$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/01c04108-2084-3163-a90d-4fc763d9b1d1.roa File: 01c04108-2084-3163-a90d-4fc763d9b1d1.roa (raw, json) Hash identifier: Ir7jdW9/Q2T/RNO0z6bXMEkqk2Xge0vX8HtJ6Y46q6A= Subject key identifier: 4E:D5:4B:1C:50:EB:3C:1B:24:69:E6:03:23:EC:5C:E2:21:06:48:68 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBDF4A327892B377CFED80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/01c04108-2084-3163-a90d-4fc763d9b1d1.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 207.211.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:4a:32:78:92:b3:77:cf:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=070e8bdd-4122-48e1-a806-285d61b12c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:26:71:71:0b:ae:a0:d8:d2:99:f3:70:0a: 0e:ad:9d:40:ea:6c:b0:a7:3b:9b:9b:dd:20:4e:d2: ba:df:d8:39:f0:c7:bd:3c:57:d9:14:66:32:92:55: 08:b1:4d:79:ad:53:9c:bd:a9:eb:bf:bf:68:08:15: db:93:6e:20:60:ed:35:fd:9e:4a:87:46:cc:05:b3: a8:4e:56:35:5a:6c:e2:0f:00:15:d0:99:19:75:75: 20:3c:f9:4b:5f:16:05:1b:23:84:a9:b3:3d:4e:77: 83:65:e5:60:91:56:aa:55:75:43:c0:a3:f0:bf:06: 9c:9f:16:bb:3f:0b:b6:48:c5:c0:cc:66:95:81:2e: 55:df:7d:6f:86:3d:7a:af:ff:f7:e5:01:56:69:9b: d5:18:57:c0:64:cd:f1:33:a1:d0:9d:0f:b0:7e:c7: 8c:1a:37:b2:12:95:b8:ce:51:01:7a:e2:00:05:12: 92:eb:cb:0a:7a:6a:74:63:de:02:00:f8:a0:3b:8d: 4e:dc:f7:9e:07:77:6b:9f:14:28:9d:04:1b:b9:fc: 5a:8c:e1:ee:f1:c2:83:32:b4:54:f3:55:b5:ed:d3: 47:b9:81:2c:5d:53:e1:4a:fd:77:fc:82:c9:bd:79: 1d:59:19:f1:b7:22:4d:69:eb:f4:d0:ba:05:7b:76: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D5:4B:1C:50:EB:3C:1B:24:69:E6:03:23:EC:5C:E2:21:06:48:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/01c04108-2084-3163-a90d-4fc763d9b1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7a:0a:fd:08:0f:43:c0:2d:d4:fc:d7:1e:82:1d:08:b3:af: e2:75:c3:65:27:1d:de:6f:a6:77:28:11:88:e8:04:38:d1:19: ee:ba:cf:d8:b8:a1:26:c6:f8:eb:73:f3:aa:c9:9d:6a:cf:f8: b9:a2:4d:2b:89:5c:4d:5d:5a:42:60:ca:f3:04:b1:18:fc:29: 82:4a:c7:f8:5d:ec:b8:d6:2e:e5:32:1f:07:fa:21:31:e7:80: f7:43:34:6c:53:74:5c:ec:b2:b2:b4:25:e0:a1:7c:82:ba:05: 5f:4f:6c:08:ae:22:62:75:59:8d:f5:04:12:58:eb:62:ae:e6: 5b:a1:de:27:4b:c0:5a:3f:51:fc:0e:63:2c:9f:df:51:a5:76: 8f:44:46:9f:c9:aa:62:6d:08:9c:fb:4c:93:27:87:3b:b2:c0: 83:41:56:e5:29:54:47:b3:cc:37:54:f1:50:7a:27:81:66:1f: d6:7a:b6:07:d3:75:d4:dc:6a:44:b8:fe:f0:43:93:f7:36:de: ae:e4:52:4c:ae:c4:a1:b4:77:c2:07:b7:a7:eb:06:82:93:21: 93:be:ac:3d:fa:02:9c:c8:cb:76:65:5c:60:cb:7c:e8:6b:63: e1:5d:dc:11:5f:13:72:e9:93:a8:5a:6e:98:16:b1:10:a1:88: 2f:a0:3b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr3699KMniSs3fP7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MDcwZThiZGQtNDEyMi00OGUxLWE4MDYtMjg1ZDYxYjEyYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuAmcXELrqDY0pnzcAoOrZ1A6mywpzubm90g TtK639g58Me9PFfZFGYyklUIsU15rVOcvanrv79oCBXbk24gYO01/Z5Kh0bMBbOo TlY1WmziDwAV0JkZdXUgPPlLXxYFGyOEqbM9TneDZeVgkVaqVXVDwKPwvwacnxa7 Pwu2SMXAzGaVgS5V331vhj16r//35QFWaZvVGFfAZM3xM6HQnQ+wfseMGjeyEpW4 zlEBeuIABRKS68sKemp0Y94CAPigO41O3PeeB3drnxQonQQbufxajOHu8cKDMrRU 81W17dNHuYEsXVPhSv13/ILJvXkdWRnxtyJNaev00LoFe3bysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7VSxxQ6zwbJGnmAyPsXOIhBkhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDFjMDQxMDgtMjA4NC0z MTYzLWE5MGQtNGZjNzYzZDliMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl6Cv0ID0PALdT81x6CHQizr+J1w2UnHd5vpncoEYjoBDjRGe66z9i4 oSbG+Otz86rJnWrP+LmiTSuJXE1dWkJgyvMEsRj8KYJKx/hd7LjWLuUyHwf6ITHn gPdDNGxTdFzssrK0JeChfIK6BV9PbAiuImJ1WY31BBJY62Ku5luh3idLwFo/UfwO Yyyf31Gldo9ERp/JqmJtCJz7TJMnhzuywINBVuUpVEezzDdU8VB6J4FmH9Z6tgfT ddTcakS4/vBDk/c23q7kUkyuxKG0d8IHt6frBoKTIZO+rD36ApzIy3ZlXGDLfOhr Y+Fd3BFfE3Lpk6habpgWsRChiC+gO+U= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:04 2025 by rpki-client