$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a75155-6b89-39f3-8fc5-37a37b5a2287.roa File: 92a75155-6b89-39f3-8fc5-37a37b5a2287.roa (raw, json) Hash identifier: iYMAxymNXKj/2Nqd3NvRGvr/uhAWM38zyq0dd9eWkxI= Subject key identifier: FE:93:B7:69:91:79:56:FB:28:49:F9:6E:45:39:17:82:70:F8:6F:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FD25C0B7213B4C6A2EA031340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a75155-6b89-39f3-8fc5-37a37b5a2287.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 15169 IP address blocks: 172.253.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5c:0b:72:13:b4:c6:a2:ea:03:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=459336f5-f174-41b2-a3a2-89c51b10b395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6e:9b:3b:57:38:58:d9:92:e0:47:bd:e9:2a: 57:d7:14:8b:ba:a9:74:97:7f:8b:3c:b6:cd:db:9c: b9:a8:65:7d:f2:53:a1:19:26:3a:d4:6d:ef:e0:93: de:61:b8:71:b7:91:6e:85:24:d7:a0:20:0a:4b:c5: 15:37:df:88:18:88:41:7e:3a:d5:fd:35:00:02:ff: b9:82:08:22:32:54:83:dc:ad:04:c4:89:11:eb:a8: 78:b5:8b:87:37:e4:d2:df:c1:6b:a7:dd:f4:4e:6e: 44:a1:9e:1b:80:9b:d6:2d:a6:82:32:6f:32:d9:42: d2:b3:55:b5:ca:72:ea:60:c1:7b:91:3d:12:02:4a: 8a:39:18:32:2b:95:14:3d:f9:15:30:e4:c7:68:42: 98:18:cd:b6:cc:8f:9c:69:cd:0c:31:4c:69:66:da: 5f:6b:4b:43:25:49:26:2e:2b:d9:c5:1e:23:a7:ef: 5b:cf:68:7b:0e:ee:91:fb:6d:e3:ca:b9:00:63:30: d4:5b:a4:3a:2b:f7:8c:5a:e9:a6:8d:cf:67:ef:ba: eb:45:47:d4:0d:e7:85:3b:ae:dd:7d:89:15:50:f9: 7f:b1:82:ff:ad:58:4b:7e:4f:6d:9d:0d:f9:c8:b0: 92:a7:00:47:a4:a7:6d:1d:a9:2b:ee:dd:a0:d3:62: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:93:B7:69:91:79:56:FB:28:49:F9:6E:45:39:17:82:70:F8:6F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92a75155-6b89-39f3-8fc5-37a37b5a2287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1a:fa:c8:72:07:1d:4c:12:9c:07:2b:b1:f6:37:c2:48:b1: 54:c7:9a:cb:80:99:4c:d8:08:e8:44:40:69:9b:28:d7:27:29: 2b:ca:df:ef:5d:e3:96:e2:75:86:41:69:1a:f7:ae:39:85:75: 27:54:e5:12:d7:71:3d:52:00:c6:6e:c3:8b:2d:d8:b6:3a:0a: 57:cf:12:f7:8c:3e:26:ad:f7:ed:a6:e4:5a:09:1f:01:20:9c: 99:c4:b6:25:4b:b8:95:e3:c9:97:f8:49:79:8a:05:80:3d:02: 89:28:28:37:82:91:79:4d:d7:3b:44:dc:df:a5:7f:23:40:1d: c4:51:5a:d6:75:99:e6:02:48:63:e2:05:86:1b:94:fa:d0:32: aa:49:83:39:01:79:1f:95:2c:d1:74:af:7c:7e:b1:df:a2:af: 02:ee:2c:ee:cc:61:5a:b4:93:d9:50:14:dc:0f:e2:5d:92:06: ff:00:e5:83:59:82:48:fb:d1:70:5e:a8:e5:22:87:ab:f0:ae: 4d:39:26:44:82:73:85:70:48:d8:a7:1c:f2:91:7c:10:d9:1c: c1:2f:3b:1d:1b:6a:09:14:2a:5b:29:21:0c:0c:7c:b6:84:b0: 68:b2:10:69:89:a0:63:4d:3e:0e:70:ae:c9:45:0a:2f:c4:83: ac:95:1d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SXAtyE7TGouoDE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk NDU5MzM2ZjUtZjE3NC00MWIyLWEzYTItODljNTFiMTBiMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW6bO1c4WNmS4Ee96SpX1xSLuql0l3+LPLbN 25y5qGV98lOhGSY61G3v4JPeYbhxt5FuhSTXoCAKS8UVN9+IGIhBfjrV/TUAAv+5 gggiMlSD3K0ExIkR66h4tYuHN+TS38Frp930Tm5EoZ4bgJvWLaaCMm8y2ULSs1W1 ynLqYMF7kT0SAkqKORgyK5UUPfkVMOTHaEKYGM22zI+cac0MMUxpZtpfa0tDJUkm LivZxR4jp+9bz2h7Du6R+23jyrkAYzDUW6Q6K/eMWummjc9n77rrRUfUDeeFO67d fYkVUPl/sYL/rVhLfk9tnQ35yLCSpwBHpKdtHakr7t2g02IyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6Tt2mReVb7KEn5bkU5F4Jw+G84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTJhNzUxNTUtNmI4OS0z OWYzLThmYzUtMzdhMzdiNWEyMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEka+shyBx1MEpwHK7H2N8JIsVTHmsuAmUzYCOhEQGmbKNcnKSvK3+9d 45bidYZBaRr3rjmFdSdU5RLXcT1SAMZuw4st2LY6ClfPEveMPiat9+2m5FoJHwEg nJnEtiVLuJXjyZf4SXmKBYA9AokoKDeCkXlN1ztE3N+lfyNAHcRRWtZ1meYCSGPi BYYblPrQMqpJgzkBeR+VLNF0r3x+sd+irwLuLO7MYVq0k9lQFNwP4l2SBv8A5YNZ gkj70XBeqOUih6vwrk05JkSCc4VwSNinHPKRfBDZHMEvOx0bagkUKlspIQwMfLaE sGiyEGmJoGNNPg5wrslFCi/Eg6yVHUc= -----END CERTIFICATE-----Generated at Sun Nov 15 21:13:30 2026 by rpki-client