cb:32:f8:a8:85:b2:14: ab:4c:7f:50:36:86:f0:81:94:46:5c:17:7a:86:bb:ad:c7:b2: 8b:6c:8e:c2:7d:c5:da:51:58:16:b7:59:36:8b:6a:3b:44:39: 2b:57:67:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPr4MI7jlW8aLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk0NGEzOTAtODVlNy00ZmQzLWE1OTQtOGM2MzIwNWRiNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf8E0AEs8f588UBiRKrc4sDkSwQ/lHcA7BpT nz+UXsG1DcG2cLtAJ/r9ovbf4zPrXjw/NgqcGBiv8sbV/2yOJo4N7gI8d0e2KYE0 jDksacvGPOzJYT+huU1vwaHQ7CQgAyoQUA1ZNjnhbUEQ5OFE8JUpfvK+tc1MuYoI t1+nMop46bNBju2Rk3CGRJ5MYJzRawM4kfplHgljKp4ZmjWoNbQIIfBuLLn43x9P d4gChtxR2oui2YajPaVumWeyLyUFcj1JcJnaqDe6FvVLHAZboq8DYgvClkh2G7Db XbjZ1TwdFZUsci45XYctqQnHrCCWrHEl49Gksx86cdvRHE2F4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4rCvbZBe0q9AwB3bG0FcPadAAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzVlYjYxYjItYTdhZS0z YTY2LWI2NDItYTExMmJmOTIwNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwCfYtm0dgmgRVm1B1ctGbWMVc92vZH2dfla7b57/hy5t7uLDKWTyh6 yC4jF8REeoEuunV8JORJa83J723tuRSJEBobemk/ZdPM2VoqwcJd0oKAKQp1FC0a s7sHF3SEKDTrp6mI8lVblYPq0IA1iBc3O4n7NhunTCRQM6sUXIOelmlXPDVbsjEQ t0QqvqtIwno2WiPzrR4UIoc0DfEj0vN5IM1KKXymabpQWKPkfZyImBwtFTe1sQmO BwELso9eHygwuD4/HIMIxG8Q5i/2xgA1yzL4qIWyFKtMf1A2hvCBlEZcF3qGu63H sotsjsJ9xdpRWBa3WTaLajtEOStXZzw= -----END CERTIFICATE-----Generated at Fri Sep 25 05:43:56 2026 by rpki-client