$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa File: 28e01cf7-f5be-34ef-9dfc-3719434f963a.roa (raw, json) Hash identifier: Yq8iO5PbIAXYyjwgHc21cz0QvNHz+tZCH3lFBeCElbM= Subject key identifier: AF:25:F2:D7:59:BF:57:6F:93:D7:7B:7C:9E:6F:A8:14:3B:C9:6E:C0 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBDF37C54DEAFACBA7D000 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 207.211.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:37:c5:4d:ea:fa:cb:a7:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=ee1b4f7d-35ed-4d20-8114-bcc47dfc204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:9c:b2:95:9f:60:27:2e:b5:62:48:55:60: da:fd:6e:b4:ea:35:60:69:93:23:a3:70:5a:47:96: fd:9c:16:97:4f:6a:2b:c2:af:c7:63:08:71:c2:03: c2:eb:2c:45:35:76:73:27:88:75:a7:00:0e:28:da: 53:1b:88:11:fa:c9:d2:9c:3d:66:61:e2:60:06:c5: e7:c3:97:de:e1:c7:01:eb:fd:68:28:19:c5:61:5a: 41:01:15:12:87:e3:37:48:af:49:96:bd:71:6e:59: 94:73:8f:3c:b6:0d:c2:18:75:b3:d6:ae:5b:c0:f8: 22:32:e3:2d:c1:90:bb:f6:03:2c:6b:7d:a1:4c:46: d2:99:44:82:9b:a7:47:fb:43:89:f6:58:42:85:6a: 05:a6:e4:11:dc:70:88:d3:53:56:4c:8c:ea:2c:b9: 6f:d9:c9:af:81:4d:42:2b:9b:27:c9:21:96:fe:84: 06:64:b6:6f:fb:a5:d3:50:d3:b7:70:be:04:3e:59: e8:be:03:38:ed:ea:3a:88:23:48:9d:ef:d6:e9:07: d7:de:83:a3:86:aa:72:a6:7e:f9:fb:9c:3c:3e:21: 88:0d:12:a3:32:bb:f7:f9:8a:43:32:45:a4:12:9c: 05:29:ce:5e:1e:7d:54:b1:5c:a7:3c:9e:01:74:af: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:25:F2:D7:59:BF:57:6F:93:D7:7B:7C:9E:6F:A8:14:3B:C9:6E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:84:ed:fa:c6:a4:2c:c5:53:32:07:86:78:0e:29:e1:04:28: e9:19:45:c6:e6:34:7b:f4:b6:cc:04:00:7d:aa:55:10:ee:1c: f1:b9:7f:98:d2:97:ac:f5:fa:8e:62:8d:66:cb:5b:95:0d:ab: c2:99:dc:43:5f:48:4c:d9:32:b7:a6:f0:7e:03:3e:43:f2:de: e3:7b:57:3f:d4:a7:b8:d3:c3:17:af:87:35:9a:7e:a0:7c:52: 33:55:21:93:a5:79:e2:47:4e:f9:64:90:5d:76:10:34:18:d8: b2:4a:91:dd:80:dd:37:0f:96:2d:eb:22:62:12:21:9b:8f:26: 6f:aa:37:21:32:8d:d5:d7:39:68:19:9d:34:67:55:dc:28:22: cb:bc:0d:d6:e2:2d:8d:73:a0:b4:49:25:ee:8a:3e:14:ce:94: 2e:78:12:29:a0:73:6f:7a:38:8f:04:39:cf:76:c9:66:df:b2: ca:7c:b7:8f:2c:c2:cc:c6:a0:c0:26:cc:d0:07:1c:0d:3c:5d: a2:5e:bd:44:b6:e9:58:15:6c:62:42:d1:f7:4f:c1:f8:b9:1f: 5e:d0:fb:6d:86:f9:89:37:00:8f:74:ad:65:ce:c4:a3:cf:f1: 56:08:2e:8b:e3:fa:a7:9b:e9:d0:fd:93:91:90:fb:72:4f:e6: 4b:af:03:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36983xU3q+sun0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZWUxYjRmN2QtMzVlZC00ZDIwLTgxMTQtYmNjNDdkZmMyMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ycspWfYCcutWJIVWDa/W606jVgaZMjo3Ba R5b9nBaXT2orwq/HYwhxwgPC6yxFNXZzJ4h1pwAOKNpTG4gR+snSnD1mYeJgBsXn w5fe4ccB6/1oKBnFYVpBARUSh+M3SK9Jlr1xblmUc488tg3CGHWz1q5bwPgiMuMt wZC79gMsa32hTEbSmUSCm6dH+0OJ9lhChWoFpuQR3HCI01NWTIzqLLlv2cmvgU1C K5snySGW/oQGZLZv+6XTUNO3cL4EPlnovgM47eo6iCNIne/W6QfX3oOjhqpypn75 +5w8PiGIDRKjMrv3+YpDMkWkEpwFKc5eHn1UsVynPJ4BdK/3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8l8tdZv1dvk9d7fJ5vqBQ7yW7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjhlMDFjZjctZjViZS0z NGVmLTlkZmMtMzcxOTQzNGY5NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWE7frGpCzFUzIHhngOKeEEKOkZRcbmNHv0tswEAH2qVRDuHPG5f5jS l6z1+o5ijWbLW5UNq8KZ3ENfSEzZMrem8H4DPkPy3uN7Vz/Up7jTwxevhzWafqB8 UjNVIZOleeJHTvlkkF12EDQY2LJKkd2A3TcPli3rImISIZuPJm+qNyEyjdXXOWgZ nTRnVdwoIsu8DdbiLY1zoLRJJe6KPhTOlC54Eimgc296OI8EOc92yWbfssp8t48s wszGoMAmzNAHHA08XaJevUS26VgVbGJC0fdPwfi5H17Q+22G+Yk3AI90rWXOxKPP 8VYILovj+qeb6dD9k5GQ+3JP5kuvA30= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:57 2025 by rpki-client