$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa File: 8b62f499-9b92-390a-9385-a2c9502ca293.roa (raw, json) Hash identifier: YKXK6RN9KtyGvLsTOVqFwo6JGOJV2wuQ2MKtHPaD068= Subject key identifier: 2A:DC:A0:03:9A:DF:9F:DC:70:64:E3:FB:75:A8:CC:97:84:8B:01:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4972A8BC21266B162EAF4000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 172.253.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a8:bc:21:26:6b:16:2e:af:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8bae575-31dc-4e9d-8c67-b17699b2f71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:d7:58:c2:40:0f:6f:87:bf:56:cc:b3:e0: 75:42:b0:78:fe:10:ba:b1:15:e1:2e:7f:07:87:75: 81:2f:52:5f:30:f4:b4:19:b3:d6:62:b5:21:6c:dd: a4:65:1c:fc:b0:db:e8:05:ae:47:6f:cb:a0:ea:ce: 3d:13:54:84:75:80:c9:70:69:3d:a4:db:de:22:c1: cb:ba:36:dc:1a:df:4f:2a:0e:cc:ef:ef:f3:e9:90: 51:24:46:71:bf:31:63:b4:ac:b1:4b:22:79:69:40: 86:65:92:58:ec:26:b5:db:c9:3a:ba:42:03:1f:bf: 40:be:c6:cc:36:05:b4:d4:a8:6b:42:a0:8a:b0:a5: a6:1f:ac:4d:d5:68:a3:cb:5e:fc:dc:70:28:87:52: 24:54:a5:74:fe:33:69:11:99:03:ef:a6:44:dd:69: c6:7c:d7:d5:06:bc:7f:42:5c:26:6c:7e:9a:06:36: 64:33:7e:2b:77:5c:09:53:36:a7:1d:89:71:36:b5: f1:db:0f:0b:28:15:2c:78:40:d5:56:6f:8f:b2:5f: 25:d2:f2:de:fd:bb:48:a2:f0:6e:92:48:d0:99:a7: d1:83:c3:95:14:be:aa:c9:29:b7:13:fd:04:a2:8e: 59:ce:d5:2e:6e:6e:33:2e:29:c9:64:97:65:c4:57: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:A0:03:9A:DF:9F:DC:70:64:E3:FB:75:A8:CC:97:84:8B:01:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:af:7f:82:f7:6e:9e:72:da:d6:71:b8:60:fa:38:df:ff:5d: 11:02:07:63:cf:4f:c3:8e:61:87:f2:d6:f2:52:ee:3c:e8:cb: a0:0d:55:60:6e:94:b0:21:af:26:43:2e:3e:fc:10:1a:2a:70: 0a:4f:51:8a:0a:9b:a2:18:e9:9a:c7:36:fc:a1:45:45:c0:ee: c0:2c:a1:fd:61:d5:7b:a2:f2:4a:45:2f:cd:82:f3:44:0c:f8: 34:64:20:a5:6d:91:7d:6e:7e:2c:98:f5:d3:27:43:31:cb:52: 85:28:ae:02:fa:2b:9b:16:62:27:60:34:01:b9:c2:b3:2b:6e: bf:6c:30:42:3e:4e:02:51:2c:ad:95:79:ad:39:0a:13:57:65: 61:ac:22:8d:31:1f:f6:c2:44:ea:b2:67:a6:02:95:66:9f:e7: c3:3c:bf:01:59:6a:fb:c0:dd:35:a6:26:b0:80:c9:60:aa:12: fd:58:c3:9f:16:81:31:ae:5d:44:05:f2:3a:a2:d8:26:7b:6f: fc:f4:42:4d:d6:a3:a1:fc:01:0b:67:b6:08:f5:63:9d:70:80: 0e:1c:96:3b:0d:87:3f:39:89:8c:3c:76:5c:c2:73:ca:80:0c: a2:ab:3d:9e:88:4b:ac:79:13:33:a0:59:a9:29:43:43:03:01: 6a:13:9b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcqi8ISZrFi6vQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThiYWU1NzUtMzFkYy00ZTlkLThjNjctYjE3Njk5YjJmNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkPXWMJAD2+Hv1bMs+B1QrB4/hC6sRXhLn8H h3WBL1JfMPS0GbPWYrUhbN2kZRz8sNvoBa5Hb8ug6s49E1SEdYDJcGk9pNveIsHL ujbcGt9PKg7M7+/z6ZBRJEZxvzFjtKyxSyJ5aUCGZZJY7Ca128k6ukIDH79AvsbM NgW01KhrQqCKsKWmH6xN1Wijy1783HAoh1IkVKV0/jNpEZkD76ZE3WnGfNfVBrx/ QlwmbH6aBjZkM34rd1wJUzanHYlxNrXx2w8LKBUseEDVVm+Psl8l0vLe/btIovBu kkjQmafRg8OVFL6qySm3E/0Eoo5ZztUubm4zLinJZJdlxFd28wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrcoAOa35/ccGTj+3WozJeEiwGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGI2MmY0OTktOWI5Mi0z OTBhLTkzODUtYTJjOTUwMmNhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWvf4L3bp5y2tZxuGD6ON//XRECB2PPT8OOYYfy1vJS7jzoy6ANVWBu lLAhryZDLj78EBoqcApPUYoKm6IY6ZrHNvyhRUXA7sAsof1h1Xui8kpFL82C80QM +DRkIKVtkX1ufiyY9dMnQzHLUoUorgL6K5sWYidgNAG5wrMrbr9sMEI+TgJRLK2V ea05ChNXZWGsIo0xH/bCROqyZ6YClWaf58M8vwFZavvA3TWmJrCAyWCqEv1Yw58W gTGuXUQF8jqi2CZ7b/z0Qk3Wo6H8AQtntgj1Y51wgA4cljsNhz85iYw8dlzCc8qA DKKrPZ6IS6x5EzOgWakpQ0MDAWoTm8o= -----END CERTIFICATE-----Generated at Fri Sep 25 22:35:47 2026 by rpki-client