$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa File: 0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa (raw, json) Hash identifier: b1ElpikGjoSHW8fpg1on9y+QuUXNM9cabavQvFOYOaU= Subject key identifier: 9D:FE:DE:27:90:EB:57:B7:6D:ED:EA:A6:2F:A5:6D:77:F7:14:EA:15 Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Certificate serial: 010D0C9F4328584B99D7AE8E8F0E3B4DBEB38680 Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 35923 IP address blocks: 199.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ae:8e:8f:0e:3b:4d:be:b3:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=283296d0-ecd6-490e-a415-85fcfcc3036f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:ce:21:92:e0:a3:15:ad:57:6f:50:c7:9c: b0:82:c0:dc:aa:c9:82:c2:cd:f1:51:9d:50:c9:63: 3e:37:b9:d7:14:29:f2:f0:64:98:63:a0:c9:98:17: 34:0a:e0:55:e8:21:1a:60:15:4d:51:8e:4f:2f:c1: 20:9c:67:2d:cd:a5:53:7d:d5:b0:14:21:98:35:c9: 41:49:43:ec:1a:e2:c2:07:ad:f1:d9:5f:44:a4:ba: c5:06:69:3e:97:ea:6a:d6:45:08:90:c9:67:1d:48: b0:25:ec:89:f8:8b:62:a0:49:f6:59:8f:04:3b:53: 3d:a0:d9:2c:66:47:38:ad:48:82:ea:07:ab:4e:e9: 07:8a:2b:75:c3:c7:98:1e:6a:4f:67:2e:3c:6f:c7: 1b:c4:b8:32:bc:d2:61:10:3c:af:09:94:c5:6f:3d: fc:93:2d:51:fe:f9:80:c6:4d:5a:a1:64:dd:06:be: 3e:ec:7f:52:1f:7b:b5:e2:27:6f:e7:87:3d:20:65: 9e:24:ea:31:89:6c:74:b6:45:9c:08:65:8d:a3:d5: 02:51:c4:53:77:44:83:35:40:b3:f9:66:52:fc:12: 3d:85:33:05:ab:0c:aa:c1:5f:33:e6:3c:fd:f0:28: bd:98:50:e8:21:7f:d5:9f:69:31:e6:8f:2c:ac:c1: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FE:DE:27:90:EB:57:B7:6D:ED:EA:A6:2F:A5:6D:77:F7:14:EA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl X509v3 Authority Key Identifier: keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:af:ff:c4:88:09:f7:bd:70:e8:fb:64:a6:c9:b3:58:23:f6: 54:9d:48:01:75:33:db:73:7c:2f:66:dd:fe:8e:27:5d:33:d1: 3a:d1:e7:db:7e:2c:01:1e:52:51:8e:dc:76:5d:cf:a5:fa:22: b6:5f:ef:f0:24:87:26:97:5f:ed:6b:9e:68:c1:76:97:8a:fd: de:53:92:cd:2c:eb:e0:0a:0d:66:ab:aa:fd:2e:a9:f3:57:33: fe:d7:e8:fe:a7:77:4c:10:e7:6d:c9:c3:d9:3b:cf:83:ee:de: 3a:c0:db:b4:0d:f7:72:62:b9:b7:24:b5:0e:6e:d0:c6:01:30: b6:f9:c1:58:69:a4:0d:ba:49:e9:aa:06:43:d6:3f:52:17:27: ec:5c:5b:f7:1e:6d:25:2b:bf:ad:b5:74:82:47:02:46:fe:9c: f8:51:e2:f1:0b:fb:45:0a:1c:eb:95:89:fb:4a:6d:0e:60:8b: 74:f5:d1:b2:dd:3e:68:f2:45:b4:98:40:b7:ed:3a:51:4b:cf: 05:40:c3:58:37:98:ed:ea:6b:31:f0:3c:73:18:ec:50:f0:72: 92:77:26:a0:6c:0f:03:97:a2:d7:85:86:12:06:c0:d1:b2:07: 91:13:b6:4a:51:ce:8b:17:43:ee:da:91:8a:a4:f4:cf:f4:c7: dc:27:b9:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ166Ojw47Tb6zhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmZjEyOWItODQ1Zi00NDlkLThlMzItMmIyNGVjYmVm ZWE0MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjgzMjk2ZDAtZWNkNi00OTBlLWE0MTUtODVmY2ZjYzMwMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs57OIZLgoxWtV29Qx5ywgsDcqsmCws3xUZ1Q yWM+N7nXFCny8GSYY6DJmBc0CuBV6CEaYBVNUY5PL8EgnGctzaVTfdWwFCGYNclB SUPsGuLCB63x2V9EpLrFBmk+l+pq1kUIkMlnHUiwJeyJ+ItioEn2WY8EO1M9oNks Zkc4rUiC6gerTukHiit1w8eYHmpPZy48b8cbxLgyvNJhEDyvCZTFbz38ky1R/vmA xk1aoWTdBr4+7H9SH3u14idv54c9IGWeJOoxiWx0tkWcCGWNo9UCUcRTd0SDNUCz +WZS/BI9hTMFqwyqwV8z5jz98Ci9mFDoIX/Vn2kx5o8srMFqOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3+3ieQ61e3be3qpi+lbXf3FOoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81M2Zm MTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNiZWZlYTQvMGU1MzYzMjItZmNhZC0z MjYzLWE0ZjctYmZhYjJkZDVjMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTNmZjEyOWItODQ1Zi00NDlkLThl MzItMmIyNGVjYmVmZWE0LzUzZmYxMjliLTg0NWYtNDQ5ZC04ZTMyLTJiMjRlY2Jl ZmVhNC5jcmwwHwYDVR0jBBgwFoAUDB3tJaEV8jXJR8VrnQipvgjoNUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0 ZWNiZWZlYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6v/8SICfe9cOj7ZKbJs1gj9lSdSAF1M9tzfC9m3f6OJ10z0TrR59t+ LAEeUlGO3HZdz6X6IrZf7/AkhyaXX+1rnmjBdpeK/d5Tks0s6+AKDWarqv0uqfNX M/7X6P6nd0wQ523Jw9k7z4Pu3jrA27QN93JiubcktQ5u0MYBMLb5wVhppA26Semq BkPWP1IXJ+xcW/cebSUrv621dIJHAkb+nPhR4vEL+0UKHOuViftKbQ5gi3T10bLd PmjyRbSYQLftOlFLzwVAw1g3mO3qazHwPHMY7FDwcpJ3JqBsDwOXoteFhhIGwNGy B5ETtkpRzosXQ+7akYqk9M/0x9wnuXQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:56 2025 by rpki-client