$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/42b05d4b-2d25-39f1-b061-7787fafdc486.roa File: 42b05d4b-2d25-39f1-b061-7787fafdc486.roa (raw, json) Hash identifier: je1ey/vXIj0LQoXQJbSHN2pyieQ7xq3tPoDloZ/0BSY= Subject key identifier: 33:37:10:D0:B8:21:83:3F:AD:67:57:5E:00:26:AF:D0:42:2A:22:BB Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F4328584F49770A10013EB32DD9B29E00 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/42b05d4b-2d25-39f1-b061-7787fafdc486.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 167.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:0a:10:01:3e:b3:2d:d9:b2:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4be78cef-0fac-49eb-b89d-c7df8cb68099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:fe:8b:2f:f5:0f:26:56:0d:7c:f9:80:16: f1:38:75:69:dc:00:e6:a7:d5:cd:2c:eb:2a:51:81: 11:b6:dc:43:3e:d8:79:a9:fe:fc:72:0f:7c:d9:c8: 7c:29:3f:9f:04:27:70:83:f1:5c:ab:55:30:ee:c4: 9a:49:07:b4:dc:34:b3:63:47:19:25:4c:5d:26:f5: e0:59:3f:0d:39:e2:24:cf:41:10:93:56:d6:17:a0: c0:a6:d1:c8:ca:67:d0:e0:99:e7:77:6a:b7:70:4e: 6f:91:7d:ac:e0:19:6c:38:3d:65:3e:ba:a9:fc:83: 23:76:b7:4f:a3:2f:f9:27:a0:e2:fa:bc:cf:1c:41: 56:06:5f:35:67:36:f3:e1:30:df:53:96:e8:fe:ff: 6c:92:87:b9:9e:ec:c8:3c:a1:b3:ce:f3:94:5f:d9: 53:64:c4:57:24:ba:31:d8:8d:c6:c9:15:2a:00:3d: fc:51:1c:8e:e3:37:e0:d9:f2:d5:fd:5c:c6:1f:3c: dd:ad:91:7c:dc:88:86:63:96:f2:08:da:63:fb:7a: 86:bc:c5:b7:c9:35:51:95:06:0f:b0:20:b5:b7:91: ff:41:d5:10:07:65:e0:64:12:42:1b:ac:f0:49:99: c4:0c:41:0b:da:4a:be:f6:f0:7f:27:4f:27:24:63: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:37:10:D0:B8:21:83:3F:AD:67:57:5E:00:26:AF:D0:42:2A:22:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/42b05d4b-2d25-39f1-b061-7787fafdc486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3f:18:4c:a0:29:a2:11:03:0d:96:a3:b8:36:23:51:bd:31: 4a:2f:59:5d:11:fa:0d:42:63:88:77:71:2a:65:57:45:b5:aa: 8f:9c:15:10:ea:ad:56:b9:4a:fd:8a:e2:7e:41:8d:f9:11:65: 82:14:08:91:20:c4:87:9a:cc:c7:b5:b1:a5:32:de:a2:1e:81: 9b:e1:62:e7:dc:05:3e:d0:25:f5:87:13:7e:b7:c0:8d:3b:cd: 4d:89:f7:00:9e:fd:66:ed:a7:a9:10:0a:49:ea:85:90:c7:d5: 6c:55:8d:33:ac:58:e7:cc:db:9d:26:0c:dc:5c:82:df:0a:34: 48:0e:e7:2f:6f:2b:5e:a4:8f:73:5e:c3:1b:f1:83:49:15:fd: 42:2b:bb:8d:a0:68:8d:8f:c6:6b:95:3d:3b:de:96:4b:93:27: 98:2a:54:17:22:78:87:a3:bd:1b:12:65:09:86:34:7a:e0:5c: 09:27:9b:c1:e7:18:0d:a2:72:dc:62:b5:01:32:bd:91:17:92: 72:5c:0d:f2:52:6c:c8:73:2b:c9:59:ee:6c:ce:8d:8c:b0:c6: 77:3e:1a:8f:0f:9b:04:02:de:ad:41:71:a9:07:be:f2:26:54: 7d:76:de:00:c7:57:49:13:94:8a:8b:5f:6a:20:d9:5f:22:fc: d7:d5:41:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdwoQAT6zLdmyngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJlNzhjZWYtMGZhYy00OWViLWI4OWQtYzdkZjhjYjY4MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlej+iy/1DyZWDXz5gBbxOHVp3ADmp9XNLOsq UYERttxDPth5qf78cg982ch8KT+fBCdwg/Fcq1Uw7sSaSQe03DSzY0cZJUxdJvXg WT8NOeIkz0EQk1bWF6DAptHIymfQ4Jnnd2q3cE5vkX2s4BlsOD1lPrqp/IMjdrdP oy/5J6Di+rzPHEFWBl81Zzbz4TDfU5bo/v9skoe5nuzIPKGzzvOUX9lTZMRXJLox 2I3GyRUqAD38URyO4zfg2fLV/VzGHzzdrZF83IiGY5byCNpj+3qGvMW3yTVRlQYP sCC1t5H/QdUQB2XgZBJCG6zwSZnEDEEL2kq+9vB/J08nJGMd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM3ENC4IYM/rWdXXgAmr9BCKiK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvNDJiMDVkNGItMmQyNS0z OWYxLWIwNjEtNzc4N2ZhZmRjNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc/GEygKaIRAw2Wo7g2I1G9MUovWV0R+g1CY4h3cSplV0W1qo+cFRDq rVa5Sv2K4n5BjfkRZYIUCJEgxIeazMe1saUy3qIegZvhYufcBT7QJfWHE363wI07 zU2J9wCe/Wbtp6kQCknqhZDH1WxVjTOsWOfM250mDNxcgt8KNEgO5y9vK16kj3Ne wxvxg0kV/UIru42gaI2PxmuVPTvelkuTJ5gqVBcieIejvRsSZQmGNHrgXAknm8Hn GA2ictxitQEyvZEXknJcDfJSbMhzK8lZ7mzOjYywxnc+Go8PmwQC3q1BcakHvvIm VH123gDHV0kTlIqLX2og2V8i/NfVQdI= -----END CERTIFICATE-----Generated at Mon Oct 19 08:26:18 2026 by rpki-client