$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa File: 978c148b-3bd8-3213-aa1e-23bead315038.roa (raw, json) Hash identifier: RJ5VH4y30NcPoZ7XOn7h4hjlGzE63MXtMi0AsSZaDtM= Subject key identifier: F9:D8:13:41:C5:36:8D:1B:65:EB:18:38:D7:11:CF:94:20:70:58:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B864CAF9A1AA84A86DE19D6C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 172.253.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:af:9a:1a:a8:4a:86:de:19:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=e33debc8-4d7c-44ce-a367-4839c84bf827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:1d:36:0e:d2:09:93:25:46:3f:c8:64:c1: 4e:1b:5d:b6:9f:af:7f:d2:8a:33:44:fa:aa:45:5b: ab:9e:dd:4e:93:19:5f:56:af:2a:e6:bf:90:72:4e: 73:da:09:a5:75:03:3a:27:93:96:9f:1b:3b:13:87: eb:b7:99:22:ac:2c:2b:cd:a6:e4:e6:c6:2a:20:36: d3:2c:a9:c8:fe:4e:19:ff:12:a2:73:6d:8c:c0:d1: 22:2f:41:5c:02:9b:b4:03:5f:f7:1f:d0:df:78:c9: 92:3b:a5:60:00:29:e8:76:e4:9b:11:6f:6f:25:70: 74:01:d2:a7:50:fe:a4:05:48:91:82:5a:69:38:af: 07:42:fd:32:8d:52:b5:73:a3:21:b6:e6:dc:06:ff: 85:e5:8c:fa:da:72:9b:41:28:77:9d:74:e0:ea:4e: 55:a5:4f:ee:d5:d2:ad:26:24:1c:9c:6f:4f:56:4d: a5:25:2d:b2:c8:5a:50:a1:36:d9:34:40:03:d8:c4: a8:1a:85:79:dc:8e:b1:85:ef:0f:84:a9:61:d0:26: 81:78:25:15:8a:cb:08:da:77:3c:52:b8:73:1d:34: 4a:31:14:9b:e4:60:91:30:64:53:fd:25:9f:e8:ae: 43:ba:9f:88:af:66:22:5d:15:98:65:a3:50:2c:ae: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D8:13:41:C5:36:8D:1B:65:EB:18:38:D7:11:CF:94:20:70:58:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/978c148b-3bd8-3213-aa1e-23bead315038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:59:b8:b9:49:3e:9a:c4:3d:f2:29:b2:e8:89:15:0b:9a:b4: e9:d3:5d:2c:ee:90:82:85:e8:2a:98:8d:09:40:d9:66:1f:f6: fe:cc:b7:4c:0d:95:ae:c9:59:1e:16:0e:55:5b:fa:64:cb:86: 0d:fe:a0:11:0a:f2:6f:c6:bb:a0:ff:5f:c6:f2:db:f3:11:7c: b5:14:e6:3b:01:5c:ea:00:c1:c4:dd:78:c3:4e:76:e5:ba:78: 30:b2:20:6c:0b:e9:04:05:63:b9:17:88:11:a2:e9:c7:44:0f: 4f:93:c5:78:1f:db:20:10:f1:5c:a0:d1:26:9b:ed:0a:41:64: 77:74:a3:6f:e4:32:24:0d:7f:46:2b:45:17:80:e0:10:74:f2: 74:68:27:ad:19:0f:93:30:ce:1a:2a:22:fc:38:d2:a0:ec:4c: 52:e0:ff:46:33:0d:44:13:e2:51:5e:e0:0f:d4:82:c4:a3:2c: c7:54:18:46:a3:4a:1b:f2:a9:e2:16:a6:6d:3c:8d:90:b1:57: 76:45:5e:86:60:07:db:26:ed:2c:40:55:f9:81:4c:56:1b:80: 57:b9:78:85:2d:1d:21:24:d6:04:39:b3:56:67:01:bd:a0:94: 94:b7:40:8f:1e:e0:f6:63:1f:4b:4b:12:b6:07:0e:31:44:16: d8:9d:a9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTK+aGqhKht4Z1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ZTMzZGViYzgtNGQ3Yy00NGNlLWEzNjctNDgzOWM4NGJmODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwAdNg7SCZMlRj/IZMFOG122n69/0oozRPqq RVurnt1OkxlfVq8q5r+Qck5z2gmldQM6J5OWnxs7E4frt5kirCwrzabk5sYqIDbT LKnI/k4Z/xKic22MwNEiL0FcApu0A1/3H9DfeMmSO6VgACnoduSbEW9vJXB0AdKn UP6kBUiRglppOK8HQv0yjVK1c6MhtubcBv+F5Yz62nKbQSh3nXTg6k5VpU/u1dKt JiQcnG9PVk2lJS2yyFpQoTbZNEAD2MSoGoV53I6xhe8PhKlh0CaBeCUVissI2nc8 UrhzHTRKMRSb5GCRMGRT/SWf6K5Dup+Ir2YiXRWYZaNQLK693QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnYE0HFNo0bZesYONcRz5QgcFh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTc4YzE0OGItM2JkOC0z MjEzLWFhMWUtMjNiZWFkMzE1MDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ZuLlJPprEPfIpsuiJFQuatOnTXSzukIKF6CqYjQlA2WYf9v7Mt0wN la7JWR4WDlVb+mTLhg3+oBEK8m/Gu6D/X8by2/MRfLUU5jsBXOoAwcTdeMNOduW6 eDCyIGwL6QQFY7kXiBGi6cdED0+TxXgf2yAQ8Vyg0Sab7QpBZHd0o2/kMiQNf0Yr RReA4BB08nRoJ60ZD5MwzhoqIvw40qDsTFLg/0YzDUQT4lFe4A/UgsSjLMdUGEaj ShvyqeIWpm08jZCxV3ZFXoZgB9sm7SxAVfmBTFYbgFe5eIUtHSEk1gQ5s1ZnAb2g lJS3QI8e4PZjH0tLErYHDjFEFtidqTk= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:53 2025 by rpki-client