$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53bac701-e88d-3b1a-9039-87d8b9a43933.roa File: 53bac701-e88d-3b1a-9039-87d8b9a43933.roa (raw, json) Hash identifier: uDGySQu1Au2e6tp9rcVuN2m0c4L9SfgZEORR1tLV/S8= Subject key identifier: 22:CD:A9:4D:8A:AC:76:F4:88:02:9D:7D:F7:D3:E0:07:01:02:DF:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B1D8D643B424D5FC43B891EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53bac701-e88d-3b1a-9039-87d8b9a43933.roa Signing time: Sun 07 Sep 2025 12:31:02 +0000 ROA not before: Sun 07 Sep 2025 12:31:02 +0000 ROA not after: Sat 06 Dec 2025 13:31:02 +0000 asID: 14789 IP address blocks: 172.70.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:8d:64:3b:42:4d:5f:c4:3b:89:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 7 12:31:02 2025 GMT Not After : Dec 6 13:31:02 2025 GMT Subject: CN=9ce841a4-6b8b-427c-bfa9-becaa6ed1fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:af:0a:36:be:74:90:d4:ee:e7:b2:48:d0: a7:59:f5:60:ad:0d:53:bc:ce:bd:eb:6a:f4:39:21: 02:08:21:76:7c:85:4b:42:01:77:99:6e:53:22:69: 27:1a:c6:d3:18:2e:89:d0:fd:43:84:ea:a2:26:3f: 96:17:46:23:a4:52:de:28:d6:98:b5:d5:ea:7c:e0: 61:53:39:71:be:44:6e:72:c0:7e:d3:16:08:97:df: b8:94:a2:ee:6e:ec:bd:93:9d:ae:d9:f6:e0:16:77: df:5d:cc:a3:ac:4d:c8:28:99:78:b9:8c:0a:37:cb: 9c:a3:df:d4:0e:1e:d2:f6:a0:07:b0:4e:f2:d4:bc: 97:80:d4:fb:55:77:21:43:d1:30:8f:b6:33:4b:c1: 15:f2:f5:52:c6:48:ca:38:85:75:ad:0f:c2:25:a4: 3b:7c:e6:7e:5d:bf:fb:f7:1d:71:79:0f:3d:1a:75: ee:9d:f9:ec:ea:fd:a3:36:88:3a:70:8f:db:fc:c1: d9:cd:31:e1:a6:53:36:e8:9e:56:36:4b:fd:ee:cb: 5c:92:31:30:c7:45:56:89:7e:bb:44:f2:31:82:ff: c9:93:fd:d7:05:72:78:c9:8b:ac:43:4d:29:c1:62: cf:11:31:27:df:20:ca:a0:f1:0c:28:d5:c3:99:f0: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CD:A9:4D:8A:AC:76:F4:88:02:9D:7D:F7:D3:E0:07:01:02:DF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/53bac701-e88d-3b1a-9039-87d8b9a43933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b8:99:c3:98:5b:a4:36:ca:2f:b7:b9:6a:d7:40:ed:a7:df: 54:00:81:93:eb:3d:41:83:05:74:68:ba:75:b0:15:3c:3c:b1: 07:2d:4d:da:59:d2:f2:01:62:13:02:44:01:eb:32:bd:a0:04: 10:ac:04:99:b9:9c:3e:6a:c5:e4:b7:ea:5d:d3:48:a8:41:db: 85:94:ab:f9:2a:cf:65:b4:c7:14:8a:d7:9a:cb:ca:a8:21:79: 3f:c0:9d:12:20:e2:79:e2:2b:3a:9e:ad:dc:bb:85:83:4b:b5: 0e:14:a1:32:39:2f:b0:da:77:f0:ae:dc:18:62:48:5c:54:de: 84:00:86:bd:ed:d9:33:c5:a3:a0:66:12:89:5e:5e:a8:27:83: 0c:ae:e2:5a:18:22:07:ca:ed:07:08:2c:d9:39:f7:2b:0b:a6: dc:64:2e:29:76:6b:ce:47:46:d8:f2:8d:df:a9:5e:f6:48:dd: 29:4f:83:37:d7:09:6e:f3:1d:cd:dc:df:76:3b:bd:bb:46:6b: 07:61:ea:f8:ad:01:bb:07:95:00:a9:b4:70:df:72:4d:70:70: a0:d6:60:c4:85:29:53:ad:20:a8:ee:44:87:58:79:f6:cf:89: a6:fb:0b:64:bb:36:b6:80:ca:0b:cc:1d:39:07:d6:3d:4c:c7: c9:e5:92:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdjWQ7Qk1fxDuJHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkwNzEyMzEwMloXDTI1MTIwNjEzMzEwMlowLzEtMCsGA1UEAxMk OWNlODQxYTQtNmI4Yi00MjdjLWJmYTktYmVjYWE2ZWQxZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaGvCja+dJDU7ueySNCnWfVgrQ1TvM6962r0 OSECCCF2fIVLQgF3mW5TImknGsbTGC6J0P1DhOqiJj+WF0YjpFLeKNaYtdXqfOBh UzlxvkRucsB+0xYIl9+4lKLubuy9k52u2fbgFnffXcyjrE3IKJl4uYwKN8uco9/U Dh7S9qAHsE7y1LyXgNT7VXchQ9Ewj7YzS8EV8vVSxkjKOIV1rQ/CJaQ7fOZ+Xb/7 9x1xeQ89GnXunfns6v2jNog6cI/b/MHZzTHhplM26J5WNkv97stckjEwx0VWiX67 RPIxgv/Jk/3XBXJ4yYusQ00pwWLPETEn3yDKoPEMKNXDmfA4DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLNqU2KrHb0iAKdfffT4AcBAt/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTNiYWM3MDEtZTg4ZC0z YjFhLTkwMzktODdkOGI5YTQzOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK4mcOYW6Q2yi+3uWrXQO2n31QAgZPrPUGDBXRounWwFTw8sQctTdpZ 0vIBYhMCRAHrMr2gBBCsBJm5nD5qxeS36l3TSKhB24WUq/kqz2W0xxSK15rLyqgh eT/AnRIg4nniKzqerdy7hYNLtQ4UoTI5L7Dad/Cu3BhiSFxU3oQAhr3t2TPFo6Bm EoleXqgngwyu4loYIgfK7QcILNk59ysLptxkLil2a85HRtjyjd+pXvZI3SlPgzfX CW7zHc3c33Y7vbtGawdh6vitAbsHlQCptHDfck1wcKDWYMSFKVOtIKjuRIdYefbP iab7C2S7NraAygvMHTkH1j1Mx8nlkuQ= -----END CERTIFICATE-----Generated at Mon Sep 8 20:45:40 2025 by rpki-client