$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa File: 53d02e71-7d79-3b41-9ec7-575fc812cc08.roa (raw, json) Hash identifier: La/MsgVQ61LGKLgaC49MqWyU4ZjKfI4PGwsavN3Dc5A= Subject key identifier: A9:1E:35:18:D8:03:58:1C:46:E6:5F:01:5B:39:B9:42:76:75:5C:1F Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F4328584B3AEC477D6D5268F7426399E8 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 6079 IP address blocks: 167.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:47:7d:6d:52:68:f7:42:63:99:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=5433eea4-5d93-467f-b433-45d49e5433dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f0:40:0b:85:83:d7:c9:60:e0:52:6a:a1:fc: ff:33:0f:e5:06:dd:67:7e:0a:da:15:c3:fa:4f:9f: 34:1b:6f:63:98:aa:a7:f0:d7:9d:10:d5:cc:34:ef: ce:6a:2e:df:bb:79:b0:89:4b:90:db:03:7d:5a:06: 0c:c4:1b:03:f2:c2:8e:0a:f5:49:e2:86:5a:ca:24: bd:5e:f4:ec:d2:f7:82:99:ca:d7:4e:6d:d8:80:9e: 3f:57:68:9a:ff:64:97:cf:df:93:30:89:1a:3d:15: 44:6a:51:2a:69:84:fd:4e:0a:68:9b:60:7f:85:57: ec:4f:73:dc:4c:1d:b4:d0:b7:53:f2:1c:b7:4e:c9: 1a:c9:bc:bb:07:b1:37:87:1f:e0:cb:84:57:07:55: ec:a1:ae:bc:b7:46:0f:d8:53:49:e7:2c:4f:80:cc: c3:12:0e:05:2e:85:1c:74:eb:6e:62:71:64:c3:4a: 21:45:7b:4d:a0:5c:23:4c:74:02:ff:f6:9b:0e:d1: 6a:f9:06:98:48:99:16:ef:05:8d:3b:56:ca:04:8a: d6:8c:f8:d7:cd:c9:09:6a:73:eb:9d:a4:26:54:38: 64:8c:89:d3:c9:2e:fe:5a:8b:f3:0d:49:36:a2:5e: 2d:48:92:2b:60:34:5a:d8:bf:39:f2:4a:e8:63:c4: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1E:35:18:D8:03:58:1C:46:E6:5F:01:5B:39:B9:42:76:75:5C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d02e71-7d79-3b41-9ec7-575fc812cc08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:93:45:03:8f:0e:de:16:9b:7e:99:71:15:97:37:2a:31:9e: 69:35:f0:11:6d:16:91:72:9a:37:ad:ef:ed:55:47:d4:d7:a5: d3:dd:6c:09:77:08:83:81:60:1b:33:98:7c:b3:63:6b:20:32: e8:28:63:b8:7c:f7:a8:32:7c:98:fe:8e:6a:df:8c:82:f4:7e: cb:28:65:16:ec:68:bc:1c:80:de:a7:67:22:33:f1:0b:6d:ab: 93:36:80:33:f1:e5:11:17:5f:b1:76:98:0c:fd:de:21:6a:1c: 5f:ec:b2:23:93:dc:e4:39:38:4e:b6:05:7b:53:19:16:07:9e: 09:89:3e:26:dc:35:01:ab:f8:6a:49:9b:aa:4b:22:43:2f:17: 4e:a6:dd:fb:59:fa:96:5e:78:5d:0e:34:cf:c4:85:b3:f8:71: da:fd:05:59:17:07:96:e2:a5:bb:18:b4:44:c0:6c:c7:bf:9c: e4:d1:bf:bd:20:27:9f:d7:7b:5a:75:25:fc:c2:27:85:ec:6b: 0e:b4:51:d6:37:9a:ee:20:de:e4:4a:45:e6:89:38:7f:3d:21: 0e:03:4d:7a:10:cd:dc:77:87:a8:42:c8:0c:c1:41:88:96:2f: e9:37:f5:dc:2d:d1:ca:fe:16:a0:7f:03:97:2d:5d:a5:4c:4b: d8:99:1e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67Ed9bVJo90JjmegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk NTQzM2VlYTQtNWQ5My00NjdmLWI0MzMtNDVkNDllNTQzM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fBAC4WD18lg4FJqofz/Mw/lBt1nfgraFcP6 T580G29jmKqn8NedENXMNO/Oai7fu3mwiUuQ2wN9WgYMxBsD8sKOCvVJ4oZayiS9 XvTs0veCmcrXTm3YgJ4/V2ia/2SXz9+TMIkaPRVEalEqaYT9Tgpom2B/hVfsT3Pc TB200LdT8hy3Tskayby7B7E3hx/gy4RXB1Xsoa68t0YP2FNJ5yxPgMzDEg4FLoUc dOtuYnFkw0ohRXtNoFwjTHQC//abDtFq+QaYSJkW7wWNO1bKBIrWjPjXzckJanPr naQmVDhkjInTyS7+WovzDUk2ol4tSJIrYDRa2L858kroY8S8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkeNRjYA1gcRuZfAVs5uUJ2dVwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNTNkMDJlNzEtN2Q3OS0z YjQxLTllYzctNTc1ZmM4MTJjYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGTRQOPDt4Wm36ZcRWXNyoxnmk18BFtFpFymjet7+1VR9TXpdPdbAl3 CIOBYBszmHyzY2sgMugoY7h896gyfJj+jmrfjIL0fssoZRbsaLwcgN6nZyIz8Qtt q5M2gDPx5REXX7F2mAz93iFqHF/ssiOT3OQ5OE62BXtTGRYHngmJPibcNQGr+GpJ m6pLIkMvF06m3ftZ+pZeeF0ONM/EhbP4cdr9BVkXB5bipbsYtETAbMe/nOTRv70g J5/Xe1p1JfzCJ4Xsaw60UdY3mu4g3uRKReaJOH89IQ4DTXoQzdx3h6hCyAzBQYiW L+k39dwt0cr+FqB/A5ctXaVMS9iZHuI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:15 2025 by rpki-client