$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/53328d6f-6f09-364a-837e-4b73e3ce96f9.roa File: 53328d6f-6f09-364a-837e-4b73e3ce96f9.roa (raw, json) Hash identifier: YrmfxBA20G2/2XwF7nXos3cRBlC2g8BW/eH1Z2eoRBs= Subject key identifier: E6:77:07:78:B2:1B:E8:CB:AD:95:5A:9E:1F:C0:75:57:C5:FB:F7:7C Certificate issuer: /CN=b8e407d7-863a-439f-a4f2-335e5aac995d Certificate serial: 010D0C9F4328584F4C3D580BDE324A88FD29F280 Authority key identifier: 10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/53328d6f-6f09-364a-837e-4b73e3ce96f9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 29988 IP address blocks: 207.112.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:58:0b:de:32:4a:88:fd:29:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e407d7-863a-439f-a4f2-335e5aac995d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=da33ed1e-584d-4454-b28e-43bfddbed862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:49:fe:9d:52:f0:ed:8c:4e:ae:7f:69:be: 51:d1:fc:36:b4:77:11:be:51:c3:17:b4:32:ca:40: 2a:90:1d:20:64:02:99:74:a3:cf:de:28:5c:c3:46: a5:bd:75:2a:3a:62:de:85:17:7e:c1:ff:35:0f:7a: fa:95:d4:14:61:28:5e:7a:1a:76:5e:f9:7f:c4:cc: 3e:db:67:2f:49:60:26:c2:fd:0a:fd:3c:f3:62:01: 80:bc:bf:5e:46:46:26:f3:b5:0f:b3:77:36:2d:63: e0:4c:4b:a4:db:aa:d3:5f:6e:64:03:2a:08:9a:7b: 64:a8:57:2a:ac:b5:0d:69:23:b8:c9:d5:93:94:fc: 8d:7e:38:75:e9:0f:6f:99:43:c6:07:b3:dd:18:72: e2:ab:d3:72:6c:29:b4:bc:bd:ec:2f:89:eb:68:ea: 7f:61:c6:c7:1a:98:7e:16:26:2f:c2:50:1b:14:28: 9c:b0:5d:be:a8:db:13:43:eb:2d:21:9d:98:2f:44: 83:36:8b:47:ac:4b:1d:a0:90:54:66:d8:77:1c:0e: 00:ab:95:b3:01:e7:0a:5c:f4:8e:2c:20:21:a8:08: 94:70:1f:19:86:44:c6:a9:19:70:9d:b9:17:e1:0c: 20:1c:8f:6a:2a:8e:e5:77:fd:07:1e:f6:59:58:6b: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:07:78:B2:1B:E8:CB:AD:95:5A:9E:1F:C0:75:57:C5:FB:F7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/53328d6f-6f09-364a-837e-4b73e3ce96f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl X509v3 Authority Key Identifier: keyid:10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer sbgp-ipAddrBlock: critical IPv4: 207.112.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:12:13:bf:42:50:39:25:52:d9:29:af:67:2b:c3:93:42:ad: 5e:19:bc:15:c0:10:3b:f6:43:1f:c0:96:4a:c2:f2:63:b8:17: 40:69:8b:7d:72:f0:66:a0:72:89:c1:e6:f6:d3:e2:e5:8c:ab: e8:14:67:5c:2d:8f:da:3b:65:3b:92:97:7e:57:64:28:1d:af: ad:e7:39:43:be:d5:5c:89:72:0a:98:88:fb:7b:33:d6:8e:86: 2d:37:b1:e7:f0:b2:76:ae:07:3a:28:10:03:87:ab:b3:86:e5: 9c:92:53:6b:79:d4:16:fc:23:42:e1:72:3b:f9:45:ee:e7:bb: 58:5d:81:30:be:c7:ae:a7:42:1c:41:e2:14:42:01:e1:78:1f: 01:95:2d:51:d0:9d:c9:52:d4:f3:b0:c3:c0:24:d6:de:96:01: 1f:66:d3:78:1e:ed:59:8e:d8:55:ff:25:02:5c:1b:6e:a7:22: 8e:25:fb:d5:0b:cf:ef:80:24:27:8f:c7:56:13:db:d5:d2:19: 51:17:f3:4f:a4:a6:06:2c:02:e3:a1:55:0f:e5:fb:fd:af:f4: 85:9f:7b:a4:b6:42:2b:b7:2a:55:53:95:2e:82:31:47:b0:c6: 75:be:03:05:37:6c:9a:b9:e8:ff:05:0e:62:c7:d4:1f:8b:0a: 21:e1:86:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVgL3jJKiP0p8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNDA3ZDctODYzYS00MzlmLWE0ZjItMzM1ZTVhYWM5 OTVkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGEzM2VkMWUtNTg0ZC00NDU0LWIyOGUtNDNiZmRkYmVkODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhedJ/p1S8O2MTq5/ab5R0fw2tHcRvlHDF7Qy ykAqkB0gZAKZdKPP3ihcw0alvXUqOmLehRd+wf81D3r6ldQUYSheehp2Xvl/xMw+ 22cvSWAmwv0K/TzzYgGAvL9eRkYm87UPs3c2LWPgTEuk26rTX25kAyoImntkqFcq rLUNaSO4ydWTlPyNfjh16Q9vmUPGB7PdGHLiq9NybCm0vL3sL4nraOp/YcbHGph+ FiYvwlAbFCicsF2+qNsTQ+stIZ2YL0SDNotHrEsdoJBUZth3HA4Aq5WzAecKXPSO LCAhqAiUcB8ZhkTGqRlwnbkX4QwgHI9qKo7ld/0HHvZZWGtPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ3B3iyG+jLrZVanh/AdVfF+/d8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0 MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVlNWFhYzk5NWQvNTMzMjhkNmYtNmYwOS0z NjRhLTgzN2UtNGI3M2UzY2U5NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjhlNDA3ZDctODYzYS00MzlmLWE0 ZjItMzM1ZTVhYWM5OTVkL2I4ZTQwN2Q3LTg2M2EtNDM5Zi1hNGYyLTMzNWU1YWFj OTk1ZC5jcmwwHwYDVR0jBBgwFoAUECkanr0AHGxz/iC1zNJsuybUBgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVl NWFhYzk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz3AKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQSE79CUDklUtkpr2crw5NCrV4ZvBXAEDv2Qx/AlkrC8mO4F0Bpi31y 8GagconB5vbT4uWMq+gUZ1wtj9o7ZTuSl35XZCgdr63nOUO+1VyJcgqYiPt7M9aO hi03sefwsnauBzooEAOHq7OG5ZySU2t51Bb8I0Lhcjv5Re7nu1hdgTC+x66nQhxB 4hRCAeF4HwGVLVHQnclS1POww8Ak1t6WAR9m03ge7VmO2FX/JQJcG26nIo4l+9UL z++AJCePx1YT29XSGVEX80+kpgYsAuOhVQ/l+/2v9IWfe6S2Qiu3KlVTlS6CMUew xnW+AwU3bJq56P8FDmLH1B+LCiHhhtg= -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:37 2026 by rpki-client