$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa File: e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa (raw, json) Hash identifier: IZGXOAvlvvX+55BgOreApX9kIQjD1z650Do9t7BatJ8= Subject key identifier: E1:51:9A:16:AC:2E:8C:04:FF:94:2D:4D:CB:FF:39:E1:D9:0F:54:BE Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Certificate serial: 010D0C9F4328584D59EA6CF662E6292B280311C0 Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 199.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6c:f6:62:e6:29:2b:28:03:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=ed853e96-9343-473d-b7fe-fd2437e82387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:a8:b9:79:85:d3:1e:41:db:14:98:fd:67: 0f:43:a5:21:1a:3f:28:91:44:14:79:5f:61:63:18: 29:80:6a:c7:9d:55:41:18:b1:63:ba:e8:58:ab:ad: 1b:6a:a7:16:79:e7:ae:6f:7d:1e:1c:f4:99:b1:ca: 62:09:b3:d0:dc:4e:3a:61:e4:b7:19:2c:a8:96:ad: 2b:1f:a9:4f:d8:f5:75:94:09:82:7d:74:0d:99:c5: b3:45:d4:cf:c2:7d:c1:67:52:18:4e:4a:2e:1f:36: 34:92:67:f3:6c:0e:ec:3c:e7:05:30:02:08:9a:1e: d7:b4:6e:39:8c:17:12:71:09:6b:31:05:a0:92:24: d1:46:fa:02:26:da:3c:f7:55:b1:1e:56:d4:93:47: 43:54:11:ef:6a:a4:f8:f3:7e:6d:f8:99:aa:3f:d6: c2:de:60:d7:20:6b:75:2c:52:c3:5f:12:53:72:6e: 27:26:9e:9b:2c:49:82:89:b5:40:55:04:d3:3d:1f: bb:66:22:80:5b:19:bc:1d:fe:c6:16:07:d3:32:1e: 7d:29:9f:39:90:c1:77:2e:d0:fd:c3:d4:7b:bc:77: d6:69:a2:d7:72:df:b9:2e:1d:d1:ca:5a:b1:1e:ee: be:5f:fd:9c:6c:12:a2:e6:03:24:9b:f8:46:e0:fc: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:51:9A:16:AC:2E:8C:04:FF:94:2D:4D:CB:FF:39:E1:D9:0F:54:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/e2bc6971-b9ad-3d82-a9d3-06f1bd29c205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl X509v3 Authority Key Identifier: keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer sbgp-ipAddrBlock: critical IPv4: 199.65.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c5:fb:b4:6b:7e:a0:0f:f0:d5:56:49:89:ff:3b:5f:a0:0d: fb:1a:47:3e:79:6a:60:08:7a:87:a5:17:74:5e:ef:64:13:f8: ee:19:35:24:8d:04:62:d0:7d:0a:65:ef:cb:15:eb:40:49:fd: dd:56:da:ee:0c:55:52:9a:b2:dd:8c:64:0f:3e:20:89:1e:9f: e3:71:48:84:d1:13:16:d5:3c:d6:da:5a:c3:5f:3d:da:1c:59: 81:d9:00:55:fc:df:a8:c6:d1:ae:44:d1:d9:30:53:c6:0b:58: 43:e8:3a:be:88:7b:ab:2e:a1:ad:29:bc:75:3b:90:fa:4e:78: 33:2f:53:1a:7c:75:56:fc:cd:3b:86:e5:ca:a9:ae:27:5c:a0: 97:38:ef:ee:a1:f2:f3:ce:ef:93:15:de:0e:1f:0f:1c:16:f4: 07:c1:5d:c0:d4:47:6b:db:0a:bc:03:2e:c2:fb:29:92:bb:5f: ae:96:70:c7:d7:64:69:e7:b1:f5:4b:f3:2f:49:1c:37:bf:fe: 96:eb:67:8b:67:f4:26:f7:1a:0c:17:a8:5c:b1:5e:68:a6:c9: 4e:37:fd:97:ba:15:9c:75:f9:34:d6:16:17:95:c4:09:b4:6b: f3:b0:2c:3f:6e:3b:98:35:6b:e4:59:03:a7:bd:fa:ce:d0:ce: cf:3d:ff:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mz2YuYpKygDEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmZjEyOWItODQ1Zi00NDlkLThlMzItMmIyNGVjYmVm ZWE0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZWQ4NTNlOTYtOTM0My00NzNkLWI3ZmUtZmQyNDM3ZTgyMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx+ouXmF0x5B2xSY/WcPQ6UhGj8okUQUeV9h YxgpgGrHnVVBGLFjuuhYq60baqcWeeeub30eHPSZscpiCbPQ3E46YeS3GSyolq0r H6lP2PV1lAmCfXQNmcWzRdTPwn3BZ1IYTkouHzY0kmfzbA7sPOcFMAIImh7XtG45 jBcScQlrMQWgkiTRRvoCJto891WxHlbUk0dDVBHvaqT4835t+JmqP9bC3mDXIGt1 LFLDXxJTcm4nJp6bLEmCibVAVQTTPR+7ZiKAWxm8Hf7GFgfTMh59KZ85kMF3LtD9 w9R7vHfWaaLXct+5Lh3RylqxHu6+X/2cbBKi5gMkm/hG4PwJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFRmhasLowE/5QtTcv/OeHZD1S+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81M2Zm MTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0ZWNiZWZlYTQvZTJiYzY5NzEtYjlhZC0z ZDgyLWE5ZDMtMDZmMWJkMjljMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTNmZjEyOWItODQ1Zi00NDlkLThl MzItMmIyNGVjYmVmZWE0LzUzZmYxMjliLTg0NWYtNDQ5ZC04ZTMyLTJiMjRlY2Jl ZmVhNC5jcmwwHwYDVR0jBBgwFoAUDB3tJaEV8jXJR8VrnQipvgjoNUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81M2ZmMTI5Yi04NDVmLTQ0OWQtOGUzMi0yYjI0 ZWNiZWZlYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrF+7RrfqAP8NVWSYn/O1+gDfsaRz55amAIeoelF3Re72QT+O4ZNSSN BGLQfQpl78sV60BJ/d1W2u4MVVKast2MZA8+IIken+NxSITRExbVPNbaWsNfPdoc WYHZAFX836jG0a5E0dkwU8YLWEPoOr6Ie6suoa0pvHU7kPpOeDMvUxp8dVb8zTuG 5cqpridcoJc47+6h8vPO75MV3g4fDxwW9AfBXcDUR2vbCrwDLsL7KZK7X66WcMfX ZGnnsfVL8y9JHDe//pbrZ4tn9Cb3GgwXqFyxXmimyU43/Ze6FZx1+TTWFheVxAm0 a/OwLD9uO5g1a+RZA6e9+s7Qzs89/3Q= -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:19 2026 by rpki-client