$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa File: 856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa (raw, json) Hash identifier: M8cNX4DXEGRestJW+Jj5vKKVou0ljFn4tsaXZb2ktF4= Subject key identifier: BD:08:E9:BA:3F:04:D8:B0:F4:57:EE:AE:E5:1E:32:A8:22:59:83:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E74CF7057FE0F20E7C3A68880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 15169 IP address blocks: 172.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:70:57:fe:0f:20:e7:c3:a6:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=09731f9f-0994-4224-be68-a1275ddae795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7e:86:13:49:37:44:ec:57:af:c7:dc:f4:50: 4c:21:84:15:0a:1a:a5:0d:c7:5e:ad:f0:d8:04:d7: 8c:b3:56:ae:f8:0d:41:01:03:a0:67:91:b3:3b:b1: f8:fd:43:78:3e:fd:8e:d2:80:a8:de:67:e5:fc:22: ef:e5:26:1d:fe:6f:9d:cd:18:a1:e9:e6:70:13:19: c3:1f:c4:c9:78:8e:4e:2d:83:1f:16:7c:02:f4:7c: ef:67:14:2c:87:43:85:dd:53:00:d1:6b:4a:cc:61: 29:8a:8d:84:35:45:72:34:12:8c:50:de:c5:eb:8b: f9:22:96:52:36:bb:27:c8:10:37:ec:58:6d:0e:90: cf:bd:d3:27:55:0a:42:4c:11:d8:6e:5e:59:66:8e: d6:c4:8a:8f:a7:54:59:47:b0:07:23:99:6b:4c:2c: 3d:59:35:52:f9:2e:fa:ec:06:d6:e7:5b:a0:48:1d: 77:6f:e1:e4:7c:1f:c5:13:a1:87:e2:3b:91:df:5b: 1a:d1:35:cc:7c:30:af:c6:13:53:fe:f4:47:6b:ae: 05:30:0f:e2:a0:a6:56:38:c4:7b:e4:7e:6c:b5:9f: a4:d5:15:98:ee:d9:1b:7f:58:0b:f0:73:97:1d:24: d7:f8:49:9d:a3:47:79:2e:49:50:80:55:03:d6:b2: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:08:E9:BA:3F:04:D8:B0:F4:57:EE:AE:E5:1E:32:A8:22:59:83:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/856a62b3-eeda-3acd-b7d5-be7d8a9f9ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:28:4f:64:84:66:85:1a:4f:9a:84:ca:0a:81:62:c8:63:48: 2c:67:ba:60:33:75:8f:a4:50:42:7a:f8:c4:e4:fb:26:bc:37: 83:62:1c:b2:8c:8b:4a:1e:7a:8f:58:eb:3b:0f:54:7c:48:4d: e3:d6:86:c8:c1:a5:19:36:53:dd:d3:31:7b:0c:90:3f:b1:e2: 70:18:0a:1e:c4:4b:65:ed:0d:62:80:a1:66:4f:45:ca:08:eb: b5:2f:82:7b:31:64:ca:dd:a6:fa:19:15:20:01:d5:19:d4:f3: 21:10:e9:f0:30:4d:e4:7e:f5:a6:a1:4c:09:ca:a7:b3:db:4f: f5:f4:4b:e3:e1:dc:d1:1f:0e:a5:5c:5d:1f:b1:28:74:1d:2a: 53:ed:c3:de:64:1c:6e:d4:fc:84:71:66:d5:e3:62:a9:56:02: d0:24:5e:8f:e6:f6:43:3d:a2:7d:88:7f:b8:fc:7f:87:35:63: ea:fb:47:54:79:0e:6b:3b:16:1a:6d:31:0f:ea:e1:77:63:e5: c3:25:13:79:db:01:6f:ee:b9:06:de:46:f5:e7:56:4b:6c:74: 23:82:72:39:d8:5b:78:16:04:0c:ba:08:f0:0b:66:98:e6:28: 31:47:35:d4:11:8b:a3:b6:f7:f5:77:76:7c:07:a7:e1:60:ad: 45:1d:27:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3BX/g8g58OmiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk MDk3MzFmOWYtMDk5NC00MjI0LWJlNjgtYTEyNzVkZGFlNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH6GE0k3ROxXr8fc9FBMIYQVChqlDcderfDY BNeMs1au+A1BAQOgZ5GzO7H4/UN4Pv2O0oCo3mfl/CLv5SYd/m+dzRih6eZwExnD H8TJeI5OLYMfFnwC9HzvZxQsh0OF3VMA0WtKzGEpio2ENUVyNBKMUN7F64v5IpZS NrsnyBA37FhtDpDPvdMnVQpCTBHYbl5ZZo7WxIqPp1RZR7AHI5lrTCw9WTVS+S76 7AbW51ugSB13b+HkfB/FE6GH4juR31sa0TXMfDCvxhNT/vRHa64FMA/ioKZWOMR7 5H5stZ+k1RWY7tkbf1gL8HOXHSTX+Emdo0d5LklQgFUD1rL06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0I6bo/BNiw9FfuruUeMqgiWYNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU2YTYyYjMtZWVkYS0z YWNkLWI3ZDUtYmU3ZDhhOWY5Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMoT2SEZoUaT5qEygqBYshjSCxnumAzdY+kUEJ6+MTk+ya8N4NiHLKM i0oeeo9Y6zsPVHxITePWhsjBpRk2U93TMXsMkD+x4nAYCh7ES2XtDWKAoWZPRcoI 67UvgnsxZMrdpvoZFSAB1RnU8yEQ6fAwTeR+9aahTAnKp7PbT/X0S+Ph3NEfDqVc XR+xKHQdKlPtw95kHG7U/IRxZtXjYqlWAtAkXo/m9kM9on2If7j8f4c1Y+r7R1R5 Dms7FhptMQ/q4Xdj5cMlE3nbAW/uuQbeRvXnVktsdCOCcjnYW3gWBAy6CPALZpjm KDFHNdQRi6O29/V3dnwHp+FgrUUdJ80= -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:24 2026 by rpki-client