$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa File: 04de4e33-4e78-332a-9e11-e61b79d753b4.roa (raw, json) Hash identifier: 81TkySpyCkgRaLtjrePjiRWsmapotAoe+sgF2D0jJ5M= Subject key identifier: 4A:D6:C6:C6:18:94:BA:F7:2D:DF:D4:D8:AF:97:1D:3D:22:B8:ED:60 Certificate issuer: /CN=53e58d27-0260-41c6-8a7b-df289923ed1e Certificate serial: 010D0C9F4328584E082DA657CDCED838DBAE4400 Authority key identifier: 44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa Signing time: Mon 01 Jun 2026 23:06:57 +0000 ROA not before: Mon 01 Jun 2026 23:06:57 +0000 ROA not after: Sun 30 Aug 2026 23:06:57 +0000 asID: 7018 IP address blocks: 139.151.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:2d:a6:57:cd:ce:d8:38:db:ae:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e58d27-0260-41c6-8a7b-df289923ed1e Validity Not Before: Jun 1 23:06:57 2026 GMT Not After : Aug 30 23:06:57 2026 GMT Subject: CN=2a780e5b-e2e5-40ef-a329-0d8c18e6a550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:56:51:65:4e:7b:39:77:81:aa:06:d0:5e: ba:4b:19:36:ab:83:28:db:3f:ce:4d:74:d8:4a:a3: 47:a2:94:3d:ee:53:d0:ad:d2:aa:d5:4d:c8:2c:03: d7:a4:0c:c4:df:03:ec:73:76:6e:c6:59:94:6a:08: db:ad:a5:19:20:ee:9e:51:74:d3:99:22:6f:06:13: 76:4a:38:be:83:a6:45:fd:58:09:d8:04:06:60:46: ff:08:39:a8:71:ed:7b:c7:18:ee:7d:20:dd:b5:3a: ab:09:86:35:80:f0:ca:24:92:3c:36:1a:71:da:aa: 24:6e:40:cb:75:ad:7b:84:b5:2c:61:48:07:6f:50: ab:d5:0d:81:97:7d:0e:c0:5f:a5:59:a1:48:59:8f: cb:fb:30:20:72:75:ff:a2:ab:82:3c:97:f2:c6:70: de:89:f1:5d:02:d6:52:a6:52:fa:1a:cc:4f:44:71: 58:d2:ab:52:aa:cb:52:a3:cc:e3:df:30:d4:d1:e2: 66:e3:12:fe:54:0e:2a:fb:46:e5:89:1c:64:b8:f7: b5:6f:2b:a3:76:e1:b5:15:b3:be:e8:89:ed:de:5f: 37:b8:f0:db:b8:03:0f:8d:b7:5c:9a:33:5b:bb:fe: 7b:b6:ee:64:55:1b:c1:b0:40:d6:65:27:8e:31:69: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D6:C6:C6:18:94:BA:F7:2D:DF:D4:D8:AF:97:1D:3D:22:B8:ED:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/04de4e33-4e78-332a-9e11-e61b79d753b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e/53e58d27-0260-41c6-8a7b-df289923ed1e.crl X509v3 Authority Key Identifier: keyid:44:CA:A4:1F:EE:FC:59:C7:1D:01:28:89:75:86:32:C5:62:DB:BF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e58d27-0260-41c6-8a7b-df289923ed1e.cer sbgp-ipAddrBlock: critical IPv4: 139.151.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f0:05:23:43:5b:d3:7b:7f:ad:34:97:89:25:36:04:d4:e3: cb:e2:6b:66:4e:75:80:b6:b0:c8:4f:c7:58:71:1b:dc:1c:f2: cc:4b:39:71:f3:44:92:49:69:63:e2:fe:86:0d:04:39:f9:cf: a1:5a:f0:1c:ad:ef:8c:71:26:8a:a0:59:b1:bd:61:55:6d:ec: f0:63:ac:70:58:35:8b:d4:6a:d4:b8:07:e0:39:06:09:60:e6: 77:58:34:41:72:ba:fd:d5:f3:5e:07:4a:32:48:b4:be:bb:dc: f2:9e:04:96:ee:9d:fa:8a:d5:25:5b:d7:ca:0e:83:46:5d:e3: 15:b0:be:b9:78:e9:a0:f0:45:e9:a1:17:63:15:fc:1a:e7:31: b2:ec:94:fd:e6:fd:3e:df:15:aa:52:ad:1c:08:6c:30:81:77: 11:35:1c:22:37:b4:a9:d5:2b:68:a8:f8:eb:bb:ea:ac:9b:96: 23:d8:80:bb:59:b6:a1:31:6c:9e:13:81:e7:d9:58:9c:7e:7b: 68:19:e6:0a:d4:de:a1:bb:ef:ce:1e:95:54:86:32:25:56:1e: 59:eb:44:3a:73:f8:88:dc:19:bb:8c:8d:3a:49:8e:70:ff:23: c0:3a:44:ee:6c:96:3a:93:49:4c:03:0a:2a:8c:5d:39:86:d2: d9:64:6b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ILaZXzc7YONuuRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNThkMjctMDI2MC00MWM2LThhN2ItZGYyODk5MjNl ZDFlMB4XDTI2MDYwMTIzMDY1N1oXDTI2MDgzMDIzMDY1N1owLzEtMCsGA1UEAxMk MmE3ODBlNWItZTJlNS00MGVmLWEzMjktMGQ4YzE4ZTZhNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopdWUWVOezl3gaoG0F66Sxk2q4Mo2z/OTXTY SqNHopQ97lPQrdKq1U3ILAPXpAzE3wPsc3ZuxlmUagjbraUZIO6eUXTTmSJvBhN2 Sji+g6ZF/VgJ2AQGYEb/CDmoce17xxjufSDdtTqrCYY1gPDKJJI8Nhpx2qokbkDL da17hLUsYUgHb1Cr1Q2Bl30OwF+lWaFIWY/L+zAgcnX/oquCPJfyxnDeifFdAtZS plL6GsxPRHFY0qtSqstSo8zj3zDU0eJm4xL+VA4q+0bliRxkuPe1byujduG1FbO+ 6Int3l83uPDbuAMPjbdcmjNbu/57tu5kVRvBsEDWZSeOMWnfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErWxsYYlLr3Ld/U2K+XHT0iuO1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4OTkyM2VkMWUvMDRkZTRlMzMtNGU3OC0z MzJhLTllMTEtZTYxYjc5ZDc1M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNThkMjctMDI2MC00MWM2LThh N2ItZGYyODk5MjNlZDFlLzUzZTU4ZDI3LTAyNjAtNDFjNi04YTdiLWRmMjg5OTIz ZWQxZS5jcmwwHwYDVR0jBBgwFoAURMqkH+78WccdASiJdYYyxWLbv1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1OGQyNy0wMjYwLTQxYzYtOGE3Yi1kZjI4 OTkyM2VkMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHi5eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDwBSNDW9N7f600l4klNgTU48via2ZOdYC2sMhPx1hxG9wc8sxLOXHz RJJJaWPi/oYNBDn5z6Fa8Byt74xxJoqgWbG9YVVt7PBjrHBYNYvUatS4B+A5Bglg 5ndYNEFyuv3V814HSjJItL673PKeBJbunfqK1SVb18oOg0Zd4xWwvrl46aDwRemh F2MV/BrnMbLslP3m/T7fFapSrRwIbDCBdxE1HCI3tKnVK2io+Ou76qybliPYgLtZ tqExbJ4TgefZWJx+e2gZ5grU3qG7784elVSGMiVWHlnrRDpz+IjcGbuMjTpJjnD/ I8A6RO5sljqTSUwDCiqMXTmG0tlka40= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:09 2026 by rpki-client