$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa File: 04de4e33-4e78-332a-9e11-e61b79d753b4.roa (raw, json) Hash identifier: 5Tt+y+18TW5qZ4beo0Lcdy7ghZ8o7NUxOsWReS9nQRU= Subject key identifier: C7:36:8B:B4:DF:BA:85:45:33:63:EC:49:58:7A:BD:33:B1:26:8D:90 Certificate issuer: /CN=53e58d27-0260-41c6-8a7b-df289923ed1e Certificate serial: 010D0C9F4328584EAA5191336B24084C6BC97180 Authority key identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 7018 IP address blocks: 139.151.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:91:33:6b:24:08:4c:6b:c9:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e58d27-0260-41c6-8a7b-df289923ed1e Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=ee3fb683-4c59-4004-aa96-ef3b40acb080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:2f:0a:c9:7d:d7:62:7f:f1:bb:4f:3e:e5: 8c:c2:80:bb:df:25:74:21:0a:d0:4d:90:43:6b:6e: 79:87:ec:74:77:c0:4b:04:29:a2:c4:66:77:53:95: 23:8e:f0:3d:36:c1:1b:f9:f2:f9:f6:1b:24:82:02: ef:00:e6:ae:e8:3d:dd:8e:f6:74:e7:09:61:ef:5f: cd:7d:ff:ab:a0:69:4a:cc:1d:7c:7e:cc:9b:2a:67: ea:98:cd:a9:ab:0f:ff:ad:17:e3:c6:77:87:e7:22: 6f:46:4a:6c:37:93:0b:40:f1:80:22:ee:c3:cd:af: 45:3a:44:2d:9a:50:71:cc:6b:ef:d1:7f:93:57:e0: 67:b4:c2:54:01:39:0a:60:e2:00:9b:f6:15:c4:16: f0:63:b1:02:72:2e:f5:63:4b:b1:58:6b:84:22:a4: 76:66:c7:ea:e5:7f:eb:78:a6:9d:eb:63:85:7b:e0: 87:df:c3:c7:1a:37:dc:ca:63:0b:34:25:72:60:8c: 97:4b:af:66:35:4e:e7:97:3c:a3:30:e8:e0:85:10: d7:73:92:c9:e1:47:62:b6:a0:22:4b:d0:0f:85:d1: 28:2b:6b:ed:3f:45:b9:5b:dd:14:6d:6a:78:bd:02: 83:9c:6b:91:d6:c9:f2:13:0d:5f:18:13:8a:0b:f6: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:36:8B:B4:DF:BA:85:45:33:63:EC:49:58:7A:BD:33:B1:26:8D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl X509v3 Authority Key Identifier: keyid:44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer sbgp-ipAddrBlock: critical IPv4: 139.151.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:61:da:9f:3b:d2:42:98:c7:31:1f:71:00:56:ba:3a:4f:71: 37:92:8a:48:24:bd:03:b3:e9:ef:56:67:1e:c8:90:e9:04:d1: 0e:1c:8d:63:89:15:4f:ba:19:b2:6c:6d:1c:fb:a2:74:58:27: 3c:8f:40:7c:15:08:10:55:4a:5c:75:e1:62:92:cb:5e:dd:46: 42:64:4e:58:58:c6:43:37:06:41:df:af:a8:8b:b6:6a:a4:93: 24:e5:65:e6:00:54:b7:7d:a7:71:5b:f9:7e:81:e7:41:46:ad: ff:6c:ab:31:1b:8e:b9:b5:de:ee:28:cf:a2:1b:14:5c:ea:24: d7:a9:d5:14:5f:03:aa:d5:a8:35:e4:b6:88:97:6e:4f:5b:95: 1e:f5:1c:64:a3:9c:65:53:3d:a8:41:cd:87:b3:1d:67:37:53: 5e:a8:fb:1f:cc:30:4c:58:fe:df:8f:96:7b:53:d7:c9:14:83: c8:89:96:48:9a:06:0a:56:2e:c3:66:be:f0:35:96:b7:94:06: c0:90:3f:7d:b2:b0:4a:34:ef:21:2c:15:0e:ae:56:72:d6:9e: de:48:b8:49:f4:7b:2a:1a:89:9a:a6:3e:e1:6d:a7:4d:bf:7f: 29:9e:e8:d4:92:41:f5:80:c5:d0:d5:50:c1:1b:26:fc:25:dd: 54:a8:49:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZEzayQITGvJcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNThkMjctMDI2MC00MWM2LThhN2ItZGYyODk5MjNl ZDFlMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk ZWUzZmI2ODMtNGM1OS00MDA0LWFhOTYtZWYzYjQwYWNiMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTYvCsl912J/8btPPuWMwoC73yV0IQrQTZBD a255h+x0d8BLBCmixGZ3U5UjjvA9NsEb+fL59hskggLvAOau6D3djvZ05wlh71/N ff+roGlKzB18fsybKmfqmM2pqw//rRfjxneH5yJvRkpsN5MLQPGAIu7Dza9FOkQt mlBxzGvv0X+TV+BntMJUATkKYOIAm/YVxBbwY7ECci71Y0uxWGuEIqR2Zsfq5X/r eKad62OFe+CH38PHGjfcymMLNCVyYIyXS69mNU7nlzyjMOjghRDXc5LJ4UditqAi S9APhdEoK2vtP0W5W90UbWp4vQKDnGuR1snyEw1fGBOKC/bzuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc2i7TfuoVFM2PsSVh6vTOxJo2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4OTkyM2VkMWUvMDRkZTRlMzMtNGU3OC0z MzJhLTllMTEtZTYxYjc5ZDc1M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNThkMjctMDI2MC00MWM2LThh N2ItZGYyODk5MjNlZDFlLzUzZTU4ZDI3LTAyNjAtNDFjNi04YTdiLWRmMjg5OTIz ZWQxZS5jcmwwHwYDVR0jBBgwFoAURMqkH+78WccdASiJdYYyxWLbv1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4 OTkyM2VkMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHi5eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVh2p870kKYxzEfcQBWujpPcTeSikgkvQOz6e9WZx7IkOkE0Q4cjWOJ FU+6GbJsbRz7onRYJzyPQHwVCBBVSlx14WKSy17dRkJkTlhYxkM3BkHfr6iLtmqk kyTlZeYAVLd9p3Fb+X6B50FGrf9sqzEbjrm13u4oz6IbFFzqJNep1RRfA6rVqDXk toiXbk9blR71HGSjnGVTPahBzYezHWc3U16o+x/MMExY/t+PlntT18kUg8iJlkia BgpWLsNmvvA1lreUBsCQP32ysEo07yEsFQ6uVnLWnt5IuEn0eyoaiZqmPuFtp02/ fyme6NSSQfWAxdDVUMEbJvwl3VSoSWc= -----END CERTIFICATE-----Generated at Tue Sep 1 03:41:32 2026 by rpki-client