$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/53328d6f-6f09-364a-837e-4b73e3ce96f9.roa File: 53328d6f-6f09-364a-837e-4b73e3ce96f9.roa (raw, json) Hash identifier: 5MsIniMBCIWA7RDt0JzM6rJKVwvANbg02EAUHie2Z0Q= Subject key identifier: C4:D8:94:FF:C9:61:4C:FC:43:B2:9F:86:5B:3B:92:D8:51:F4:1F:B4 Certificate issuer: /CN=b8e407d7-863a-439f-a4f2-335e5aac995d Certificate serial: 010D0C9F4328584B66EB203A06DC112626B7CF80 Authority key identifier: 10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/53328d6f-6f09-364a-837e-4b73e3ce96f9.roa Signing time: Fri 03 Oct 2025 19:13:54 +0000 ROA not before: Fri 03 Oct 2025 19:13:54 +0000 ROA not after: Thu 01 Jan 2026 20:13:54 +0000 asID: 29988 IP address blocks: 207.112.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:eb:20:3a:06:dc:11:26:26:b7:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e407d7-863a-439f-a4f2-335e5aac995d Validity Not Before: Oct 3 19:13:54 2025 GMT Not After : Jan 1 20:13:54 2026 GMT Subject: CN=a08c4c99-1540-44d4-b96e-73acdde84477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:2e:db:a7:13:b0:6b:82:0a:99:72:c1:71: be:31:8e:6b:16:4a:8d:0a:5a:e9:c5:da:bd:76:84: 1f:c1:62:09:e0:c2:00:23:54:3a:98:e0:0d:e1:95: fe:1c:70:1d:00:db:7f:dd:fd:47:bb:f4:0f:a4:03: aa:36:a1:76:71:10:10:76:ef:a1:85:8c:fd:03:14: 94:9e:7c:b1:ae:6f:22:ad:09:8b:7d:87:6b:86:ee: 7a:9f:71:a3:9d:25:2d:c6:65:60:39:80:6d:9e:23: 63:a3:e1:9a:b8:26:69:c9:fb:d9:be:ed:72:4b:8f: 01:42:0c:d6:e1:43:bf:cc:07:0b:65:8d:74:ac:44: c3:38:ae:b8:2f:19:84:34:85:7a:f4:51:3c:1f:7f: 99:fd:28:c1:de:91:61:cb:b9:1f:df:e3:68:ba:95: 5a:e7:0d:9f:8c:40:3e:85:fd:6a:84:99:3b:96:01: e3:e3:15:04:3a:72:bb:2b:70:95:b5:54:d3:c8:c1: c3:b4:23:6b:1e:cc:87:dc:29:13:7e:16:92:ed:e1: f2:dc:f8:29:9e:21:df:41:d2:86:40:e0:0b:29:34: 89:5f:b8:fb:47:59:24:58:77:db:57:95:50:ac:16: 4d:07:30:c1:4f:77:33:a7:77:f1:f3:3a:e9:9b:2c: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:94:FF:C9:61:4C:FC:43:B2:9F:86:5B:3B:92:D8:51:F4:1F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/53328d6f-6f09-364a-837e-4b73e3ce96f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.crl X509v3 Authority Key Identifier: keyid:10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer sbgp-ipAddrBlock: critical IPv4: 207.112.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:0b:38:15:14:14:53:c1:d8:bd:67:f1:c6:60:0a:24:08: 70:51:a5:37:05:46:b3:09:f4:f7:b3:2b:cb:60:8b:af:45:57: 0e:41:43:d3:4f:d7:5d:fd:95:02:29:46:9d:ce:2e:ea:2f:8c: 05:45:92:52:08:f8:ff:7e:1f:4c:84:39:1b:82:65:e4:e1:3f: 3d:30:ab:07:bb:d0:a2:37:35:d4:98:81:b7:a8:1d:34:83:76: cb:22:c5:65:09:0e:e1:bc:0b:63:29:b8:80:35:6c:d4:55:1d: d4:39:02:28:0b:eb:3f:41:8f:8a:c9:17:8f:f3:2d:8c:94:76: 67:98:a4:03:b4:a4:f1:d9:80:9f:25:fb:4c:1f:e3:85:f0:96: 6f:bb:60:f1:6c:b7:9c:6b:ea:8a:44:0d:fe:42:61:51:e2:cc: 66:3e:28:09:2f:5b:81:ec:06:ee:2a:85:cf:9a:99:ac:91:d3: a5:fa:24:a3:e0:5e:33:10:c5:fe:4f:df:34:c6:24:01:94:4d: 60:de:ed:2d:f2:0f:5b:12:61:3c:42:4d:b2:bc:4e:7b:a4:27: e8:4f:56:c0:3f:ac:da:e1:8a:8c:9b:e0:61:8d:75:fd:bd:6d: 2a:12:2f:63:3d:d9:d5:43:41:9e:27:08:40:cb:f6:bc:ef:e8: f5:70:90:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtm6yA6BtwRJia3z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNDA3ZDctODYzYS00MzlmLWE0ZjItMzM1ZTVhYWM5 OTVkMB4XDTI1MTAwMzE5MTM1NFoXDTI2MDEwMTIwMTM1NFowLzEtMCsGA1UEAxMk YTA4YzRjOTktMTU0MC00NGQ0LWI5NmUtNzNhY2RkZTg0NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2ou26cTsGuCCplywXG+MY5rFkqNClrpxdq9 doQfwWIJ4MIAI1Q6mOAN4ZX+HHAdANt/3f1Hu/QPpAOqNqF2cRAQdu+hhYz9AxSU nnyxrm8irQmLfYdrhu56n3GjnSUtxmVgOYBtniNjo+GauCZpyfvZvu1yS48BQgzW 4UO/zAcLZY10rETDOK64LxmENIV69FE8H3+Z/SjB3pFhy7kf3+NoupVa5w2fjEA+ hf1qhJk7lgHj4xUEOnK7K3CVtVTTyMHDtCNrHsyH3CkTfhaS7eHy3PgpniHfQdKG QOALKTSJX7j7R1kkWHfbV5VQrBZNBzDBT3czp3fx8zrpmywd/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTYlP/JYUz8Q7Kfhls7kthR9B+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0 MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVlNWFhYzk5NWQvNTMzMjhkNmYtNmYwOS0z NjRhLTgzN2UtNGI3M2UzY2U5NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjhlNDA3ZDctODYzYS00MzlmLWE0 ZjItMzM1ZTVhYWM5OTVkL2I4ZTQwN2Q3LTg2M2EtNDM5Zi1hNGYyLTMzNWU1YWFj OTk1ZC5jcmwwHwYDVR0jBBgwFoAUECkanr0AHGxz/iC1zNJsuybUBgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iOGU0MDdkNy04NjNhLTQzOWYtYTRmMi0zMzVl NWFhYzk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz3AKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4LCzgVFBRTwdi9Z/HGYAokCHBRpTcFRrMJ9PezK8tgi69FVw5BQ9NP 1139lQIpRp3OLuovjAVFklII+P9+H0yEORuCZeThPz0wqwe70KI3NdSYgbeoHTSD dssixWUJDuG8C2MpuIA1bNRVHdQ5AigL6z9Bj4rJF4/zLYyUdmeYpAO0pPHZgJ8l +0wf44Xwlm+7YPFst5xr6opEDf5CYVHizGY+KAkvW4HsBu4qhc+amayR06X6JKPg XjMQxf5P3zTGJAGUTWDe7S3yD1sSYTxCTbK8TnukJ+hPVsA/rNrhioyb4GGNdf29 bSoSL2M92dVDQZ4nCEDL9rzv6PVwkMM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:55 2025 by rpki-client