$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa File: e8ad7381-6239-3390-b529-574e6606e15f.roa (raw, json) Hash identifier: eQd4svH01PeBRVM63DGeEhXMe5MhpFUyGCsztXduyFg= Subject key identifier: 18:CB:1D:97:C5:41:03:75:7D:7D:F9:7C:08:1A:3C:20:8D:9F:2D:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D492A792E94F3E186461EBB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 172.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:79:2e:94:f3:e1:86:46:1e:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=a1d98f96-0199-4735-b64e-2ab1c4c384f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:a7:bd:2b:58:45:82:ed:a8:56:12:33:ae: 3f:6d:cc:95:53:48:9a:3f:f1:80:1d:ed:45:40:b8: d7:04:89:75:a3:1a:0f:3b:f4:94:9b:1b:78:0b:74: ba:f5:76:da:27:3b:40:c3:da:de:49:96:0e:36:fb: c6:a1:7b:dd:95:7f:9a:b9:c8:0f:10:e7:75:fa:32: b9:96:3d:04:8c:18:3c:4f:47:0e:0d:e3:75:9d:77: 24:1e:60:45:5b:50:6e:15:f6:d5:59:5f:6f:68:5e: 5e:c1:68:48:54:34:c6:41:e9:a1:9f:90:5b:09:91: b4:b8:0b:7a:23:15:a3:2a:ba:f7:15:aa:e0:87:73: cc:7d:38:fd:88:9b:bc:fa:b6:ad:fb:e3:56:d4:23: ac:5d:0e:48:f6:3e:3d:98:d6:27:26:8f:97:ac:f0: b5:fd:8b:3c:4b:6f:80:1c:33:bb:f3:45:31:d6:d6: 52:7b:9a:63:08:f3:21:5b:d2:c5:6e:bb:e9:25:7a: b8:d0:e8:6a:ce:6f:ab:97:60:8d:13:70:f2:ee:46: ad:32:78:01:f5:8d:be:99:35:0a:d3:e6:e8:47:30: 6b:8a:c9:8f:ac:c7:ba:af:d1:f9:98:38:62:b8:cc: ed:99:65:d9:98:b7:5c:a5:73:0a:72:d9:5b:ed:6e: b0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CB:1D:97:C5:41:03:75:7D:7D:F9:7C:08:1A:3C:20:8D:9F:2D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e8ad7381-6239-3390-b529-574e6606e15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 172.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:82:b6:cc:b2:eb:63:b2:ff:80:e4:98:e9:ce:fc:0c:09:18: 66:3d:46:d1:83:9a:6d:e2:fc:8e:8e:c7:bf:00:5b:28:3a:a0: b1:5e:79:c1:40:b7:d0:ec:e7:6f:0a:6e:98:df:91:ab:c9:a0: 4f:c2:29:13:e6:38:ab:29:71:84:11:43:ad:ed:11:08:4b:9c: 7d:b7:9d:ee:e2:9e:83:c7:61:28:e1:4b:33:69:3e:bc:19:ef: 5b:37:09:1b:cd:e0:ca:75:b0:33:37:05:18:9e:8f:01:df:ba: 42:95:0a:d0:bb:f5:85:85:ab:f7:52:7e:cd:40:37:ec:34:5b: e6:94:6d:0b:5b:ff:e4:88:d2:63:bb:10:eb:21:e8:c6:7e:d2: df:85:fc:18:c0:ae:f0:5d:71:d4:45:1b:b6:6f:e7:b0:f3:69: 59:e3:4d:17:b5:e2:54:d4:89:5f:75:fa:06:cf:bc:9a:89:d7: 4f:6c:73:b1:17:aa:95:4a:58:a3:00:14:02:5d:d8:5f:a0:f7: f0:ec:ad:38:43:3e:a3:1f:66:a1:53:06:01:ab:f7:75:c8:8c: e1:ef:31:4c:e5:c4:c1:85:7d:83:87:53:53:f7:3e:ad:0c:5a: 7e:27:ad:c0:4d:fb:59:28:da:5d:41:5b:35:50:93:79:55:a2: d7:71:83:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnkulPPhhkYeu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YTFkOThmOTYtMDE5OS00NzM1LWI2NGUtMmFiMWM0YzM4NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkOnvStYRYLtqFYSM64/bcyVU0iaP/GAHe1F QLjXBIl1oxoPO/SUmxt4C3S69XbaJztAw9reSZYONvvGoXvdlX+aucgPEOd1+jK5 lj0EjBg8T0cODeN1nXckHmBFW1BuFfbVWV9vaF5ewWhIVDTGQemhn5BbCZG0uAt6 IxWjKrr3Fargh3PMfTj9iJu8+rat++NW1COsXQ5I9j49mNYnJo+XrPC1/Ys8S2+A HDO780Ux1tZSe5pjCPMhW9LFbrvpJXq40Ohqzm+rl2CNE3Dy7katMngB9Y2+mTUK 0+boRzBrismPrMe6r9H5mDhiuMztmWXZmLdcpXMKctlb7W6wEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjLHZfFQQN1fX35fAgaPCCNny32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZThhZDczODEtNjIzOS0z MzkwLWI1MjktNTc0ZTY2MDZlMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGCtsyy62Oy/4DkmOnO/AwJGGY9RtGDmm3i/I6Ox78AWyg6oLFeecFA t9Ds528KbpjfkavJoE/CKRPmOKspcYQRQ63tEQhLnH23ne7inoPHYSjhSzNpPrwZ 71s3CRvN4Mp1sDM3BRiejwHfukKVCtC79YWFq/dSfs1AN+w0W+aUbQtb/+SI0mO7 EOsh6MZ+0t+F/BjArvBdcdRFG7Zv57DzaVnjTRe14lTUiV91+gbPvJqJ109sc7EX qpVKWKMAFAJd2F+g9/DsrThDPqMfZqFTBgGr93XIjOHvMUzlxMGFfYOHU1P3Pq0M Wn4nrcBN+1ko2l1BWzVQk3lVotdxg9U= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:25 2026 by rpki-client