$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/0d84602b-935a-3a02-99e1-d4346dad0ac8.roa File: 0d84602b-935a-3a02-99e1-d4346dad0ac8.roa (raw, json) Hash identifier: 4zKQfGrcLjjfLDhP69Oj6d3YxUkO0edo1Dwu12WTFNw= Subject key identifier: CB:00:F7:07:8D:0D:AA:B5:DE:57:94:37:46:61:49:F0:FE:65:DB:8B Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584DB1DAD1A970709522892DAE00 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/0d84602b-935a-3a02-99e1-d4346dad0ac8.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 22612 IP address blocks: 199.192.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d1:a9:70:70:95:22:89:2d:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=cf5b392c-46d0-4d35-8c6a-2e4811ae56e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:4f:09:7b:33:6c:76:01:5f:ce:2f:d2:1c: bc:63:09:5e:57:2a:8f:0c:03:05:42:9f:0d:0d:14: b7:34:0a:97:0c:01:8a:b2:55:db:db:53:ef:81:88: f9:95:bc:26:f3:23:6c:e6:e3:30:64:76:86:a8:83: 11:6b:8d:04:bc:c7:df:62:92:d9:d8:d3:1b:90:db: c8:54:33:05:52:28:5f:3f:ef:db:52:6a:6e:eb:31: 9f:85:84:ee:2c:31:1c:e3:be:9a:25:95:e2:76:24: e5:11:9a:d3:e3:d3:4b:42:23:07:bf:bf:d0:df:4f: 9f:50:30:51:51:ba:f7:3a:a4:c9:7c:db:4a:9f:3f: d5:91:28:53:3e:c2:eb:5a:4f:20:42:e6:dc:62:fa: 5f:a3:f6:78:61:0a:39:80:cb:73:d2:70:cc:2a:60: 9b:0b:af:35:ae:22:20:63:39:8f:57:14:56:29:f5: ce:78:bb:56:49:b9:24:b9:f1:bc:2b:28:d0:99:70: e3:9d:e5:d4:3b:46:b0:71:e2:55:d9:9a:7a:7f:27: 80:68:75:46:fc:c7:ea:c5:39:c1:e2:ba:f6:43:a2: ea:d2:20:74:92:00:4e:b3:90:72:1f:d7:5e:95:86: 49:78:54:e6:94:d8:ef:fd:ca:ec:8b:41:84:ea:41: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:00:F7:07:8D:0D:AA:B5:DE:57:94:37:46:61:49:F0:FE:65:DB:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/0d84602b-935a-3a02-99e1-d4346dad0ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 199.192.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:25:d0:db:e2:86:81:ca:9c:7c:68:30:02:16:f7:ea:68:96: 70:ec:95:c1:79:2a:a6:00:e7:8f:c2:b1:16:82:3f:ca:92:35: 95:65:f3:9d:b5:3a:18:21:99:a7:1c:7a:40:99:04:7f:12:ba: 0f:03:39:27:60:d5:3b:7f:e6:be:8c:ae:92:99:43:c5:cb:57: 8b:de:6d:39:ff:cb:55:32:c1:52:c7:08:47:ad:37:52:f2:31: 15:e4:74:ca:60:42:7e:0b:30:24:98:14:3b:34:79:0c:28:3e: 67:4c:94:4f:88:d2:93:ae:8f:4e:83:1d:fa:ba:cb:54:1f:97: 99:b9:8b:13:54:14:4a:04:e7:f2:28:f0:d0:cb:22:9c:91:39: a9:36:ab:35:e4:c3:48:1d:71:17:33:75:4e:d9:8b:7f:96:20: d7:52:a1:3b:89:5f:12:ee:bb:08:64:b5:a8:0e:40:2b:4f:3b: 99:8e:25:a2:4f:4c:ad:17:7c:57:54:05:4e:0f:dc:2d:57:41: f8:ab:a0:05:d6:3b:68:56:3d:f2:7d:3b:49:05:7f:c0:cc:9e: 05:57:df:88:3d:0c:cb:d4:be:78:b5:0f:be:ad:79:69:50:6d: 9a:1c:6c:ed:85:1a:15:d6:c6:d1:75:3c:14:a9:f5:7a:b8:38: 6d:30:78:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tGpcHCVIoktrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk Y2Y1YjM5MmMtNDZkMC00ZDM1LThjNmEtMmU0ODExYWU1NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn1PCXszbHYBX84v0hy8YwleVyqPDAMFQp8N DRS3NAqXDAGKslXb21PvgYj5lbwm8yNs5uMwZHaGqIMRa40EvMffYpLZ2NMbkNvI VDMFUihfP+/bUmpu6zGfhYTuLDEc476aJZXidiTlEZrT49NLQiMHv7/Q30+fUDBR Ubr3OqTJfNtKnz/VkShTPsLrWk8gQubcYvpfo/Z4YQo5gMtz0nDMKmCbC681riIg YzmPVxRWKfXOeLtWSbkkufG8KyjQmXDjneXUO0awceJV2Zp6fyeAaHVG/MfqxTnB 4rr2Q6Lq0iB0kgBOs5ByH9delYZJeFTmlNjv/crsi0GE6kFDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsA9weNDaq13leUN0ZhSfD+ZduLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMGQ4NDYwMmItOTM1YS0z YTAyLTk5ZTEtZDQzNDZkYWQwYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx8AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACol0NvihoHKnHxoMAIW9+polnDslcF5KqYA54/CsRaCP8qSNZVl8521 OhghmaccekCZBH8Sug8DOSdg1Tt/5r6MrpKZQ8XLV4vebTn/y1UywVLHCEetN1Ly MRXkdMpgQn4LMCSYFDs0eQwoPmdMlE+I0pOuj06DHfq6y1Qfl5m5ixNUFEoE5/Io 8NDLIpyROak2qzXkw0gdcRczdU7Zi3+WINdSoTuJXxLuuwhktagOQCtPO5mOJaJP TK0XfFdUBU4P3C1XQfiroAXWO2hWPfJ9O0kFf8DMngVX34g9DMvUvni1D76teWlQ bZocbO2FGhXWxtF1PBSp9Xq4OG0weNg= -----END CERTIFICATE-----Generated at Wed May 13 10:58:28 2026 by rpki-client