$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa File: c81ecdd5-605b-3621-b645-cf3f099edbbf.roa (raw, json) Hash identifier: syZvf+Sq/HqNi1jXgDrkhirGPvTrcUiPES8U0Q8VW2Q= Subject key identifier: 85:B0:68:20:C4:7B:8F:1A:B8:F1:1D:65:EA:12:10:7C:F3:2B:47:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00072AE9D70993FD8B0D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 172.253.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:07:2a:e9:d7:09:93:fd:8b:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4c2be891-c424-4f17-b7be-96772f433b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:58:11:79:14:94:ca:50:b9:06:40:9a:3e: cf:23:23:21:fc:e0:ac:6b:7c:f7:56:3c:ea:ff:4d: ea:b3:d8:ce:ea:45:c6:1e:91:f7:7e:77:9a:8b:39: a1:b7:7e:e4:1d:28:5b:76:e7:c0:c9:1b:8e:af:88: 0b:35:44:74:6e:54:7c:6b:5c:be:e2:d5:b0:54:55: 4d:a4:07:21:75:89:47:f2:a8:e0:b4:d0:f3:51:e6: b9:6b:21:8e:2e:cb:6d:f6:51:0b:1c:ba:10:ce:07: a0:47:b6:dc:03:b0:cd:a3:ec:6e:c5:48:37:53:60: a2:9c:c3:10:5d:28:fd:aa:6f:a6:3d:35:db:35:70: 93:c8:d5:8d:b2:f4:c5:4d:03:e2:d4:20:2f:a2:b5: 52:2d:ad:38:86:0d:a0:ca:93:d9:b4:e3:e0:e0:c3: 52:e5:3c:e8:4a:aa:14:07:94:f8:bc:4d:ab:36:94: 70:25:4b:ff:1d:89:66:44:eb:02:f8:3e:56:f1:03: 58:9c:59:44:86:54:41:67:79:de:a8:d9:c4:3a:6b: 80:75:d9:c2:a9:fc:49:b6:53:3f:71:fe:4f:a5:21: d9:ad:3d:93:62:b8:d3:90:c6:c7:a6:bd:7e:48:fe: 50:e8:54:d7:85:8f:67:f1:a8:2f:cc:24:3a:02:41: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:68:20:C4:7B:8F:1A:B8:F1:1D:65:EA:12:10:7C:F3:2B:47:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c81ecdd5-605b-3621-b645-cf3f099edbbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4b:5c:e7:76:21:0d:da:56:73:9d:48:cb:8c:cc:1e:1d:10: 0c:e7:c9:be:e4:6a:bc:c1:fb:f5:02:1e:e8:03:b1:6b:23:81: 5c:8d:07:aa:5a:ef:f6:0a:13:1b:b2:70:14:1d:e0:c2:5d:12: c0:21:10:ee:29:61:55:aa:69:a2:61:41:ea:f8:42:94:21:6f: 5d:2c:39:9f:03:97:e4:00:d2:e8:25:84:34:82:ed:6c:0d:f8: 7b:c7:21:ed:13:07:31:f7:ed:44:fc:20:12:3a:a8:71:13:3b: 07:71:b2:d2:ef:05:5a:47:b8:5d:8e:9d:59:a7:88:99:08:d0: 96:b2:f2:53:04:ce:a5:b4:60:11:35:2d:37:a9:4e:8e:51:c4: 21:45:a0:24:0e:cf:85:0e:91:40:cd:c1:24:49:f8:bf:1c:43: 9c:5b:81:55:4f:50:b5:f3:21:f3:8f:54:b0:1d:c4:47:6c:4b: 99:aa:90:f8:fc:fb:b9:cc:b1:cd:21:e2:da:71:5a:b5:cf:12: f0:f3:e3:6f:b2:bf:1d:16:76:2d:2e:e6:71:01:9c:40:99:2e: 36:3d:21:e2:c1:5e:d5:99:d5:f2:7e:b8:30:c9:9a:5f:90:eb: 8b:9a:10:44:4f:ff:46:c7:23:c8:ec:86:e1:eb:64:08:cd:c3: 1c:8e:17:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAcq6dcJk/2LDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NGMyYmU4OTEtYzQyNC00ZjE3LWI3YmUtOTY3NzJmNDMzYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOVYEXkUlMpQuQZAmj7PIyMh/OCsa3z3Vjzq /03qs9jO6kXGHpH3fneaizmht37kHShbdufAyRuOr4gLNUR0blR8a1y+4tWwVFVN pAchdYlH8qjgtNDzUea5ayGOLstt9lELHLoQzgegR7bcA7DNo+xuxUg3U2CinMMQ XSj9qm+mPTXbNXCTyNWNsvTFTQPi1CAvorVSLa04hg2gypPZtOPg4MNS5TzoSqoU B5T4vE2rNpRwJUv/HYlmROsC+D5W8QNYnFlEhlRBZ3neqNnEOmuAddnCqfxJtlM/ cf5PpSHZrT2TYrjTkMbHpr1+SP5Q6FTXhY9n8agvzCQ6AkEP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWwaCDEe48auPEdZeoSEHzzK0fFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzgxZWNkZDUtNjA1Yi0z NjIxLWI2NDUtY2YzZjA5OWVkYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFLXOd2IQ3aVnOdSMuMzB4dEAznyb7karzB+/UCHugDsWsjgVyNB6pa 7/YKExuycBQd4MJdEsAhEO4pYVWqaaJhQer4QpQhb10sOZ8Dl+QA0uglhDSC7WwN +HvHIe0TBzH37UT8IBI6qHETOwdxstLvBVpHuF2OnVmniJkI0Jay8lMEzqW0YBE1 LTepTo5RxCFFoCQOz4UOkUDNwSRJ+L8cQ5xbgVVPULXzIfOPVLAdxEdsS5mqkPj8 +7nMsc0h4tpxWrXPEvDz42+yvx0Wdi0u5nEBnECZLjY9IeLBXtWZ1fJ+uDDJml+Q 64uaEERP/0bHI8jshuHrZAjNwxyOF44= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:30 2026 by rpki-client