$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/db0cf94c-7384-39f3-a7e7-6f7c52e860e9.roa File: db0cf94c-7384-39f3-a7e7-6f7c52e860e9.roa (raw, json) Hash identifier: 7gumEImyCO8aUMUv1Armo7NX7VTjk7xqRPvYVpD1W24= Subject key identifier: 86:36:60:12:57:2D:63:AC:8B:AD:06:54:8E:D8:A5:6E:9B:93:0F:52 Certificate issuer: /CN=53d76580-9dca-44c4-9727-ef7385e30e49 Certificate serial: 010D0C9F4328584EA795121911AF10A724D90240 Authority key identifier: AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/db0cf94c-7384-39f3-a7e7-6f7c52e860e9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399955 IP address blocks: 167.253.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:12:19:11:af:10:a7:24:d9:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d76580-9dca-44c4-9727-ef7385e30e49 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1e4495de-585b-41cc-97df-c96a6833d801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:6b:c3:37:54:48:5f:48:09:0b:e1:30:90: 72:75:e4:e6:55:a0:ff:24:08:67:f7:64:d9:e3:0f: 25:fa:22:47:a4:09:41:23:5e:c9:3c:1e:b2:3a:31: 08:a4:e7:53:5f:c5:81:fb:59:b9:c5:f3:9c:c5:5f: c2:5b:4b:b8:05:55:0c:a4:e5:4b:4f:78:09:bd:d0: b3:2c:fb:04:e1:2f:73:d8:2b:76:7f:54:99:02:c3: e4:3c:f3:4f:72:8e:75:49:c9:3f:e8:a0:75:1d:26: 11:8c:49:e6:a2:ea:11:f7:fa:d2:31:67:27:36:2e: 36:04:ba:31:78:47:b6:25:4d:b6:76:54:3b:2f:87: f0:71:99:89:e1:2c:1e:3b:97:bb:7f:c9:d1:79:8c: b2:2f:a0:39:5e:dc:5f:2a:b9:08:c8:89:fd:67:e6: da:f9:19:2e:92:03:1d:3b:31:85:ff:2f:a3:f2:bc: d8:67:ef:94:2b:78:cc:0c:e1:6d:74:a6:e8:97:02: d3:b9:7e:9a:3a:2f:c4:da:c3:cf:e6:75:4d:ee:48: 0a:90:47:f1:84:9b:8e:13:04:de:5d:52:6c:3c:7a: 8a:d4:a4:b3:14:d3:ab:76:e2:28:db:72:62:85:b7: df:f3:16:08:66:6d:c9:a7:fd:49:89:6b:e7:93:84: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:36:60:12:57:2D:63:AC:8B:AD:06:54:8E:D8:A5:6E:9B:93:0F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/db0cf94c-7384-39f3-a7e7-6f7c52e860e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49/53d76580-9dca-44c4-9727-ef7385e30e49.crl X509v3 Authority Key Identifier: keyid:AB:09:7D:A7:E1:56:48:5C:1B:10:6F:5E:B7:0E:71:FF:AD:BA:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53d76580-9dca-44c4-9727-ef7385e30e49.cer sbgp-ipAddrBlock: critical IPv4: 167.253.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:9f:87:2f:33:07:99:24:4b:7b:78:9b:74:e7:aa:c7:26:d8: 06:8c:0b:7a:e9:6a:9c:72:3e:94:13:af:a2:a1:18:5d:83:1d: 4b:d9:cb:1f:87:7a:1b:59:d7:4e:e4:e7:ee:1e:51:1b:02:6c: 4e:6b:ff:03:15:94:71:ad:ee:b5:85:44:bc:d4:de:ab:85:da: 7d:05:f5:3e:8b:8b:1f:a7:a2:81:05:3e:58:f5:c8:a1:15:1f: 2c:ff:f0:b8:68:ac:a1:14:1f:86:b7:54:93:a2:2a:61:44:b3: ef:1d:39:40:8b:62:46:87:f4:ea:8e:46:2e:5f:c1:c1:ae:c2: d4:56:86:99:c7:24:7b:72:c1:1c:23:8f:73:b8:bb:98:2e:cd: 2c:e8:e4:0f:de:78:b4:42:7f:56:2d:b4:98:66:b5:fe:cc:99: 78:15:8f:eb:71:52:a6:86:2a:85:0c:78:1b:a3:8c:02:e8:92: 6f:b2:ac:f4:67:40:fb:6e:82:b3:e2:48:01:7d:cf:80:da:54: 53:8d:e7:4b:72:48:45:66:3c:4e:ab:67:75:f1:62:ac:91:da: bc:aa:ef:c2:3a:c3:50:7c:8f:cd:9c:68:bf:dc:6d:fe:4f:a1: 63:10:47:e4:4b:82:04:a2:49:0b:e7:2c:d2:b9:33:ec:43:aa: da:29:c0:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlRIZEa8QpyTZAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkNzY1ODAtOWRjYS00NGM0LTk3MjctZWY3Mzg1ZTMw ZTQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWU0NDk1ZGUtNTg1Yi00MWNjLTk3ZGYtYzk2YTY4MzNkODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyRrwzdUSF9ICQvhMJBydeTmVaD/JAhn92TZ 4w8l+iJHpAlBI17JPB6yOjEIpOdTX8WB+1m5xfOcxV/CW0u4BVUMpOVLT3gJvdCz LPsE4S9z2Ct2f1SZAsPkPPNPco51Sck/6KB1HSYRjEnmouoR9/rSMWcnNi42BLox eEe2JU22dlQ7L4fwcZmJ4SweO5e7f8nReYyyL6A5XtxfKrkIyIn9Z+ba+RkukgMd OzGF/y+j8rzYZ++UK3jMDOFtdKbolwLTuX6aOi/E2sPP5nVN7kgKkEfxhJuOEwTe XVJsPHqK1KSzFNOrduIo23Jihbff8xYIZm3Jp/1JiWvnk4SxBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY2YBJXLWOsi60GVI7YpW6bkw9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81M2Q3 NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjczODVlMzBlNDkvZGIwY2Y5NGMtNzM4NC0z OWYzLWE3ZTctNmY3YzUyZTg2MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTNkNzY1ODAtOWRjYS00NGM0LTk3 MjctZWY3Mzg1ZTMwZTQ5LzUzZDc2NTgwLTlkY2EtNDRjNC05NzI3LWVmNzM4NWUz MGU0OS5jcmwwHwYDVR0jBBgwFoAUqwl9p+FWSFwbEG9etw5x/626SVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81M2Q3NjU4MC05ZGNhLTQ0YzQtOTcyNy1lZjcz ODVlMzBlNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+fhy8zB5kkS3t4m3Tnqscm2AaMC3rpapxyPpQTr6KhGF2DHUvZyx+H ehtZ107k5+4eURsCbE5r/wMVlHGt7rWFRLzU3quF2n0F9T6Lix+nooEFPlj1yKEV Hyz/8LhorKEUH4a3VJOiKmFEs+8dOUCLYkaH9OqORi5fwcGuwtRWhpnHJHtywRwj j3O4u5guzSzo5A/eeLRCf1YttJhmtf7MmXgVj+txUqaGKoUMeBujjALokm+yrPRn QPtugrPiSAF9z4DaVFON50tySEVmPE6rZ3XxYqyR2ryq78I6w1B8j82caL/cbf5P oWMQR+RLggSiSQvnLNK5M+xDqtopwPQ= -----END CERTIFICATE-----Generated at Tue Sep 1 05:04:09 2026 by rpki-client