$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa File: a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa (raw, json) Hash identifier: r/ajSWOZ87LxeUH7nswrEckWSULT6hakXcv3F91S68c= Subject key identifier: 3B:C2:4C:0E:05:5B:58:4B:97:3D:D9:F5:1D:DE:5B:69:FB:FF:E4:87 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584E921FAA1EB10F4314F3D4C800 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 22612 IP address blocks: 198.187.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:aa:1e:b1:0f:43:14:f3:d4:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=d047d232-ada6-429c-a430-221e47660673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:b8:e5:2c:f1:e8:40:83:69:3b:1c:ba:df: be:02:8c:b7:36:db:7a:0e:bc:f0:db:04:b9:53:21: 6c:5a:cb:b9:25:4e:e9:50:a7:5e:8d:2f:de:6b:60: 5f:48:16:e7:fc:ac:9b:89:5a:86:6c:c0:d5:a3:86: f0:3d:6c:76:96:2c:38:1b:fd:9a:65:99:be:d8:e9: 25:e6:c6:4a:1c:4d:9d:6c:d0:77:20:ec:b5:04:a4: da:2b:c2:84:d9:58:75:4c:38:79:d9:6b:2e:b3:7f: c4:8d:c7:0d:23:cf:1e:d5:5e:31:ac:3d:b3:7a:0e: 04:ae:e8:c6:82:40:46:a1:e3:11:10:fd:bd:20:21: 6d:47:56:f3:61:f0:a7:bd:d9:2f:81:33:9e:bd:2d: 2a:1d:1f:e8:ed:44:b1:b8:da:33:21:12:9b:d6:b2: 2f:2d:ea:13:f2:ad:bc:f7:a6:bb:be:35:06:a4:28: 73:9d:23:f2:c2:02:ab:15:1d:b6:cc:1f:d3:7e:7d: 94:5d:ea:4d:e7:51:90:49:c1:65:e8:aa:3f:83:6c: 72:53:b6:cc:97:38:ec:d8:82:26:cd:a7:7f:84:ba: 56:ff:a1:81:42:f0:dd:b0:1c:d6:ab:2d:0b:2c:16: 45:e9:7c:e0:72:f0:0e:df:18:dd:ea:81:ed:51:f4: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:4C:0E:05:5B:58:4B:97:3D:D9:F5:1D:DE:5B:69:FB:FF:E4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 198.187.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:9d:c1:35:37:09:08:41:ca:50:f4:10:82:c9:f8:af:18:f3: c9:4a:68:14:88:9e:34:8e:09:74:8d:ec:3b:9f:94:ab:be:bc: 42:20:bd:da:f8:ac:a4:90:80:f8:40:b6:99:90:10:08:f5:8d: 5f:00:97:53:a8:be:ff:27:7e:d6:62:f9:49:cf:e8:38:31:85: 00:d7:a8:9a:5a:95:c9:b6:9a:c4:cc:94:d1:7e:03:67:4b:fd: 68:57:7c:22:3a:f6:c3:74:2d:bc:12:ee:31:f6:73:9e:6c:80: a1:5b:55:32:9b:90:3f:82:76:a0:6d:8d:a9:0e:37:8a:b3:c4: 3b:31:0a:f0:03:8a:f5:02:75:28:30:85:64:5b:a0:15:1e:ff: 55:82:3c:03:ae:87:70:b3:c2:56:5d:02:3a:a7:31:8c:ba:40: 16:41:be:5f:0f:40:50:65:ac:64:21:9b:d9:a9:b9:62:70:18: af:d7:a5:5e:26:fc:3f:e4:02:c3:81:4e:4b:b9:58:e1:b8:3f: ee:98:a9:ae:34:75:06:29:8d:c3:79:24:f9:ae:93:1b:3f:ed: f6:90:4e:45:5e:d1:e3:1c:3b:ab:be:1d:14:ed:5d:2c:1d:16: 55:38:b6:68:b8:0a:ae:09:53:a8:b3:80:40:92:b1:e0:a2:b2: c8:d0:2c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6oesQ9DFPPUyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDA0N2QyMzItYWRhNi00MjljLWE0MzAtMjIxZTQ3NjYwNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyae45Szx6ECDaTscut++Aoy3Ntt6Drzw2wS5 UyFsWsu5JU7pUKdejS/ea2BfSBbn/KybiVqGbMDVo4bwPWx2liw4G/2aZZm+2Okl 5sZKHE2dbNB3IOy1BKTaK8KE2Vh1TDh52Wsus3/EjccNI88e1V4xrD2zeg4ErujG gkBGoeMREP29ICFtR1bzYfCnvdkvgTOevS0qHR/o7USxuNozIRKb1rIvLeoT8q28 96a7vjUGpChznSPywgKrFR22zB/Tfn2UXepN51GQScFl6Ko/g2xyU7bMlzjs2IIm zad/hLpW/6GBQvDdsBzWqy0LLBZF6XzgcvAO3xjd6oHtUfRkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvCTA4FW1hLlz3Z9R3eW2n7/+SHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvYTIxNTdiZmEtODJiMS0z MTJiLWIxY2UtNTQ4NmJiM2FlNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxrscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWdwTU3CQhBylD0EILJ+K8Y88lKaBSInjSOCXSN7DuflKu+vEIgvdr4 rKSQgPhAtpmQEAj1jV8Al1Oovv8nftZi+UnP6DgxhQDXqJpalcm2msTMlNF+A2dL /WhXfCI69sN0LbwS7jH2c55sgKFbVTKbkD+CdqBtjakON4qzxDsxCvADivUCdSgw hWRboBUe/1WCPAOuh3CzwlZdAjqnMYy6QBZBvl8PQFBlrGQhm9mpuWJwGK/XpV4m /D/kAsOBTku5WOG4P+6Yqa40dQYpjcN5JPmukxs/7faQTkVe0eMcO6u+HRTtXSwd FlU4tmi4Cq4JU6izgECSseCissjQLAs= -----END CERTIFICATE-----Generated at Fri Jul 24 10:18:16 2026 by rpki-client