$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53bac701-e88d-3b1a-9039-87d8b9a43933.roa File: 53bac701-e88d-3b1a-9039-87d8b9a43933.roa (raw, json) Hash identifier: iZcHEqzq4d/X8GFeK8dNUCvPfuByEjlQ+lEgDNsDlbQ= Subject key identifier: 17:5C:7C:C2:A1:5A:1A:2C:47:F5:A4:6D:13:64:4E:3B:97:83:AA:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DBD0598035A6EEB22394CC600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53bac701-e88d-3b1a-9039-87d8b9a43933.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 14789 IP address blocks: 172.70.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:98:03:5a:6e:eb:22:39:4c:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=e44c3492-aba1-45e3-bde9-c1f6f640eb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:11:84:06:93:bc:97:10:0f:13:88:0a:52: 56:07:69:23:88:b7:7e:90:25:ec:8f:13:d2:4b:8a: 72:4d:25:d7:79:4c:79:3c:e7:4f:0e:10:2f:5d:e2: ba:8e:91:92:e4:16:45:29:ed:6c:f0:89:36:ff:5a: 47:58:45:34:e3:dd:05:c3:a0:ae:bd:ae:8e:f0:4d: ca:f1:c6:69:96:80:b5:39:f9:4f:0b:43:a7:f7:f0: ce:02:74:bf:0c:15:47:20:0a:8f:2b:79:1b:aa:85: a3:7f:02:89:4d:8c:4a:63:f9:0a:85:8b:3a:5c:14: a5:85:fd:74:81:73:35:ba:c5:a2:26:dc:b4:a9:73: 37:d5:f7:54:98:1d:df:23:46:78:59:29:d1:e6:1d: 74:73:be:6b:7d:16:5b:c8:44:d4:43:74:28:47:af: a4:14:56:cb:da:9f:5e:e9:f9:52:c3:14:6e:6b:ed: 62:4b:a5:0f:7a:9d:13:ec:d2:c4:e2:e9:40:80:d0: c6:39:53:aa:13:4e:45:ac:89:35:eb:de:38:e7:2f: 0c:67:20:c1:24:ab:d7:a5:1e:18:bd:0f:2f:9c:61: ad:cd:fd:62:e7:8f:df:72:f6:4b:8d:af:27:24:ac: 7d:9c:a1:66:4e:0e:67:a4:9b:c0:19:c7:ba:45:ce: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5C:7C:C2:A1:5A:1A:2C:47:F5:A4:6D:13:64:4E:3B:97:83:AA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53bac701-e88d-3b1a-9039-87d8b9a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:53:0b:5c:13:88:52:db:d4:b6:0c:82:03:f5:b9:9b:1e:cf: 62:5c:e6:ee:45:b9:72:15:b5:97:f2:47:61:28:9f:a0:cc:bf: 6d:7d:be:8d:14:6c:c6:df:48:e1:07:e8:2e:e4:1c:8c:32:12: 4d:71:f7:f4:a5:6e:1e:01:86:a5:e6:13:d5:bb:04:7d:af:10: 54:51:ec:71:20:fd:53:ee:16:0e:46:5b:2f:71:01:13:a2:50: fd:eb:f0:d1:ed:38:50:80:03:1b:98:a2:fb:0b:31:d3:9b:12: 19:4c:28:78:e2:31:1a:d7:6b:fe:d5:45:12:1e:94:c8:49:c9: 97:f8:c5:96:11:bd:21:66:f1:93:8d:33:bc:1d:9a:95:e2:8c: 96:c0:5c:56:a3:fc:f8:37:20:0a:84:ec:93:16:68:68:1d:96: 59:ed:62:44:be:0c:a0:e7:f8:64:17:48:5f:dc:95:0a:c1:e3: 99:67:46:f5:35:b4:ec:88:a9:4b:71:cf:69:9f:af:d1:35:9a: f1:23:dd:8a:cc:c7:4c:2b:c7:db:b1:e4:15:77:67:fc:01:f5: 98:9f:51:66:d5:0e:ef:52:8e:2f:13:13:09:53:38:84:5d:b8: d1:8c:d3:df:4d:2e:46:31:a2:42:c0:3a:f0:34:b7:cb:5d:ed: cc:3f:57:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZgDWm7rIjlMxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTQ0YzM0OTItYWJhMS00NWUzLWJkZTktYzFmNmY2NDBlYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFARhAaTvJcQDxOIClJWB2kjiLd+kCXsjxPS S4pyTSXXeUx5POdPDhAvXeK6jpGS5BZFKe1s8Ik2/1pHWEU0490Fw6Cuva6O8E3K 8cZploC1OflPC0On9/DOAnS/DBVHIAqPK3kbqoWjfwKJTYxKY/kKhYs6XBSlhf10 gXM1usWiJty0qXM31fdUmB3fI0Z4WSnR5h10c75rfRZbyETUQ3QoR6+kFFbL2p9e 6flSwxRua+1iS6UPep0T7NLE4ulAgNDGOVOqE05FrIk169445y8MZyDBJKvXpR4Y vQ8vnGGtzf1i54/fcvZLja8nJKx9nKFmTg5npJvAGce6Rc51UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdcfMKhWhosR/WkbRNkTjuXg6pxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTNiYWM3MDEtZTg4ZC0z YjFhLTkwMzktODdkOGI5YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClTC1wTiFLb1LYMggP1uZsez2Jc5u5FuXIVtZfyR2Eon6DMv219vo0U bMbfSOEH6C7kHIwyEk1x9/Slbh4BhqXmE9W7BH2vEFRR7HEg/VPuFg5GWy9xAROi UP3r8NHtOFCAAxuYovsLMdObEhlMKHjiMRrXa/7VRRIelMhJyZf4xZYRvSFm8ZON M7wdmpXijJbAXFaj/Pg3IAqE7JMWaGgdllntYkS+DKDn+GQXSF/clQrB45lnRvU1 tOyIqUtxz2mfr9E1mvEj3YrMx0wrx9ux5BV3Z/wB9ZifUWbVDu9Sji8TEwlTOIRd uNGM099NLkYxokLAOvA0t8td7cw/VzM= -----END CERTIFICATE-----Generated at Sat May 9 06:12:15 2026 by rpki-client