$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/833cba88-0b86-384b-b4d1-92fa5abdb60a.roa File: 833cba88-0b86-384b-b4d1-92fa5abdb60a.roa (raw, json) Hash identifier: /ycD3+jjJ1HgGq7gm8GTJHeUgakwtPN9BIoTs13st6A= Subject key identifier: 2E:04:F1:54:CC:90:B4:DF:16:31:BA:63:D9:75:EC:0F:BC:D5:E1:D2 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584F4972ED14755AC872953DB680 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/833cba88-0b86-384b-b4d1-92fa5abdb60a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20473 IP address blocks: 104.207.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ed:14:75:5a:c8:72:95:3d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca8b34e7-4552-472d-822a-5875ddbb7ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:de:62:c7:ec:14:56:bb:b8:06:97:0e:3b: aa:99:0d:39:01:e2:0a:15:13:e6:70:04:29:98:69: 98:66:aa:27:dc:8b:b2:08:dd:1e:1f:8c:ff:2e:ba: 8f:f9:55:46:c5:45:52:60:10:f8:41:1f:5c:ba:ec: 17:6d:dc:de:d2:b0:f3:24:84:91:94:28:83:d0:a1: fa:90:8f:d7:4d:ba:ec:cf:73:78:aa:93:1c:ca:a0: cd:44:30:41:ee:b6:05:9d:89:83:4f:b1:69:c5:6b: b8:b2:0a:f8:3c:c8:74:6f:99:1f:7e:24:97:4a:61: 12:72:67:a0:46:18:29:03:1b:fc:9f:0e:d6:2c:0c: 7f:d7:b8:bd:79:a4:a4:af:75:cb:2b:0e:73:fa:74: 65:ca:16:5f:3f:74:f0:d6:53:4d:56:a4:7d:e5:c7: 24:21:7b:79:d4:a1:5d:52:b7:81:74:12:88:28:5c: be:9c:8a:87:69:0a:31:9c:d9:ed:32:af:83:66:c9: 60:22:0a:c2:e6:1e:47:c0:3d:1a:7f:97:c2:ee:6e: c2:52:fe:02:b2:03:28:f6:72:c3:f2:48:f6:2c:72: d8:ed:90:d9:85:2a:92:1f:d9:0c:dc:ac:e2:46:ec: 9a:d4:13:b1:ea:2f:3f:7b:07:2d:a0:55:8f:f8:7d: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:04:F1:54:CC:90:B4:DF:16:31:BA:63:D9:75:EC:0F:BC:D5:E1:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/833cba88-0b86-384b-b4d1-92fa5abdb60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 104.207.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:65:91:df:20:49:b7:78:97:6e:2a:b9:4f:cf:87:c7:24:43: 25:1c:d6:5e:6a:60:a1:f7:5c:9b:9b:87:4f:dd:9a:97:c9:0a: ea:75:d3:24:57:a4:5b:aa:64:fe:85:dc:04:bb:38:53:f8:2e: fe:05:15:7d:d2:07:6c:33:9a:56:1e:80:b1:1e:80:75:f4:fc: d2:65:b8:a0:15:d6:43:48:a0:fa:0e:88:9f:35:5a:6d:40:f1: 85:14:12:b3:7c:bd:10:12:ce:37:27:61:80:e7:19:49:20:8e: 14:34:2e:9d:c0:93:26:39:b1:33:11:e9:4d:8b:ce:c7:1b:be: b7:aa:0b:94:9d:45:40:d7:91:44:53:74:0d:d6:a6:19:93:a9: 10:7d:dd:72:64:d5:f2:b9:97:ba:70:97:8f:70:02:cb:15:6e: c0:d2:1a:81:f3:12:62:d0:ca:93:2d:95:e2:d8:4e:81:2b:fb: 3f:4f:2b:7e:15:dc:15:9d:29:5e:59:65:d5:0b:d3:1f:42:10: 96:a0:94:5c:e4:d1:d5:af:4f:dc:35:a8:e6:43:e8:ec:5f:b8: 85:9c:67:ce:14:d2:ec:86:cf:45:16:27:b2:95:03:75:66:38: 38:0e:9c:fe:6e:3a:22:d7:1a:9a:b9:da:dd:aa:ec:2b:f9:3e: 60:88:ed:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu0UdVrIcpU9toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2E4YjM0ZTctNDU1Mi00NzJkLTgyMmEtNTg3NWRkYmI3YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3feYsfsFFa7uAaXDjuqmQ05AeIKFRPmcAQp mGmYZqon3IuyCN0eH4z/LrqP+VVGxUVSYBD4QR9cuuwXbdze0rDzJISRlCiD0KH6 kI/XTbrsz3N4qpMcyqDNRDBB7rYFnYmDT7FpxWu4sgr4PMh0b5kffiSXSmEScmeg RhgpAxv8nw7WLAx/17i9eaSkr3XLKw5z+nRlyhZfP3Tw1lNNVqR95cckIXt51KFd UreBdBKIKFy+nIqHaQoxnNntMq+DZslgIgrC5h5HwD0af5fC7m7CUv4CsgMo9nLD 8kj2LHLY7ZDZhSqSH9kM3KziRuya1BOx6i8/ewctoFWP+H19fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4E8VTMkLTfFjG6Y9l17A+81eHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvODMzY2JhODgtMGI4Ni0z ODRiLWI0ZDEtOTJmYTVhYmRiNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaM9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItlkd8gSbd4l24quU/Ph8ckQyUc1l5qYKH3XJubh0/dmpfJCup10yRX pFuqZP6F3AS7OFP4Lv4FFX3SB2wzmlYegLEegHX0/NJluKAV1kNIoPoOiJ81Wm1A 8YUUErN8vRASzjcnYYDnGUkgjhQ0Lp3AkyY5sTMR6U2LzscbvreqC5SdRUDXkURT dA3WphmTqRB93XJk1fK5l7pwl49wAssVbsDSGoHzEmLQypMtleLYToEr+z9PK34V 3BWdKV5ZZdUL0x9CEJaglFzk0dWvT9w1qOZD6OxfuIWcZ84U0uyGz0UWJ7KVA3Vm ODgOnP5uOiLXGpq52t2q7Cv5PmCI7fo= -----END CERTIFICATE-----Generated at Sun Sep 27 08:38:18 2026 by rpki-client