$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json) Hash identifier: 6WyTDXJrbU68XyoNVhTa0vbRfVCXSf5nUNQFSXid23A= Subject key identifier: 80:2A:98:FA:B6:FD:1B:03:BF:FB:5C:B0:93:03:F7:C9:70:BF:98:97 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBDF0AC169C6C91166A640 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 207.211.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:0a:c1:69:c6:c9:11:66:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=fb297722-e2d4-4c2e-a01f-49b424664cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:cc:90:47:29:95:62:18:fc:cc:f7:79:2b: a7:6e:c5:06:c7:2f:42:85:05:c1:f7:13:84:8a:cc: 6e:14:9b:92:2a:fa:50:b7:f1:e4:da:71:99:65:77: 6b:97:37:54:a8:3e:11:52:0a:ba:f2:d8:6e:3b:55: e0:fb:45:bf:d8:72:ef:25:52:6a:d0:df:eb:51:1c: 8f:82:67:9c:ac:69:68:4c:5f:38:4b:99:ca:cf:73: c7:f0:e9:59:90:16:4d:18:19:74:fc:cd:28:28:d0: 57:86:77:1d:73:8d:9a:16:95:6f:20:fb:d8:cf:1e: 83:cf:0e:37:1d:6a:f3:02:39:8b:77:9a:4f:09:30: c5:fe:30:27:5d:b5:db:7e:d4:7e:51:8c:5a:5a:cf: a3:da:51:7b:b7:cd:32:f0:c6:17:36:ea:87:27:9a: 7c:f6:e6:7a:df:76:0d:45:93:18:78:5b:33:38:5f: d5:8b:f7:25:4e:cd:5f:90:bc:18:5e:aa:5d:11:7a: f1:bf:40:f0:91:fe:05:97:6a:0e:3c:75:f9:97:81: 7c:97:1e:04:1f:b5:83:16:38:08:a7:e3:b7:39:af: 85:56:13:a3:04:b5:6d:21:36:35:cf:bd:6a:31:a5: f4:3f:45:23:3d:5e:35:3b:11:59:cf:22:8d:16:0f: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2A:98:FA:B6:FD:1B:03:BF:FB:5C:B0:93:03:F7:C9:70:BF:98:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a5:96:85:2e:f8:b4:e1:7f:95:3f:a9:a5:e1:d6:3e:62:30: f1:d4:dc:7f:4d:6d:f5:3c:62:93:a6:33:7f:ff:6b:7e:db:5c: ad:b2:9a:61:4a:f3:46:01:4e:7b:a8:f6:c4:29:ac:4b:9e:f6: 47:d5:be:b3:85:6d:c5:17:f0:15:1b:13:98:ea:9a:90:6c:29: 2d:76:cf:6d:f7:63:0c:54:24:7e:67:13:99:2b:0b:5d:a5:2b: 68:1d:b1:4d:6b:48:53:84:73:01:a9:cd:fd:8b:7a:12:9d:5e: 48:0a:df:ec:c7:4b:bf:f7:f6:d1:57:f8:86:43:91:e3:2e:a7: c9:6f:3a:a5:bc:7b:fd:9b:71:2d:66:aa:03:bc:3f:fb:1d:8c: b2:54:5c:c6:d8:5e:66:c0:86:70:d2:d9:12:d6:e4:5f:97:3f: e2:4a:01:89:89:a1:ff:6b:ac:17:97:72:6e:cb:e3:8e:48:08: 4a:19:01:f0:70:1f:f5:6d:45:05:5e:18:bf:55:68:fc:4b:ee: db:58:08:98:bc:51:4e:c6:7a:84:4f:ec:47:d2:f3:20:51:84: 6f:67:2e:ef:5b:41:1c:54:92:eb:5e:c0:78:a5:ff:a1:87:d8: ed:e7:54:1e:d0:40:f6:48:48:f1:d4:be:b5:bf:3e:bb:88:1f: ab:38:ad:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr3698KwWnGyRFmpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZmIyOTc3MjItZTJkNC00YzJlLWEwMWYtNDliNDI0NjY0Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrjMkEcplWIY/Mz3eSunbsUGxy9ChQXB9xOE isxuFJuSKvpQt/Hk2nGZZXdrlzdUqD4RUgq68thuO1Xg+0W/2HLvJVJq0N/rURyP gmecrGloTF84S5nKz3PH8OlZkBZNGBl0/M0oKNBXhncdc42aFpVvIPvYzx6Dzw43 HWrzAjmLd5pPCTDF/jAnXbXbftR+UYxaWs+j2lF7t80y8MYXNuqHJ5p89uZ633YN RZMYeFszOF/Vi/clTs1fkLwYXqpdEXrxv0Dwkf4Fl2oOPHX5l4F8lx4EH7WDFjgI p+O3Oa+FVhOjBLVtITY1z71qMaX0P0UjPV41OxFZzyKNFg+NlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAqmPq2/RsDv/tcsJMD98lwv5iXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTAyZGEyOTItMDhhOC0z Yjc1LWJjNGItOGQzOTBlNWZlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIilloUu+LThf5U/qaXh1j5iMPHU3H9NbfU8YpOmM3//a37bXK2ymmFK 80YBTnuo9sQprEue9kfVvrOFbcUX8BUbE5jqmpBsKS12z233YwxUJH5nE5krC12l K2gdsU1rSFOEcwGpzf2LehKdXkgK3+zHS7/39tFX+IZDkeMup8lvOqW8e/2bcS1m qgO8P/sdjLJUXMbYXmbAhnDS2RLW5F+XP+JKAYmJof9rrBeXcm7L445ICEoZAfBw H/VtRQVeGL9VaPxL7ttYCJi8UU7GeoRP7EfS8yBRhG9nLu9bQRxUkutewHil/6GH 2O3nVB7QQPZISPHUvrW/PruIH6s4rZY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:17 2025 by rpki-client