$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa File: 5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json) Hash identifier: ZM60LM/2SfA7p9nJVQb4cKk3YXTP+15/EdoJjIhVtu8= Subject key identifier: 06:B4:D4:E6:F0:74:2B:3F:AF:D0:56:D4:A4:07:FB:06:EC:97:9D:75 Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F4328584B39870BB0685843BD40BFC400 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 7018 IP address blocks: 167.253.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0b:b0:68:58:43:bd:40:bf:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=fad36059-db77-4056-a908-c2c1baee0003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:78:a0:23:df:33:09:ef:8a:df:e0:31:38: 45:c4:e8:1b:5d:65:ab:fb:7e:3e:34:1c:36:27:20: 9c:b6:53:d7:b1:69:73:76:2e:5b:94:79:eb:f0:bd: fb:f6:3b:c8:47:44:e4:0f:61:be:ac:c8:76:9e:29: c7:24:bc:e7:56:a1:e0:65:a0:38:19:93:ec:47:b0: 35:cd:e6:d1:36:ad:64:ef:17:52:53:1c:cb:a3:d6: 13:de:bb:31:af:29:dc:c5:bb:17:83:10:7c:22:ed: 74:96:3b:b0:88:13:b7:d0:d1:6d:50:53:67:63:e4: b5:fe:38:38:d9:24:1c:41:c1:d5:b2:2b:a4:db:d5: 9f:c4:ae:3b:56:50:a6:e7:46:8f:0b:7d:39:35:1d: 82:bf:12:b6:7d:85:2c:62:c3:6d:8d:aa:0c:09:28: 1c:4b:ee:2a:ce:3f:52:64:36:9a:a4:21:06:d6:e8: 9a:95:6b:9c:70:e8:8c:ea:12:c7:15:60:d8:21:d5: f9:c3:56:09:f6:c0:e1:03:ee:84:90:b2:57:91:c0: 66:79:49:4f:04:b3:0c:0b:7a:f9:5d:58:d1:e4:23: bb:35:c2:96:46:d7:08:28:35:5e:99:fa:4a:62:f4: 8c:40:5a:c8:0b:25:7f:a7:f0:51:f1:1e:d1:39:98: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:D4:E6:F0:74:2B:3F:AF:D0:56:D4:A4:07:FB:06:EC:97:9D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:95:16:85:82:43:5c:ca:f0:86:c0:79:7e:d3:0d:11:c6:59: 4e:4f:06:e3:2a:03:41:c7:cd:d2:72:8f:c9:d9:25:fc:81:e1: af:fb:ce:f9:cf:ee:b5:6e:6f:47:20:c2:90:f9:53:ac:ce:15: 9b:e8:7b:c5:c8:aa:aa:8a:9d:fd:2d:4f:b3:0e:74:d2:36:a1: 5d:e2:f3:88:5d:4f:66:0b:89:86:2b:4a:fb:22:dc:a8:40:a2: ce:ff:4c:af:44:50:af:20:22:17:bd:a3:a2:bc:eb:cd:c6:9c: 22:0c:4d:1b:4b:49:43:b9:f5:d9:c6:c3:fc:48:e1:c3:25:8b: d5:39:83:1a:6b:69:5f:67:ee:d9:7c:e6:77:af:07:1e:d1:04: e2:78:fb:a7:84:2b:a2:fe:2e:57:40:40:8a:9b:24:27:0e:61: 5c:bd:13:9a:3f:6a:44:83:ba:cd:3b:15:de:f8:cd:0d:0f:a7: ec:08:85:f0:0f:94:0a:88:27:e6:c1:84:1e:08:6c:bc:0a:10: 0e:b4:43:c6:d2:f3:5e:39:d8:1a:88:42:e3:05:00:f5:40:5c: 42:4b:04:97:14:3b:ef:d0:5c:56:c5:3f:46:ab:93:4d:77:87: 43:83:52:fe:77:4b:18:19:0c:71:c6:96:cf:cb:34:34:06:ee: 43:b4:c2:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwuwaFhDvUC/xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmFkMzYwNTktZGI3Ny00MDU2LWE5MDgtYzJjMWJhZWUwMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiex4oCPfMwnvit/gMThFxOgbXWWr+34+NBw2 JyCctlPXsWlzdi5blHnr8L379jvIR0TkD2G+rMh2ninHJLznVqHgZaA4GZPsR7A1 zebRNq1k7xdSUxzLo9YT3rsxryncxbsXgxB8Iu10ljuwiBO30NFtUFNnY+S1/jg4 2SQcQcHVsiuk29WfxK47VlCm50aPC305NR2CvxK2fYUsYsNtjaoMCSgcS+4qzj9S ZDaapCEG1uialWuccOiM6hLHFWDYIdX5w1YJ9sDhA+6EkLJXkcBmeUlPBLMMC3r5 XVjR5CO7NcKWRtcIKDVemfpKYvSMQFrICyV/p/BR8R7ROZi9ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa01ObwdCs/r9BW1KQH+wbsl511MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWMzOGNiNDAtZDI0Ny0z YzNhLTk1NTUtNjE1MWFhYWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGVFoWCQ1zK8IbAeX7TDRHGWU5PBuMqA0HHzdJyj8nZJfyB4a/7zvnP 7rVub0cgwpD5U6zOFZvoe8XIqqqKnf0tT7MOdNI2oV3i84hdT2YLiYYrSvsi3KhA os7/TK9EUK8gIhe9o6K8683GnCIMTRtLSUO59dnGw/xI4cMli9U5gxpraV9n7tl8 5nevBx7RBOJ4+6eEK6L+LldAQIqbJCcOYVy9E5o/akSDus07Fd74zQ0Pp+wIhfAP lAqIJ+bBhB4IbLwKEA60Q8bS81452BqIQuMFAPVAXEJLBJcUO+/QXFbFP0ark013 h0ODUv53SxgZDHHGls/LNDQG7kO0whg= -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:37 2025 by rpki-client