$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa File: 04de4e33-4e78-332a-9e11-e61b79d753b4.roa (raw, json) Hash identifier: zm+OBHfCeoC8cARV7F4Y+qKOGOh++/aTJ/FCTOT0xKM= Subject key identifier: BB:AF:8F:D4:C6:BF:0D:14:87:36:60:76:08:A1:86:C8:E9:54:60:8F Certificate issuer: /CN=53e58d27-0260-41c6-8a7b-df289923ed1e Certificate serial: 010D0C9F4328584F4C3D68D6BC6070C05EB32380 Authority key identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7018 IP address blocks: 139.151.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:68:d6:bc:60:70:c0:5e:b3:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e58d27-0260-41c6-8a7b-df289923ed1e Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d9eac33d-5a66-4c62-bc6b-53c892066c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:a0:26:45:d1:6f:e8:34:1e:b8:cf:43:a6: 7c:d0:82:8c:3e:10:86:c2:ce:1b:02:94:87:e3:df: 36:fb:0f:31:2d:a5:7f:06:89:ff:e5:c3:55:20:e8: 4b:c9:5e:df:57:f9:b6:4e:7d:93:be:d5:9a:e5:72: ac:30:59:5e:4c:7a:68:f7:73:d1:6a:ea:09:b0:eb: c5:6a:c8:7d:8c:4a:c1:6b:52:37:ba:b3:8f:c7:e8: cf:a7:d8:6b:3d:a1:b5:35:aa:d0:c4:87:98:84:18: 1d:ed:ac:99:00:13:cf:02:df:2b:a2:a9:a1:a6:66: bf:cf:7e:90:d9:2d:a6:87:b2:38:7d:7c:a9:b2:16: d9:c5:5f:68:1e:90:02:05:ec:bc:61:e7:a8:a9:ee: ff:a7:61:43:7f:69:bd:f7:14:16:95:66:8e:9d:ff: cf:81:ee:87:fa:4d:82:3c:e1:e2:63:1a:33:f3:f9: 3b:71:5d:b7:2c:c6:9d:5b:17:4b:44:13:68:71:64: 1e:dc:20:6b:f4:ca:b8:bb:d3:f9:9e:ff:64:15:14: b8:f4:03:ff:f3:2e:3f:9d:c8:25:16:01:b6:67:f2: 76:91:5c:33:05:03:8b:1e:62:5e:44:e7:41:ba:3c: 8b:7c:9e:09:b3:f0:05:da:63:73:14:70:1e:b7:e2: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:8F:D4:C6:BF:0D:14:87:36:60:76:08:A1:86:C8:E9:54:60:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl X509v3 Authority Key Identifier: keyid:44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer sbgp-ipAddrBlock: critical IPv4: 139.151.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:02:72:d6:a2:3a:ba:6d:f4:f5:ae:b8:0f:fd:ca:00:c4:22: 84:84:35:b8:83:04:7d:82:35:ab:ce:9a:9e:ef:29:b1:98:7b: 4b:aa:a8:28:ca:ab:1c:af:be:da:eb:a4:59:ba:2b:34:f0:6b: ff:a4:ee:2c:0a:28:ee:1c:b3:2c:9a:81:57:36:0a:25:47:a5: 8d:d7:8c:28:eb:e1:df:e7:0a:2e:07:d6:5c:4b:38:5e:da:7c: 69:67:eb:43:70:76:fa:00:69:b4:8e:fd:80:67:13:3f:6f:a7: 58:5f:dc:7b:66:25:af:29:80:db:4f:50:e4:b0:f8:6d:90:19: 4e:5c:90:6f:dd:b6:39:7c:05:92:c2:e1:a6:f1:37:d4:f0:89: 1a:dd:ab:7e:6e:4f:33:14:65:56:54:5b:2f:a5:eb:38:51:45: 47:fc:5a:77:81:0b:e4:5d:bc:81:c4:4c:e5:03:3f:bc:5e:45: 16:7e:1a:d3:a6:a3:7c:c3:c5:f1:f7:22:ec:09:67:9e:5b:38: 0b:02:ec:0e:96:77:4d:ea:d2:2c:b4:30:4a:28:d7:5c:61:8b: 41:0b:29:4d:f2:57:ad:f4:50:9e:c7:b2:e4:d1:45:52:c1:30: fb:1e:0a:bb:80:1a:3a:3c:61:74:e7:2d:b5:fc:46:b7:31:13: 71:2d:58:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWjWvGBwwF6zI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNThkMjctMDI2MC00MWM2LThhN2ItZGYyODk5MjNl ZDFlMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDllYWMzM2QtNWE2Ni00YzYyLWJjNmItNTNjODkyMDY2YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5SgJkXRb+g0HrjPQ6Z80IKMPhCGws4bApSH 4982+w8xLaV/Bon/5cNVIOhLyV7fV/m2Tn2TvtWa5XKsMFleTHpo93PRauoJsOvF ash9jErBa1I3urOPx+jPp9hrPaG1NarQxIeYhBgd7ayZABPPAt8roqmhpma/z36Q 2S2mh7I4fXypshbZxV9oHpACBey8Yeeoqe7/p2FDf2m99xQWlWaOnf/Pge6H+k2C POHiYxoz8/k7cV23LMadWxdLRBNocWQe3CBr9Mq4u9P5nv9kFRS49AP/8y4/ncgl FgG2Z/J2kVwzBQOLHmJeROdBujyLfJ4Js/AF2mNzFHAet+KoHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuvj9TGvw0UhzZgdgihhsjpVGCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4OTkyM2VkMWUvMDRkZTRlMzMtNGU3OC0z MzJhLTllMTEtZTYxYjc5ZDc1M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNThkMjctMDI2MC00MWM2LThh N2ItZGYyODk5MjNlZDFlLzUzZTU4ZDI3LTAyNjAtNDFjNi04YTdiLWRmMjg5OTIz ZWQxZS5jcmwwHwYDVR0jBBgwFoAURMqkH+78WccdASiJdYYyxWLbv1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4 OTkyM2VkMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHi5eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMCctaiOrpt9PWuuA/9ygDEIoSENbiDBH2CNavOmp7vKbGYe0uqqCjK qxyvvtrrpFm6KzTwa/+k7iwKKO4csyyagVc2CiVHpY3XjCjr4d/nCi4H1lxLOF7a fGln60NwdvoAabSO/YBnEz9vp1hf3HtmJa8pgNtPUOSw+G2QGU5ckG/dtjl8BZLC 4abxN9TwiRrdq35uTzMUZVZUWy+l6zhRRUf8WneBC+RdvIHETOUDP7xeRRZ+GtOm o3zDxfH3IuwJZ55bOAsC7A6Wd03q0iy0MEoo11xhi0ELKU3yV630UJ7HsuTRRVLB MPseCruAGjo8YXTnLbX8RrcxE3EtWOU= -----END CERTIFICATE-----Generated at Sun Oct 18 22:30:37 2026 by rpki-client