$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa File: 8b62f499-9b92-390a-9385-a2c9502ca293.roa (raw, json) Hash identifier: XA7SPjd/7PRZb5nwsOjg9Kc0YEuC9KCKkMwKSArzBDI= Subject key identifier: 03:8D:6E:2E:3A:20:48:6F:98:50:18:FA:DE:B5:23:89:AC:9B:C1:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DCC6051A9D3585E6559E94400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 15169 IP address blocks: 172.253.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:51:a9:d3:58:5e:65:59:e9:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=df72dea1-6299-4cc3-86de-4004c9c5bab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:f4:7e:6f:a8:3b:42:4e:82:9a:bc:52:6d: ed:c2:4c:f0:9f:50:da:94:49:24:48:17:46:b2:10: 44:97:1f:42:40:3b:41:ea:c4:58:4b:26:d6:80:ff: 63:43:84:7f:87:2b:fe:84:9c:61:e2:25:fd:b1:65: 9c:97:7e:dd:b7:b4:06:db:25:de:e1:e3:ed:0e:74: 60:cd:0f:53:a6:bb:4a:fc:e8:0f:87:36:5d:e4:60: 0e:e7:b3:39:85:3a:83:d5:c3:04:89:6c:2f:68:42: 06:d1:92:97:4a:f0:72:9a:aa:3b:b3:e6:d9:4c:38: ca:57:9a:bb:9e:f8:6f:48:61:eb:37:df:54:6d:39: 0e:dc:f2:84:ed:5b:cf:9f:9a:5c:ae:ee:29:6a:05: f7:79:78:6f:f5:73:2a:39:df:f6:26:ca:db:78:60: e0:49:b6:5d:db:11:9e:86:8a:14:96:0d:29:24:03: 62:a5:5d:67:80:9d:25:d2:41:e2:77:76:c6:28:be: d1:c7:5a:af:fa:b8:07:56:a9:04:f5:a3:e5:7e:20: ca:d5:70:a9:8f:95:ae:08:b3:37:9f:40:b4:cd:6e: 15:85:eb:a8:30:54:93:d6:65:de:1d:cc:2f:12:8e: 34:32:1b:95:b5:62:ea:e4:cb:5d:39:4f:86:cb:45: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8D:6E:2E:3A:20:48:6F:98:50:18:FA:DE:B5:23:89:AC:9B:C1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b62f499-9b92-390a-9385-a2c9502ca293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9b:26:60:2f:3b:b1:5c:b9:d6:8d:35:a9:72:1d:00:49:cf: f2:a3:d9:5d:28:90:5d:2f:d9:24:58:06:f4:36:d8:75:ff:63: 96:2f:4b:e3:51:12:da:4c:1d:5b:e7:e2:bf:26:1c:39:07:3e: d1:ba:de:97:71:7f:5e:41:b1:2c:e6:e3:cd:91:81:b3:94:17: 5c:a3:c1:a6:67:68:73:cc:e4:00:85:8b:aa:b2:80:cc:81:cb: 71:01:31:98:86:31:c0:2f:ff:65:d0:9a:34:56:5e:9c:c9:41: ef:25:23:05:8e:f4:10:51:8b:9e:a8:d1:20:60:81:09:47:e2: 8d:8c:96:a5:fb:0b:96:ba:92:18:f9:22:08:4d:41:e7:31:ce: 52:03:86:9a:38:e4:0e:79:f8:3b:ea:50:d9:b1:81:b3:a1:9f: 9e:9b:f8:44:08:b4:61:55:9d:68:86:56:fa:03:ea:1e:c8:1d: 51:05:69:74:74:04:dc:f8:d2:47:dc:c9:94:f9:84:ef:05:89: 70:95:a2:23:04:41:c8:55:b8:11:c3:21:85:d1:00:87:e7:83: b4:7c:bd:fe:80:f4:9e:94:72:a2:01:1d:eb:1c:ee:16:64:99: 52:56:28:ff:56:4e:cd:46:a3:0a:a2:c7:fd:27:82:92:cc:76: 7a:9b:7c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYFGp01heZVnpRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZGY3MmRlYTEtNjI5OS00Y2MzLTg2ZGUtNDAwNGM5YzViYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA70fm+oO0JOgpq8Um3twkzwn1DalEkkSBdG shBElx9CQDtB6sRYSybWgP9jQ4R/hyv+hJxh4iX9sWWcl37dt7QG2yXe4ePtDnRg zQ9TprtK/OgPhzZd5GAO57M5hTqD1cMEiWwvaEIG0ZKXSvBymqo7s+bZTDjKV5q7 nvhvSGHrN99UbTkO3PKE7VvPn5pcru4pagX3eXhv9XMqOd/2JsrbeGDgSbZd2xGe hooUlg0pJANipV1ngJ0l0kHid3bGKL7Rx1qv+rgHVqkE9aPlfiDK1XCpj5WuCLM3 n0C0zW4VheuoMFST1mXeHcwvEo40MhuVtWLq5MtdOU+Gy0VytwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAONbi46IEhvmFAY+t61I4msm8EdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGI2MmY0OTktOWI5Mi0z OTBhLTkzODUtYTJjOTUwMmNhMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6bJmAvO7FcudaNNalyHQBJz/Kj2V0okF0v2SRYBvQ22HX/Y5YvS+NR EtpMHVvn4r8mHDkHPtG63pdxf15BsSzm482RgbOUF1yjwaZnaHPM5ACFi6qygMyB y3EBMZiGMcAv/2XQmjRWXpzJQe8lIwWO9BBRi56o0SBggQlH4o2MlqX7C5a6khj5 IghNQecxzlIDhpo45A55+DvqUNmxgbOhn56b+EQItGFVnWiGVvoD6h7IHVEFaXR0 BNz40kfcyZT5hO8FiXCVoiMEQchVuBHDIYXRAIfng7R8vf6A9J6UcqIBHesc7hZk mVJWKP9WTs1Gowqix/0ngpLMdnqbfPk= -----END CERTIFICATE-----Generated at Wed May 13 03:29:25 2026 by rpki-client