$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/53795046-2efb-37e4-ad47-bf90c6d54803.roa File: 53795046-2efb-37e4-ad47-bf90c6d54803.roa (raw, json) Hash identifier: 1aTVmZFZLarBAxlWM+ew5hpRQCR1HkmroEM7ZMrNRx8= Subject key identifier: 92:99:59:83:A7:48:1B:E5:80:A9:89:4C:90:39:8F:37:6E:C2:B1:0C Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584B8BE21C8E826826055CD71480 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/53795046-2efb-37e4-ad47-bf90c6d54803.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 3807 IP address blocks: 207.196.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1c:8e:82:68:26:05:5c:d7:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=29e3c49f-9ea4-4228-950d-06fdfef5e3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:96:65:c5:36:a9:ac:cd:0c:ba:b1:e2:2a: 61:c2:8b:7a:31:e7:de:3f:56:b9:88:37:0e:ba:e2: df:1d:7e:70:e2:24:5f:57:f4:b4:74:91:ee:a8:8e: a0:ce:38:de:e5:bf:c5:91:16:88:77:c4:a3:92:56: 5f:2c:c5:66:78:f2:8c:7b:d3:ac:64:73:b7:42:73: 09:34:cc:10:b3:5b:fd:86:4c:df:40:52:f2:55:f7: 4e:e4:83:6b:8f:d7:ae:14:16:f4:27:42:b8:cd:07: 1a:c8:cc:d1:cb:7d:1f:e2:89:2b:c0:c2:81:f2:88: 2a:d8:3d:a6:5a:fb:83:50:76:86:7f:4d:0a:f0:43: cd:b8:40:06:b1:c8:9a:d7:8d:a9:d5:d5:8f:92:08: 17:da:04:ed:fb:f2:11:d7:24:3d:b3:02:fd:24:c5: 9d:5d:10:70:0e:3e:e3:7a:44:c2:c7:50:6c:49:ad: 50:03:44:b6:e2:a7:d9:34:07:47:08:35:63:5f:c5: fc:9c:3d:1d:62:d4:65:f9:ca:ea:05:ba:f3:d5:1d: b0:93:bf:7f:0c:50:1d:68:8c:11:ce:2f:40:fb:ea: 08:4f:60:84:d8:42:ae:43:33:db:95:d6:46:1a:a6: f1:41:32:50:c6:fd:8a:2a:ff:3a:0a:0d:8e:da:02: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:59:83:A7:48:1B:E5:80:A9:89:4C:90:39:8F:37:6E:C2:B1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/53795046-2efb-37e4-ad47-bf90c6d54803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:94:11:79:75:13:a8:38:41:7b:b5:4c:c7:4f:1e:a1:82:c6: d1:10:a3:11:8d:2c:d6:36:9f:7b:3c:c3:85:94:0c:05:ca:20: 2f:fb:be:fe:39:1e:07:55:19:e6:9f:d0:2c:a7:62:fe:d7:da: 10:0d:99:17:37:22:5d:fc:b8:bd:a4:d9:9f:e3:af:9e:a8:ad: 44:96:7f:f1:6d:6b:a6:a7:c8:2e:ef:5a:bb:74:bd:1e:a1:1b: ac:0a:83:18:61:d2:61:00:b8:50:f2:6d:85:00:97:dd:42:e2: 31:4b:07:cd:1f:6c:64:61:99:2c:61:57:57:fb:95:72:97:58: 57:f6:a0:31:95:8f:52:c4:8b:1f:6e:22:71:e8:d9:f3:78:c5: 18:8e:e9:c0:b3:ae:b0:2e:c9:45:6c:24:08:9f:e1:e8:2f:81: a6:ee:42:b2:95:b1:33:79:88:93:e2:20:5a:71:fb:47:ec:e3: 8c:ce:a6:48:d4:30:50:57:90:9c:74:55:47:43:82:b0:e7:8f: 59:57:03:9e:f1:2a:1c:1e:fa:70:07:3d:8c:4d:53:09:4f:f8: b6:cc:6c:80:b4:00:17:6a:44:69:85:92:e6:72:b6:be:97:e1: 6f:fc:75:e4:69:57:f4:ea:13:27:a2:b7:c1:88:8c:0c:31:d5: 0e:5f:a3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hyOgmgmBVzXFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MjllM2M0OWYtOWVhNC00MjI4LTk1MGQtMDZmZGZlZjVlM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodyWZcU2qazNDLqx4iphwot6MefeP1a5iDcO uuLfHX5w4iRfV/S0dJHuqI6gzjje5b/FkRaId8SjklZfLMVmePKMe9OsZHO3QnMJ NMwQs1v9hkzfQFLyVfdO5INrj9euFBb0J0K4zQcayMzRy30f4okrwMKB8ogq2D2m WvuDUHaGf00K8EPNuEAGscia142p1dWPkggX2gTt+/IR1yQ9swL9JMWdXRBwDj7j ekTCx1BsSa1QA0S24qfZNAdHCDVjX8X8nD0dYtRl+crqBbrz1R2wk79/DFAdaIwR zi9A++oIT2CE2EKuQzPbldZGGqbxQTJQxv2KKv86Cg2O2gLP1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKZWYOnSBvlgKmJTJA5jzduwrEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvNTM3OTUwNDYtMmVmYi0z N2U0LWFkNDctYmY5MGM2ZDU0ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8SnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeUEXl1E6g4QXu1TMdPHqGCxtEQoxGNLNY2n3s8w4WUDAXKIC/7vv45 HgdVGeaf0CynYv7X2hANmRc3Il38uL2k2Z/jr56orUSWf/Fta6anyC7vWrt0vR6h G6wKgxhh0mEAuFDybYUAl91C4jFLB80fbGRhmSxhV1f7lXKXWFf2oDGVj1LEix9u InHo2fN4xRiO6cCzrrAuyUVsJAif4egvgabuQrKVsTN5iJPiIFpx+0fs44zOpkjU MFBXkJx0VUdDgrDnj1lXA57xKhwe+nAHPYxNUwlP+LbMbIC0ABdqRGmFkuZytr6X 4W/8deRpV/TqEyeit8GIjAwx1Q5fo4c= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:33 2025 by rpki-client