$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa File: 293c24be-5877-3a18-8d22-1b2ad2d976b3.roa (raw, json) Hash identifier: i5/+oDoh74v3ZZnYLyEftGedWkPAAPDgSc5NhurmVng= Subject key identifier: 0D:9E:BD:5E:1D:8A:25:6B:42:BE:FF:CE:01:18:39:46:49:8A:73:D8 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584BA2378B17980C17C13C4BF580 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 22612 IP address blocks: 159.198.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8b:17:98:0c:17:c1:3c:4b:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=50949581-82e4-42d0-8bae-ee1ca57d6066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:f1:8c:6a:d0:81:7f:f8:a8:fa:bc:40:ff: ae:f8:ff:cd:b5:f2:1b:e0:38:ef:33:af:bd:18:bc: 7a:ba:bc:90:e4:ff:6b:f9:c7:7c:ed:bb:33:8c:70: 5e:62:de:15:2b:c6:e0:46:f2:c8:5c:79:8b:5d:28: cb:0d:66:2c:c3:ca:fd:a9:86:d5:34:8d:b5:0d:c7: d1:65:6f:13:5c:09:e9:8e:42:8c:ee:a0:b9:ed:fe: a1:12:c3:72:a6:86:6f:4e:52:3e:16:be:3b:2b:3f: 93:45:43:f0:4c:c8:ba:27:43:b5:f1:38:46:36:87: 27:30:13:97:76:70:15:fc:60:52:4c:bf:87:ab:52: c3:9e:9a:a0:6e:8d:0d:f4:31:0d:cb:df:38:71:40: 4e:1a:b8:0b:d2:bd:b5:98:f2:da:fe:2a:93:ab:ae: b7:c4:7a:04:5d:a2:38:36:05:5c:fa:09:0d:00:dd: 7a:a0:04:9f:70:11:0f:af:29:11:42:04:9d:da:da: e0:23:a3:39:64:21:cd:a7:5f:41:78:01:8a:9d:88: 97:0e:81:87:3c:3c:c3:ae:22:2b:9e:c9:5d:b2:6d: 8a:d3:4c:c3:ec:56:c3:99:b7:53:2b:38:37:3b:ea: d6:1b:c9:7a:2c:51:fa:fa:fa:a8:7e:cc:41:0a:5d: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9E:BD:5E:1D:8A:25:6B:42:BE:FF:CE:01:18:39:46:49:8A:73:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:69:3d:27:a5:68:32:cf:69:f6:7f:e4:79:0e:ed:3e:51:d8: e1:e5:07:8b:08:7c:a2:67:0a:58:20:92:92:b8:99:1f:6e:1b: 60:f4:b8:36:f1:1e:e3:3e:f0:6f:63:1d:66:30:83:fe:23:68: ff:fa:a2:cc:61:b9:0b:7a:f9:5e:ce:ff:d1:b9:17:3e:08:d3: 88:81:34:39:9a:d1:d0:cb:08:68:e4:40:ec:9f:4d:7f:54:ad: cb:02:02:9d:86:9d:23:29:a9:4d:a7:e1:5f:b7:48:42:29:58: c1:ad:36:f7:ee:86:67:7a:9f:de:e3:b2:18:69:20:98:7d:e1: 0f:fa:1e:fe:20:0d:0d:f6:70:4e:12:ed:0a:4b:7f:08:48:4e: 7f:cf:70:ad:9c:46:e9:a1:ad:d6:ba:3f:8a:40:07:f0:63:28: 54:eb:7b:d5:af:80:92:3b:87:02:3c:8e:de:75:92:ee:31:97: 95:c1:5a:01:82:05:ab:fd:2d:c9:d3:3e:5e:36:c3:aa:ca:a4: c0:f2:73:09:c8:98:03:74:23:34:5e:1a:66:65:e0:b2:6d:84: 1b:4c:e1:0e:0b:99:90:13:d0:f5:b5:df:73:df:cb:a7:83:da: be:49:ca:a1:9f:5e:3b:73:65:9c:13:07:4e:72:c7:0b:20:33: fe:e3:8d:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN4sXmAwXwTxL9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NTA5NDk1ODEtODJlNC00MmQwLThiYWUtZWUxY2E1N2Q2MDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DrxjGrQgX/4qPq8QP+u+P/NtfIb4DjvM6+9 GLx6uryQ5P9r+cd87bszjHBeYt4VK8bgRvLIXHmLXSjLDWYsw8r9qYbVNI21DcfR ZW8TXAnpjkKM7qC57f6hEsNypoZvTlI+Fr47Kz+TRUPwTMi6J0O18ThGNocnMBOX dnAV/GBSTL+Hq1LDnpqgbo0N9DENy984cUBOGrgL0r21mPLa/iqTq663xHoEXaI4 NgVc+gkNAN16oASfcBEPrykRQgSd2trgI6M5ZCHNp19BeAGKnYiXDoGHPDzDriIr nsldsm2K00zD7FbDmbdTKzg3O+rWG8l6LFH6+vqofsxBCl30WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2evV4diiVrQr7/zgEYOUZJinPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMjkzYzI0YmUtNTg3Ny0z YTE4LThkMjItMWIyYWQyZDk3NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn8YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRpPSelaDLPafZ/5HkO7T5R2OHlB4sIfKJnClggkpK4mR9uG2D0uDbx HuM+8G9jHWYwg/4jaP/6osxhuQt6+V7O/9G5Fz4I04iBNDma0dDLCGjkQOyfTX9U rcsCAp2GnSMpqU2n4V+3SEIpWMGtNvfuhmd6n97jshhpIJh94Q/6Hv4gDQ32cE4S 7QpLfwhITn/PcK2cRumhrda6P4pAB/BjKFTre9WvgJI7hwI8jt51ku4xl5XBWgGC Bav9LcnTPl42w6rKpMDycwnImAN0IzReGmZl4LJthBtM4Q4LmZAT0PW133Pfy6eD 2r5JyqGfXjtzZZwTB05yxwsgM/7jjZ0= -----END CERTIFICATE-----Generated at Tue Nov 4 09:48:12 2025 by rpki-client