$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fab75aea-c449-3753-9f10-371c357f8845.roa File: fab75aea-c449-3753-9f10-371c357f8845.roa (raw, json) Hash identifier: gWMcyQACg78VhA8iPwg4ikX6MLSwQ75b2tS7i7OkQcM= Subject key identifier: 3F:AA:B9:A8:89:20:5F:16:23:FB:94:39:E8:AA:0B:2B:B3:13:9A:50 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584BB166233CBECD4256822DD280 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fab75aea-c449-3753-9f10-371c357f8845.roa Signing time: Thu 30 Oct 2025 11:31:34 +0000 ROA not before: Thu 30 Oct 2025 11:31:34 +0000 ROA not after: Wed 28 Jan 2026 12:31:34 +0000 asID: 20473 IP address blocks: 159.198.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:66:23:3c:be:cd:42:56:82:2d:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Oct 30 11:31:34 2025 GMT Not After : Jan 28 12:31:34 2026 GMT Subject: CN=b89cd739-67d4-4b0c-aca2-60a998ec2aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:71:0f:ac:e5:39:56:9d:4a:c7:f1:1d:5c: 8f:c5:59:4e:d1:9d:3a:bc:30:fe:5f:51:1f:69:9f: d9:64:63:4e:f6:33:8a:ab:a9:d6:bd:04:9e:29:32: f2:7e:45:28:ac:1c:12:23:7a:89:37:f7:c8:bb:ea: 05:1e:69:2e:8e:fd:40:4e:ae:6e:f4:d7:5a:7b:dc: ac:3d:07:e5:01:4b:bb:d0:ed:9f:a5:0d:16:3e:6e: 7e:91:07:70:d3:4e:f8:78:2c:a2:ff:4e:4c:7d:3f: 04:b2:d3:a8:21:de:9e:4c:f6:1e:cc:7d:63:69:a0: 45:36:4f:e2:7c:97:36:28:97:a2:b6:02:0a:7a:02: 41:cb:7a:2d:ba:80:bc:55:59:90:49:9e:6f:d6:4c: 5b:76:71:14:b7:92:f8:e2:52:61:ec:c5:9c:92:ea: 1a:bd:4e:f7:5f:8b:ad:93:55:8b:1d:80:c7:24:3f: 73:53:30:6d:65:c3:f3:d1:62:3d:df:94:fb:bf:16: b8:7a:fc:31:ae:c3:6a:46:7f:9b:a3:be:ff:7d:2c: 58:85:63:02:bc:94:d4:54:b9:fc:bf:15:82:b4:05: 74:2e:44:7c:c7:c1:a6:06:95:b2:b5:fb:82:b7:b6: dc:24:8c:b9:92:d5:24:04:d6:c1:1d:17:76:f4:70: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AA:B9:A8:89:20:5F:16:23:FB:94:39:E8:AA:0B:2B:B3:13:9A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/fab75aea-c449-3753-9f10-371c357f8845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 159.198.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:91:46:ed:27:d9:c6:2c:12:d7:43:3d:e6:e7:53:6d:3a:0e: d2:93:5d:0c:5a:a0:bb:06:99:43:8a:51:7f:2d:82:8a:d8:b9: 55:84:13:8b:7a:4d:cb:d8:5c:49:2d:39:a3:88:2b:f5:01:27: d9:48:93:82:d5:61:8e:b2:b1:6a:d2:a7:25:b6:c3:43:5c:e0: 69:67:27:39:f5:26:6f:f0:d0:c5:84:27:61:db:58:24:3e:18: 73:5f:aa:f2:bd:66:ce:11:65:a4:51:e8:5c:b9:42:64:28:a3: 05:40:99:f5:fc:d1:54:a9:2e:13:49:38:f9:c9:66:8a:e8:9a: bd:bd:fc:5c:f3:73:62:e0:8b:0a:ac:0e:7a:07:21:c2:75:5d: a9:42:5f:d0:1e:61:5e:5c:fe:ff:a9:0a:79:da:3d:dc:f6:62: 2b:aa:4e:ae:a7:b7:7d:a5:32:99:61:b8:b7:18:87:61:93:db: 97:2f:c9:2f:dd:21:c9:a0:9c:3d:b0:fc:4a:df:da:3c:4e:e1: 9b:6f:c4:21:f5:5f:74:82:f6:30:03:70:af:15:1b:83:ff:ab: 44:9f:b1:48:09:cc:b8:7d:53:a0:72:ac:b6:bc:f8:1c:cd:cf: 9a:89:bd:68:84:5c:a2:ba:78:0d:e6:f6:77:fe:b9:d3:24:1e: 20:99:91:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxZiM8vs1CVoIt0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MTAzMDExMzEzNFoXDTI2MDEyODEyMzEzNFowLzEtMCsGA1UEAxMk Yjg5Y2Q3MzktNjdkNC00YjBjLWFjYTItNjBhOTk4ZWMyYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiNxD6zlOVadSsfxHVyPxVlO0Z06vDD+X1Ef aZ/ZZGNO9jOKq6nWvQSeKTLyfkUorBwSI3qJN/fIu+oFHmkujv1ATq5u9Ndae9ys PQflAUu70O2fpQ0WPm5+kQdw0074eCyi/05MfT8EstOoId6eTPYezH1jaaBFNk/i fJc2KJeitgIKegJBy3otuoC8VVmQSZ5v1kxbdnEUt5L44lJh7MWckuoavU73X4ut k1WLHYDHJD9zUzBtZcPz0WI935T7vxa4evwxrsNqRn+bo77/fSxYhWMCvJTUVLn8 vxWCtAV0LkR8x8GmBpWytfuCt7bcJIy5ktUkBNbBHRd29HBKiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+quaiJIF8WI/uUOeiqCyuzE5pQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvZmFiNzVhZWEtYzQ0OS0z NzUzLTlmMTAtMzcxYzM1N2Y4ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn8ZDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyRRu0n2cYsEtdDPebnU206DtKTXQxaoLsGmUOKUX8tgorYuVWEE4t6 TcvYXEktOaOIK/UBJ9lIk4LVYY6ysWrSpyW2w0Nc4GlnJzn1Jm/w0MWEJ2HbWCQ+ GHNfqvK9Zs4RZaRR6Fy5QmQoowVAmfX80VSpLhNJOPnJZoromr29/Fzzc2Lgiwqs DnoHIcJ1XalCX9AeYV5c/v+pCnnaPdz2YiuqTq6nt32lMplhuLcYh2GT25cvyS/d IcmgnD2w/Erf2jxO4ZtvxCH1X3SC9jADcK8VG4P/q0SfsUgJzLh9U6ByrLa8+BzN z5qJvWiEXKK6eA3m9nf+udMkHiCZkZI= -----END CERTIFICATE-----Generated at Tue Nov 4 17:32:46 2025 by rpki-client