$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/cd844b72-756d-347c-8a7d-a73db8780c47.roa File: cd844b72-756d-347c-8a7d-a73db8780c47.roa (raw, json) Hash identifier: N3dlt0i7p4RlVSZijOhdmVGNDy5o1gWtKGChZMJok6o= Subject key identifier: B7:35:32:E9:78:34:5C:B1:EA:65:D4:6B:CF:9B:50:46:A9:3B:9C:64 Certificate issuer: /CN=53d9715a-5edc-4d9f-a9a2-830a16826131 Certificate serial: 010D0C9F4328584F6F62013C7961E0E3B0A66F00 Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/cd844b72-756d-347c-8a7d-a73db8780c47.roa Signing time: Thu 08 Oct 2026 15:07:39 +0000 ROA not before: Thu 08 Oct 2026 15:07:39 +0000 ROA not after: Wed 06 Jan 2027 16:07:39 +0000 asID: 218771 IP address blocks: 205.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:62:01:3c:79:61:e0:e3:b0:a6:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131 Validity Not Before: Oct 8 15:07:39 2026 GMT Not After : Jan 6 16:07:39 2027 GMT Subject: CN=658c4c6d-cabf-4175-abdb-0101d36eaca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:a1:32:b8:b5:81:ae:05:6e:5b:06:2f:bc: db:42:05:f1:2f:95:7a:14:82:2d:21:24:7c:4f:92: e4:f3:3b:05:83:31:b1:a4:81:ac:03:99:1b:b5:0f: 4a:2c:42:52:1c:22:f5:fc:44:90:48:ca:bf:28:e3: 3b:0e:46:80:b3:df:d1:11:51:2b:34:40:f1:f5:b9: 3b:bd:3b:9a:bc:74:27:45:63:ed:a0:1e:bd:9d:3b: 2f:ac:41:c7:52:c4:15:f8:aa:77:4e:32:f7:f7:5d: ac:01:b8:e5:43:f0:45:74:25:27:ba:08:d0:9a:b7: 08:34:c2:5f:9a:5c:ce:eb:d8:fb:19:3b:d0:f3:18: c3:5d:de:10:15:7c:81:6c:56:70:88:8a:ce:1d:ab: 9a:c8:52:71:b8:e8:10:52:00:22:c4:87:ad:a1:b5: e0:c2:5a:86:46:9b:c1:ef:29:7f:18:07:88:15:ce: 75:82:34:3b:0c:f9:21:e2:a3:3d:85:47:83:6e:36: 69:43:02:19:7d:7a:f8:85:0b:d6:92:9b:88:a6:6c: 46:74:31:e8:90:2e:95:8b:7e:00:23:1e:e5:7c:15: 4d:bb:52:82:cb:c5:e1:9a:0f:c7:3f:04:18:58:5f: 5f:13:d2:ce:3c:0c:9b:e5:1a:aa:b1:5f:9b:ca:65: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:32:E9:78:34:5C:B1:EA:65:D4:6B:CF:9B:50:46:A9:3B:9C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/cd844b72-756d-347c-8a7d-a73db8780c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl X509v3 Authority Key Identifier: keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer sbgp-ipAddrBlock: critical IPv4: 205.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6b:01:d9:b7:b0:cd:5e:47:0e:63:c0:80:24:9c:1f:90:09: 1c:1f:84:69:b0:f7:3f:91:36:9e:d3:c9:9e:69:db:6a:11:30: 2f:d0:c7:22:d0:4a:a4:b1:bb:b9:1e:ca:41:d0:2b:21:46:cb: 72:31:93:f9:6e:cf:e5:d2:42:21:76:60:12:49:27:65:de:94: 89:d8:d9:8e:99:da:ab:d5:03:c4:04:4f:c7:03:ac:38:2d:a9: d4:94:fc:5b:eb:1d:b2:c5:ed:60:cc:36:35:7e:a8:28:a2:02: 58:2e:32:c6:4b:3c:51:f6:95:1e:d7:7c:64:64:54:06:73:b2: e6:51:94:8c:47:38:fa:00:6c:a7:9d:9d:89:a8:ff:5b:4b:d4: bd:a9:86:ab:2a:4e:9b:e1:1b:b7:8a:0e:6c:b8:15:9c:e1:af: 93:f6:94:8b:76:43:9b:d0:ea:dc:d8:ab:99:6a:e0:78:01:58: eb:64:28:db:8d:25:89:be:10:c2:32:99:96:30:19:21:6c:71: 92:e4:a4:9c:06:7e:19:e5:c8:fa:b2:f2:32:bf:59:ef:be:9c: fd:fb:54:4e:fe:98:db:5d:d7:4d:95:c1:9e:ce:1e:7a:fa:54: 5c:c5:9c:ca:a5:39:54:06:0a:bc:bd:5e:b0:45:fa:3f:65:f4: 32:b8:21:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vYgE8eWHg47CmbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2 MTMxMB4XDTI2MTAwODE1MDczOVoXDTI3MDEwNjE2MDczOVowLzEtMCsGA1UEAxMk NjU4YzRjNmQtY2FiZi00MTc1LWFiZGItMDEwMWQzNmVhY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqihMri1ga4FblsGL7zbQgXxL5V6FIItISR8 T5Lk8zsFgzGxpIGsA5kbtQ9KLEJSHCL1/ESQSMq/KOM7DkaAs9/REVErNEDx9bk7 vTuavHQnRWPtoB69nTsvrEHHUsQV+Kp3TjL3912sAbjlQ/BFdCUnugjQmrcINMJf mlzO69j7GTvQ8xjDXd4QFXyBbFZwiIrOHauayFJxuOgQUgAixIetobXgwlqGRpvB 7yl/GAeIFc51gjQ7DPkh4qM9hUeDbjZpQwIZfXr4hQvWkpuIpmxGdDHokC6Vi34A Ix7lfBVNu1KCy8Xhmg/HPwQYWF9fE9LOPAyb5RqqsV+bymXnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc1Mul4NFyx6mXUa8+bUEapO5xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5 NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvY2Q4NDRiNzItNzU2ZC0z NDdjLThhN2QtYTczZGI4NzgwYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5 YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh MTY4MjYxMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1rAdm3sM1eRw5jwIAknB+QCRwfhGmw9z+RNp7TyZ5p22oRMC/QxyLQ SqSxu7keykHQKyFGy3Ixk/luz+XSQiF2YBJJJ2XelInY2Y6Z2qvVA8QET8cDrDgt qdSU/FvrHbLF7WDMNjV+qCiiAlguMsZLPFH2lR7XfGRkVAZzsuZRlIxHOPoAbKed nYmo/1tL1L2phqsqTpvhG7eKDmy4FZzhr5P2lIt2Q5vQ6tzYq5lq4HgBWOtkKNuN JYm+EMIymZYwGSFscZLkpJwGfhnlyPqy8jK/We++nP37VE7+mNtd102VwZ7OHnr6 VFzFnMqlOVQGCry9XrBF+j9l9DK4IXA= -----END CERTIFICATE-----Generated at Sun Oct 11 17:47:38 2026 by rpki-client