$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa File: 5c38cb40-d247-3c3a-9555-6151aaab6c22.roa (raw, json) Hash identifier: DOscnxuU2D0/skbwq9kic8qRsF4QV7gGFI9zG661ZO8= Subject key identifier: 44:6A:85:02:69:1A:3D:77:78:6D:0A:60:D4:CC:8B:37:0A:D0:52:7D Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F4328584CF9B78BA93E6E1168DDB1CC00 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 7018 IP address blocks: 167.253.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:8b:a9:3e:6e:11:68:dd:b1:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=40e5ab6a-2477-480c-8d00-02f03725d864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:7e:1e:50:31:52:7d:26:78:9f:48:5e:7d: 09:25:04:c9:7f:a2:2e:51:1d:11:8f:19:53:f8:57: 1e:9e:8a:54:e8:71:84:28:6c:3d:79:ff:fb:78:c3: 19:85:ad:4e:cf:72:4f:07:49:eb:6c:24:4e:b7:dd: cb:c1:a2:d2:f9:c1:6f:7e:2c:08:30:67:5c:97:b1: 37:9a:58:99:a4:0f:10:37:5d:45:1a:ca:a8:ae:3b: a7:01:93:48:7e:f6:28:ee:aa:b0:0d:25:13:e9:a6: 2c:2a:82:97:c6:85:56:03:5a:d8:46:9b:a6:9e:2c: 6e:6f:40:c0:43:7e:97:e8:89:de:5b:70:8d:87:59: df:ec:7c:24:4d:50:76:77:ae:6a:ad:b6:93:d3:31: 8e:6a:a8:4c:b6:01:6f:74:9c:d8:24:29:00:0d:b2: 51:d3:fc:04:f5:6d:08:7a:92:0d:3c:6d:3f:01:99: d0:07:9c:81:e2:1e:d4:8a:1c:06:f6:61:d2:15:60: 2d:a2:13:17:54:fa:28:1b:b6:41:28:05:f8:3e:52: d3:a6:de:5b:6a:f8:31:f3:69:d7:c8:64:0c:ee:bf: 16:c5:01:e4:17:3f:98:a5:2b:0e:15:3b:0c:74:b6: 8e:ac:7c:6d:0b:da:25:3d:93:45:40:97:40:67:eb: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:85:02:69:1A:3D:77:78:6D:0A:60:D4:CC:8B:37:0A:D0:52:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/5c38cb40-d247-3c3a-9555-6151aaab6c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cb:d8:10:31:a9:9a:4a:05:34:9e:c2:1e:c5:2e:67:ce:c5: 3c:df:b2:cc:37:2e:79:19:e6:2b:9d:30:9b:87:e3:ae:35:da: d5:1b:44:19:ed:e8:96:23:9c:d0:1f:a9:59:c7:90:91:40:9a: 38:10:6f:b1:a6:ce:d1:79:75:a6:ac:76:9d:4f:2c:43:33:00: b2:a4:48:c7:46:05:26:82:fc:ec:17:7c:4f:79:2c:7a:de:df: 41:53:36:21:8c:36:f1:f8:79:9d:63:29:67:0a:ab:8a:05:46: 6c:d3:62:d4:20:5b:72:35:a7:66:1c:5e:f7:2b:06:ec:ac:1f: 30:d0:54:00:7d:23:0c:73:64:4e:9a:84:6f:97:9e:ca:d7:b6: a1:09:08:08:ef:51:d6:33:16:e8:2d:0c:94:a1:10:df:cb:6f: a8:b0:6b:4b:4b:aa:6e:53:0a:63:0d:f4:0b:92:7e:ce:85:40: b3:56:97:bf:ad:b9:0a:33:a9:96:57:8e:a0:c7:4f:56:c3:d5: d3:f9:a4:92:9d:cf:40:99:d9:b0:10:53:11:24:a7:47:0d:b9: 70:97:2c:a5:06:0f:04:21:80:5d:58:17:4b:4d:ff:2f:a9:34: a5:be:c6:8c:34:c6:8b:d0:cc:5a:0d:ae:fe:08:fa:f5:4a:27: 3f:43:34:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t4upPm4RaN2xzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk NDBlNWFiNmEtMjQ3Ny00ODBjLThkMDAtMDJmMDM3MjVkODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrN+HlAxUn0meJ9IXn0JJQTJf6IuUR0RjxlT +FcenopU6HGEKGw9ef/7eMMZha1Oz3JPB0nrbCROt93LwaLS+cFvfiwIMGdcl7E3 mliZpA8QN11FGsqorjunAZNIfvYo7qqwDSUT6aYsKoKXxoVWA1rYRpumnixub0DA Q36X6IneW3CNh1nf7HwkTVB2d65qrbaT0zGOaqhMtgFvdJzYJCkADbJR0/wE9W0I epINPG0/AZnQB5yB4h7UihwG9mHSFWAtohMXVPooG7ZBKAX4PlLTpt5bavgx82nX yGQM7r8WxQHkFz+YpSsOFTsMdLaOrHxtC9olPZNFQJdAZ+uD9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERqhQJpGj13eG0KYNTMizcK0FJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNWMzOGNiNDAtZDI0Ny0z YzNhLTk1NTUtNjE1MWFhYWI2YzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3L2BAxqZpKBTSewh7FLmfOxTzfssw3LnkZ5iudMJuH46412tUbRBnt 6JYjnNAfqVnHkJFAmjgQb7GmztF5daasdp1PLEMzALKkSMdGBSaC/OwXfE95LHre 30FTNiGMNvH4eZ1jKWcKq4oFRmzTYtQgW3I1p2YcXvcrBuysHzDQVAB9IwxzZE6a hG+XnsrXtqEJCAjvUdYzFugtDJShEN/Lb6iwa0tLqm5TCmMN9AuSfs6FQLNWl7+t uQozqZZXjqDHT1bD1dP5pJKdz0CZ2bAQUxEkp0cNuXCXLKUGDwQhgF1YF0tN/y+p NKW+xow0xovQzFoNrv4I+vVKJz9DNOs= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:23 2026 by rpki-client