$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa File: 87a46c38-0b2e-3092-98ab-e7574f1b0614.roa (raw, json) Hash identifier: PVg1/Gi/mQPSGhkTnBWh/Bekcis3/0Uu8+qsk+b6SR4= Subject key identifier: 78:DC:52:CB:B9:B5:BF:18:CA:2F:A4:8B:7B:A5:D3:BD:F7:10:39:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DC6CB13863728A569A498A400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 15169 IP address blocks: 172.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:13:86:37:28:a5:69:a4:98:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=6196f263-e15a-42c6-962b-34a511bb0f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:cc:8a:9a:9a:56:fb:d1:08:13:55:2b:ad: a1:cc:c0:ec:9b:86:ee:f0:74:7e:ec:ad:ed:09:33: 9f:2c:d5:a6:b3:d9:6d:64:b6:22:2d:aa:04:de:b7: 3d:db:8e:c2:89:c2:62:05:61:3c:5a:d8:76:60:9e: 1c:60:14:e9:60:39:7a:6a:b2:ff:56:35:10:e3:35: aa:7d:17:de:8c:19:64:8a:ac:5f:6e:b3:a2:8d:ae: 70:35:a3:51:86:92:ba:92:07:e0:89:16:5e:a3:fd: 9a:c7:70:0d:44:2d:ec:1c:7e:58:f0:2c:3d:d2:13: 49:22:01:63:77:b1:d9:8b:be:b1:9f:5e:ea:9a:7e: 0a:a4:01:cc:22:fc:0e:c1:48:63:68:e7:b7:27:fc: 19:96:41:81:c0:f4:d2:ce:82:20:6e:ab:6a:0e:f5: 50:81:bc:27:8f:53:f1:1d:3c:37:e2:f5:b3:87:f6: 13:ee:19:73:7d:18:43:70:60:21:60:e4:95:ac:b6: 2c:b0:df:91:43:26:9e:97:e4:39:a7:93:11:98:f0: 8a:4e:2d:1e:77:cc:43:7a:4c:0d:07:67:5e:a8:0f: aa:70:7a:83:ed:20:f8:cd:67:e3:c3:25:8f:4c:23: f0:4c:1d:76:e5:69:85:4f:e6:9b:55:87:96:7b:a9: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:52:CB:B9:B5:BF:18:CA:2F:A4:8B:7B:A5:D3:BD:F7:10:39:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/87a46c38-0b2e-3092-98ab-e7574f1b0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ec:f6:f5:ee:11:19:4f:f9:3d:54:6c:8f:1c:83:84:17:45: 7b:6b:02:16:19:83:2c:a7:53:03:3a:23:7d:00:d4:17:0d:cb: 3d:47:57:35:b9:60:55:88:c4:5c:00:f8:3b:d5:ab:7d:67:ca: 17:fb:32:b6:b2:ce:8e:b6:fb:f3:98:04:8b:c5:9e:ab:3d:26: fc:e3:12:97:c0:1b:19:72:56:1e:75:c1:fa:96:36:7b:7f:4e: 4f:fb:cf:e7:89:76:5e:eb:55:62:66:67:e6:3c:f4:85:1c:7c: 3a:93:5b:76:f0:29:a7:b9:f0:93:e9:0b:14:04:b4:9a:fb:6e: 96:46:8d:6c:73:4a:d9:f5:89:a4:8e:69:40:a4:8f:99:bc:95: 9a:c5:bb:67:02:b8:c0:b8:3e:ac:e9:71:30:c8:19:3c:91:97: 79:1e:39:80:c8:37:c8:ee:1f:ac:28:9e:c5:58:1e:e2:63:73: 6e:19:ba:c7:44:6d:c2:2b:79:af:54:95:e2:23:36:a5:4a:09: 1b:66:01:8c:c1:83:cc:b1:a6:3c:26:7e:05:8b:d7:f5:78:46: 59:3a:44:0a:6c:0b:c2:b7:7e:42:fd:ee:15:da:44:77:b2:27: 63:ef:a5:6c:4c:39:59:c5:9e:db:ad:f6:72:1c:44:4c:64:01: 59:ae:bc:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyxOGNyilaaSYpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk NjE5NmYyNjMtZTE1YS00MmM2LTk2MmItMzRhNTExYmIwZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBDMipqaVvvRCBNVK62hzMDsm4bu8HR+7K3t CTOfLNWms9ltZLYiLaoE3rc9247CicJiBWE8Wth2YJ4cYBTpYDl6arL/VjUQ4zWq fRfejBlkiqxfbrOija5wNaNRhpK6kgfgiRZeo/2ax3ANRC3sHH5Y8Cw90hNJIgFj d7HZi76xn17qmn4KpAHMIvwOwUhjaOe3J/wZlkGBwPTSzoIgbqtqDvVQgbwnj1Px HTw34vWzh/YT7hlzfRhDcGAhYOSVrLYssN+RQyael+Q5p5MRmPCKTi0ed8xDekwN B2deqA+qcHqD7SD4zWfjwyWPTCPwTB125WmFT+abVYeWe6ncnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjcUsu5tb8Yyi+ki3ul0733EDlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODdhNDZjMzgtMGIyZS0z MDkyLTk4YWItZTc1NzRmMWIwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXs9vXuERlP+T1UbI8cg4QXRXtrAhYZgyynUwM6I30A1BcNyz1HVzW5 YFWIxFwA+DvVq31nyhf7Mrayzo62+/OYBIvFnqs9JvzjEpfAGxlyVh51wfqWNnt/ Tk/7z+eJdl7rVWJmZ+Y89IUcfDqTW3bwKae58JPpCxQEtJr7bpZGjWxzStn1iaSO aUCkj5m8lZrFu2cCuMC4PqzpcTDIGTyRl3keOYDIN8juH6wonsVYHuJjc24ZusdE bcIrea9UleIjNqVKCRtmAYzBg8yxpjwmfgWL1/V4Rlk6RApsC8K3fkL97hXaRHey J2PvpWxMOVnFntut9nIcRExkAVmuvIE= -----END CERTIFICATE-----Generated at Wed May 13 01:43:18 2026 by rpki-client