$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/495495be-8dc9-3bb8-b326-eb86fd6912c5.roa File: 495495be-8dc9-3bb8-b326-eb86fd6912c5.roa (raw, json) Hash identifier: 9zqTaNOhcl1kpT6TgVpDIn/aQLsdkI5Mgjz0oYDRprI= Subject key identifier: 23:57:C0:D6:96:9D:FE:A3:72:14:8A:78:7D:64:08:11:4D:33:FB:FF Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584B36BC5002451B179B3D7B0780 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/495495be-8dc9-3bb8-b326-eb86fd6912c5.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 22612 IP address blocks: 209.74.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:50:02:45:1b:17:9b:3d:7b:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=00b0f046-f82b-4589-885f-4a436ee5b1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:a7:74:9d:2d:6e:b5:64:16:4a:b5:8f:e5: 53:57:ec:aa:53:69:aa:4e:a5:62:cd:73:31:df:f8: 39:d7:87:05:1d:d1:93:85:5d:a4:94:1a:c8:bc:4f: f4:b0:dd:27:21:8b:ec:17:63:fc:89:d9:c1:09:6b: a8:e0:e1:e9:09:90:6f:e8:2e:53:f5:78:2e:da:52: 48:8c:1a:e8:bb:6c:4c:e3:88:bb:cf:c9:46:b9:70: e8:5f:1c:cf:1f:dc:50:c7:eb:3c:95:fc:34:df:88: 33:28:8f:af:6b:5d:fd:db:89:00:3f:a3:c6:b8:b2: ae:4e:bd:a3:ed:60:c9:63:47:11:25:dd:88:22:c0: e4:c1:17:a0:fe:50:52:0e:69:4a:70:b2:7e:23:f9: 89:a8:a5:f1:98:f0:ea:c0:e7:1c:75:03:cd:36:2e: 4a:93:8d:10:f4:49:e8:31:54:ba:e5:bf:36:e5:d6: 9f:f2:f7:20:1e:ac:15:15:2b:55:28:82:03:d2:7c: 90:f5:15:53:05:a1:2f:80:73:46:57:2e:40:c2:1e: 5c:e8:bc:b0:69:5f:52:82:1c:be:37:78:61:3c:61: 3b:4c:84:79:6d:85:c7:4b:12:89:47:87:a4:a8:4a: e7:32:9e:0f:41:71:f2:4d:61:ca:82:ba:fd:94:9b: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:57:C0:D6:96:9D:FE:A3:72:14:8A:78:7D:64:08:11:4D:33:FB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/495495be-8dc9-3bb8-b326-eb86fd6912c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 209.74.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d1:f6:5d:81:6d:dc:d0:17:ab:b0:26:a8:3f:da:b8:3d:1c: 91:57:46:28:3a:82:80:d1:1e:a8:cf:a7:b9:a0:8f:bc:20:47: b3:3f:df:3e:4a:55:59:79:90:eb:fc:e7:3a:81:0f:80:cf:aa: d0:69:a4:1b:50:84:cf:8c:e3:e7:2a:57:74:30:ba:99:bd:3b: a5:b7:e2:f9:15:01:79:ad:93:24:ec:2e:0d:4d:ed:71:46:10: 24:de:55:9f:d5:d2:be:d8:99:db:56:b7:81:0c:7e:9d:ab:b2: b4:69:41:99:08:16:89:d1:64:de:3f:24:14:a0:5a:49:85:26: 87:59:68:c5:1e:08:6e:1b:0f:ca:db:5a:f1:7b:f6:05:d4:77: f4:97:24:72:6c:b6:33:3f:6e:3b:8f:29:ba:76:f7:88:c3:a4: b8:df:96:d6:b7:97:d0:9c:90:59:92:bf:f5:00:0d:a8:4f:80: 45:cc:0a:1c:d6:dc:7c:af:fb:89:8e:3a:b0:09:d4:cf:ce:50: 0e:15:2a:0e:51:26:79:3e:2f:a7:1d:5b:1e:5d:04:c2:1a:06: 10:1a:8d:1d:a3:ad:ed:2f:c8:77:07:c4:c6:f0:68:0e:52:5b: fa:06:f2:90:98:86:fc:98:ba:21:4b:62:d4:b9:b5:33:4f:99: 6c:5e:50:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFACRRsXmz17B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MDBiMGYwNDYtZjgyYi00NTg5LTg4NWYtNGE0MzZlZTViMWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBqndJ0tbrVkFkq1j+VTV+yqU2mqTqVizXMx 3/g514cFHdGThV2klBrIvE/0sN0nIYvsF2P8idnBCWuo4OHpCZBv6C5T9Xgu2lJI jBrou2xM44i7z8lGuXDoXxzPH9xQx+s8lfw034gzKI+va13924kAP6PGuLKuTr2j 7WDJY0cRJd2IIsDkwReg/lBSDmlKcLJ+I/mJqKXxmPDqwOccdQPNNi5Kk40Q9Eno MVS65b825daf8vcgHqwVFStVKIID0nyQ9RVTBaEvgHNGVy5Awh5c6LywaV9Sghy+ N3hhPGE7TIR5bYXHSxKJR4ekqErnMp4PQXHyTWHKgrr9lJuHqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNXwNaWnf6jchSKeH1kCBFNM/v/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvNDk1NDk1YmUtOGRjOS0z YmI4LWIzMjYtZWI4NmZkNjkxMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0UpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3R9l2BbdzQF6uwJqg/2rg9HJFXRig6goDRHqjPp7mgj7wgR7M/3z5K VVl5kOv85zqBD4DPqtBppBtQhM+M4+cqV3Qwupm9O6W34vkVAXmtkyTsLg1N7XFG ECTeVZ/V0r7YmdtWt4EMfp2rsrRpQZkIFonRZN4/JBSgWkmFJodZaMUeCG4bD8rb WvF79gXUd/SXJHJstjM/bjuPKbp294jDpLjflta3l9CckFmSv/UADahPgEXMChzW 3Hyv+4mOOrAJ1M/OUA4VKg5RJnk+L6cdWx5dBMIaBhAajR2jre0vyHcHxMbwaA5S W/oG8pCYhvyYuiFLYtS5tTNPmWxeUKU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:42 2025 by rpki-client