$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/141572c7-9b2c-35f6-843c-2527a717fdf8.roa File: 141572c7-9b2c-35f6-843c-2527a717fdf8.roa (raw, json) Hash identifier: IVma9vUX8aUNLQJ8uJ7Apw2axfj1fXs7nKRZsfOKjcs= Subject key identifier: B0:10:49:16:0B:3A:B0:D5:2E:B0:5C:9E:18:4B:E7:7B:D3:65:6B:5F Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Certificate serial: 010D0C9F4328584BAEC7B93A910C57BDA39A5340 Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/141572c7-9b2c-35f6-843c-2527a717fdf8.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 3300 IP address blocks: 199.65.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b9:3a:91:0c:57:bd:a3:9a:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=ce504581-0904-436b-8828-60c364107830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:be:8d:bb:4b:b3:13:be:a1:58:8e:1c:06: b4:25:1a:b2:bb:bc:c0:89:69:54:e8:f4:18:73:a9: 1d:64:a0:bc:07:4e:94:dc:92:89:92:b5:d1:4d:cc: 7b:b0:99:c6:83:6b:1c:03:60:be:8d:3f:df:2d:2f: 82:cd:44:71:30:5e:59:6c:06:23:e3:fb:53:f4:a1: 3d:c3:21:c7:30:0f:e1:87:e7:d2:e5:f7:d5:54:90: dc:e8:54:83:75:5a:64:fb:c0:e8:2e:4f:30:f8:fc: 1e:aa:41:98:62:58:a2:6c:d7:fb:a7:25:58:23:a7: a5:67:1d:60:3a:21:0a:17:f8:c1:1a:f7:fb:f4:6f: 96:04:83:2c:42:42:11:38:2c:81:69:11:a6:03:bc: 9c:2d:6c:ee:af:8f:27:32:56:44:a1:7e:3a:3a:41: ec:c9:33:d3:21:2d:c8:58:77:78:73:a3:f0:bc:93: 39:3c:ec:ce:69:b1:35:59:56:9f:d2:95:3c:19:56: f5:48:3c:37:34:98:7a:f1:2b:3a:69:f8:dc:f0:c1: 49:09:d5:09:23:ef:45:b4:b1:0c:dc:a9:9b:f0:06: 15:fc:4a:f2:61:2c:7e:bd:14:02:07:ba:a7:76:5a: ec:1f:3b:d3:f2:48:33:eb:28:7d:9f:50:b0:df:ce: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:10:49:16:0B:3A:B0:D5:2E:B0:5C:9E:18:4B:E7:7B:D3:65:6B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/141572c7-9b2c-35f6-843c-2527a717fdf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl X509v3 Authority Key Identifier: keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:72:7b:0c:87:04:a6:64:ae:62:35:fa:ff:ce:e0:93:b7:df: 7d:f2:95:ea:68:ae:b9:23:c3:6b:ae:73:1f:a1:f1:8c:fb:a0: b6:b4:85:22:48:73:95:1b:b1:01:b4:5e:87:e0:03:b9:94:b0: 8b:e2:a3:79:1b:ec:06:41:82:88:8c:a1:f2:31:87:54:49:c7: 1f:a9:d3:62:f9:17:54:90:67:e1:fc:3f:e3:43:a2:73:2a:2c: e8:a6:dd:25:ad:75:67:be:dc:eb:d8:d8:9e:ec:c8:88:79:03: ac:e4:bf:20:3e:fe:34:a4:c1:2c:dd:22:47:98:17:19:39:37: 6d:ee:03:ef:1b:a2:9d:1d:c1:f8:7a:d3:08:2c:a7:b1:1d:cc: 56:c2:38:8b:06:82:10:a8:6c:50:f7:0e:93:50:6f:27:16:d5: 5d:81:c9:11:46:1b:c6:0d:a8:7b:bc:a0:d6:2c:01:17:10:55: bf:6c:16:a2:fc:ce:06:16:2c:19:ce:15:59:d1:8d:9a:50:0a: 95:4c:17:12:41:18:44:43:74:43:e1:b5:65:6f:08:0b:b5:67: f9:bb:1e:3a:23:28:99:fa:02:22:cf:ae:54:d3:d8:32:03:e6: c4:4f:64:9d:ef:40:62:3d:73:ef:cc:85:0f:e9:82:3d:7c:56: 0f:56:b4:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7k6kQxXvaOaU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmZjEyOWItODQ1Zi00NDlkLThlMzItMmIyNGVjYmVm ZWE0MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2U1MDQ1ODEtMDkwNC00MzZiLTg4MjgtNjBjMzY0MTA3ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj2+jbtLsxO+oViOHAa0JRqyu7zAiWlU6PQY c6kdZKC8B06U3JKJkrXRTcx7sJnGg2scA2C+jT/fLS+CzURxMF5ZbAYj4/tT9KE9 wyHHMA/hh+fS5ffVVJDc6FSDdVpk+8DoLk8w+PweqkGYYliibNf7pyVYI6elZx1g OiEKF/jBGvf79G+WBIMsQkIROCyBaRGmA7ycLWzur48nMlZEoX46OkHsyTPTIS3I WHd4c6PwvJM5POzOabE1WVaf0pU8GVb1SDw3NJh68Ss6afjc8MFJCdUJI+9FtLEM 3Kmb8AYV/EryYSx+vRQCB7qndlrsHzvT8kgz6yh9n1Cw385d+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAQSRYLOrDVLrBcnhhL53vTZWtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81M2Zm MTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNiZWZlYTQvMTQxNTcyYzctOWIyYy0z NWY2LTg0M2MtMjUyN2E3MTdmZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTNmZjEyOWItODQ1Zi00NDlkLThl MzItMmIyNGVjYmVmZWE0LzUzZmYxMjliLTg0NWYtNDQ5ZC04ZTMyLTJiMjRlY2Jl ZmVhNC5jcmwwHwYDVR0jBBgwFoAUDB3tJaEV8jXJR8VrnQipvgjoNUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0 ZWNiZWZlYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlyewyHBKZkrmI1+v/O4JO3333yleporrkjw2uucx+h8Yz7oLa0hSJI c5UbsQG0XofgA7mUsIvio3kb7AZBgoiMofIxh1RJxx+p02L5F1SQZ+H8P+NDonMq LOim3SWtdWe+3OvY2J7syIh5A6zkvyA+/jSkwSzdIkeYFxk5N23uA+8bop0dwfh6 0wgsp7EdzFbCOIsGghCobFD3DpNQbycW1V2ByRFGG8YNqHu8oNYsARcQVb9sFqL8 zgYWLBnOFVnRjZpQCpVMFxJBGERDdEPhtWVvCAu1Z/m7HjojKJn6AiLPrlTT2DID 5sRPZJ3vQGI9c+/MhQ/pgj18Vg9WtNQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:07 2025 by rpki-client