$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fab75aea-c449-3753-9f10-371c357f8845.roa File: fab75aea-c449-3753-9f10-371c357f8845.roa (raw, json) Hash identifier: ZxBROvrWuhNZSLuOuA2oJGBlQPofSboknsP+tDMCXFY= Subject key identifier: 52:6D:23:59:92:AA:C3:1F:56:30:C8:99:48:46:7D:7A:8E:A7:2F:53 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584E51E9E20DE35958E6C8A0D580 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fab75aea-c449-3753-9f10-371c357f8845.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 20473 IP address blocks: 159.198.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:e2:0d:e3:59:58:e6:c8:a0:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=56d13c05-f5d2-46eb-a820-4cb056814bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:83:87:3b:6f:08:b8:83:b9:05:6c:a3:11: 45:dc:f8:e3:b7:eb:c6:d8:fc:f2:66:d2:1f:12:a0: 3c:76:74:83:68:63:1f:d5:c3:af:41:3a:c6:27:dd: 75:53:9b:3c:25:0f:d1:58:1d:a9:38:ab:61:53:13: b7:f0:5e:58:f2:56:1b:89:91:c8:55:c2:30:c0:ac: 6e:be:be:85:ca:ff:02:cd:8f:2f:38:47:f4:46:49: 7f:07:61:a1:e0:a1:4d:ae:56:b5:c6:3b:25:7c:90: ad:4f:36:a6:52:17:6f:08:1d:1f:1b:09:b8:73:10: b5:93:a5:9a:92:be:1d:86:b2:87:d5:c4:27:fe:e9: 9f:e8:ce:ca:0a:16:af:b3:ab:43:94:e6:b8:ac:b6: 82:e3:e7:c8:c5:32:64:d7:26:50:22:eb:27:b7:de: f5:e5:76:51:60:57:78:21:4a:50:b4:90:04:6f:e7: 29:33:bb:c7:82:f4:48:3f:31:dc:4b:e3:37:b4:67: 4c:51:25:13:00:a6:ae:17:0d:e3:06:bd:bc:db:ec: 35:a5:62:4e:8b:14:37:11:b6:9d:cc:d6:b4:ce:a6: 64:84:14:d3:26:f8:46:e0:5f:b0:89:ce:f4:e8:3b: 17:0b:95:20:81:4a:09:94:3d:18:5e:e1:53:d6:14: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:23:59:92:AA:C3:1F:56:30:C8:99:48:46:7D:7A:8E:A7:2F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fab75aea-c449-3753-9f10-371c357f8845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:06:6e:3a:d7:e4:1e:3b:33:88:28:2d:e9:68:4a:86:42:d2: 37:c6:4c:8f:7f:2a:a5:71:03:0f:44:16:e0:6f:6f:00:ff:d1: 53:aa:80:aa:d9:20:5e:da:33:28:4e:32:ab:21:a7:7a:3c:7e: 99:ad:2a:7e:87:2d:20:38:17:ae:38:12:43:50:b4:51:67:5f: 81:88:23:1d:30:d0:c2:c2:21:7b:ed:f5:83:fe:d4:b1:06:13: 1e:0f:be:3b:1c:66:c1:85:f0:d4:ef:87:53:7c:09:3a:2e:70: f0:a5:08:d4:65:7f:c8:c2:b8:d1:53:32:55:30:7f:52:cc:67: 13:13:01:1d:fa:93:ee:4b:fd:3f:a3:b3:ba:8b:86:b6:37:54: b1:57:dc:18:ad:f2:4c:36:ab:81:79:72:f6:0f:17:3e:ed:cc: 2a:ba:4e:b6:f2:00:41:2e:dd:27:59:a6:ff:1e:35:fe:19:59: 07:c3:50:a6:c0:d6:f9:75:58:90:e7:73:fa:38:d7:1c:14:39: 07:ac:5f:66:91:a2:cc:a6:e0:cc:c4:19:01:86:10:8f:fa:6b: d9:4b:c8:e7:fa:e2:53:b0:c5:00:70:80:13:4b:09:07:f3:20: a9:17:d9:98:44:ac:75:b4:e7:91:8f:21:17:85:0a:32:1b:13: 1a:e3:99:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6eIN41lY5sig1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk NTZkMTNjMDUtZjVkMi00NmViLWE4MjAtNGNiMDU2ODE0YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEqDhztvCLiDuQVsoxFF3Pjjt+vG2PzyZtIf EqA8dnSDaGMf1cOvQTrGJ911U5s8JQ/RWB2pOKthUxO38F5Y8lYbiZHIVcIwwKxu vr6Fyv8CzY8vOEf0Rkl/B2Gh4KFNrla1xjslfJCtTzamUhdvCB0fGwm4cxC1k6Wa kr4dhrKH1cQn/umf6M7KChavs6tDlOa4rLaC4+fIxTJk1yZQIusnt9715XZRYFd4 IUpQtJAEb+cpM7vHgvRIPzHcS+M3tGdMUSUTAKauFw3jBr282+w1pWJOixQ3Ebad zNa0zqZkhBTTJvhG4F+wic706DsXC5UggUoJlD0YXuFT1hS6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJtI1mSqsMfVjDImUhGfXqOpy9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvZmFiNzVhZWEtYzQ0OS0z NzUzLTlmMTAtMzcxYzM1N2Y4ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn8ZDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcGbjrX5B47M4goLeloSoZC0jfGTI9/KqVxAw9EFuBvbwD/0VOqgKrZ IF7aMyhOMqshp3o8fpmtKn6HLSA4F644EkNQtFFnX4GIIx0w0MLCIXvt9YP+1LEG Ex4PvjscZsGF8NTvh1N8CToucPClCNRlf8jCuNFTMlUwf1LMZxMTAR36k+5L/T+j s7qLhrY3VLFX3Bit8kw2q4F5cvYPFz7tzCq6TrbyAEEu3SdZpv8eNf4ZWQfDUKbA 1vl1WJDnc/o41xwUOQesX2aRosym4MzEGQGGEI/6a9lLyOf64lOwxQBwgBNLCQfz IKkX2ZhErHW055GPIReFCjIbExrjmW0= -----END CERTIFICATE-----Generated at Wed Jul 1 23:59:01 2026 by rpki-client