$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa File: 57396bbc-4a2e-3445-940b-13e66d6ac953.roa (raw, json) Hash identifier: Bk1lh2jIPsBAYfA9i6sVpM/n9NyU1SAgRfBXnFwM/kE= Subject key identifier: 50:32:A3:B9:11:3D:91:39:BF:91:EF:DE:8F:88:5C:89:36:E3:EE:3A Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584B3C51B558B63B5132AB9B1800 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 398210 IP address blocks: 207.211.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b5:58:b6:3b:51:32:ab:9b:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=2456bb41-dc67-4862-a01d-7741b7be0ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:d8:cd:a0:be:04:4b:b1:bc:01:eb:d4:36: f7:2e:05:0f:d5:a4:b7:f5:52:12:39:db:38:7f:ee: 8e:6d:30:7b:f5:41:e4:8b:08:1f:44:ca:74:39:7b: 30:e9:ae:27:b8:1d:18:13:db:35:52:f9:86:c0:06: 10:91:23:5c:8c:55:ee:04:71:1a:ec:bc:95:f4:73: e1:da:0d:28:06:c0:ca:50:ec:cc:4c:c6:e5:0f:41: 94:4c:d9:55:7a:29:5d:10:88:de:4a:96:dd:97:f7: 77:0b:34:f6:f7:db:9d:e5:2a:c9:fc:df:76:ca:34: 74:cc:a4:90:d4:20:11:77:f5:0f:c6:f5:83:28:21: 85:00:25:f1:1a:ac:6b:38:24:07:a3:16:7f:3f:a0: c7:a2:0d:d2:10:cd:97:f7:9f:69:f0:6c:61:26:6c: db:5e:a2:ab:52:1c:6d:89:cd:cd:09:8b:32:47:75: f1:76:96:84:9c:be:2a:52:bb:5a:ea:29:8c:59:4d: 4a:35:dd:2f:f8:43:4a:cb:4d:8c:ef:80:29:c7:3c: f3:53:67:68:5f:b0:e9:d6:2b:04:91:29:0b:d1:2a: e3:1e:56:17:3b:1d:bf:0f:d0:22:cd:13:b2:a2:85: a4:1a:58:c8:95:67:bb:7b:35:1d:d2:e9:61:3f:41: 6f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:A3:B9:11:3D:91:39:BF:91:EF:DE:8F:88:5C:89:36:E3:EE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c2:48:23:8b:b1:61:db:9d:74:a3:8f:5a:c8:4b:83:e7:0d: 6b:cf:21:c6:06:54:6c:1f:aa:d5:9e:2b:00:b8:c0:4e:c1:03: fc:d7:69:02:25:f5:25:aa:f0:6b:ea:74:5f:4c:12:58:68:79: 99:e9:f8:8e:6f:1f:8d:b8:4d:8c:39:6c:31:7a:95:5f:c4:cf: 0d:f0:df:cd:e6:09:cb:90:7a:08:cd:4a:b7:a4:b6:b0:78:f6: a8:02:0e:5a:61:c4:7c:54:cf:b9:09:8f:d8:3a:db:bf:8f:d8: 3b:bb:26:42:be:23:f2:ce:32:59:63:05:95:58:2b:fc:2b:ca: 0e:b4:c5:73:67:8c:91:ed:25:26:f1:86:ec:96:62:d2:65:c6: a9:f2:7e:78:92:81:05:d6:c3:83:fe:53:6d:cf:0b:81:9b:4e: b3:fb:be:3c:33:8c:bb:8a:44:d6:43:45:e5:19:e4:f3:88:67: 05:e0:5a:64:70:ba:4f:62:8c:ff:a2:cd:50:2a:1a:45:f5:fc: 39:bc:fc:63:17:e9:3f:60:1b:76:83:a1:40:2c:f4:ec:d6:56: 97:99:3f:e3:99:dc:8c:4e:b2:cd:9b:89:44:4e:a0:0d:1b:49: 10:a8:c6:b3:df:5e:09:e8:35:46:24:7e:fb:7c:2c:93:8b:cf: 8a:0d:ee:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbVYtjtRMqubGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MjQ1NmJiNDEtZGM2Ny00ODYyLWEwMWQtNzc0MWI3YmUwY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowXYzaC+BEuxvAHr1Db3LgUP1aS39VISOds4 f+6ObTB79UHkiwgfRMp0OXsw6a4nuB0YE9s1UvmGwAYQkSNcjFXuBHEa7LyV9HPh 2g0oBsDKUOzMTMblD0GUTNlVeildEIjeSpbdl/d3CzT299ud5SrJ/N92yjR0zKSQ 1CARd/UPxvWDKCGFACXxGqxrOCQHoxZ/P6DHog3SEM2X959p8GxhJmzbXqKrUhxt ic3NCYsyR3XxdpaEnL4qUrta6imMWU1KNd0v+ENKy02M74ApxzzzU2doX7Dp1isE kSkL0SrjHlYXOx2/D9AizROyooWkGljIlWe7ezUd0ulhP0FvvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAyo7kRPZE5v5Hv3o+IXIk24+46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTczOTZiYmMtNGEyZS0z NDQ1LTk0MGItMTNlNjZkNmFjOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrCSCOLsWHbnXSjj1rIS4PnDWvPIcYGVGwfqtWeKwC4wE7BA/zXaQIl 9SWq8GvqdF9MElhoeZnp+I5vH424TYw5bDF6lV/Ezw3w383mCcuQegjNSrektrB4 9qgCDlphxHxUz7kJj9g627+P2Du7JkK+I/LOMlljBZVYK/wryg60xXNnjJHtJSbx huyWYtJlxqnyfniSgQXWw4P+U23PC4GbTrP7vjwzjLuKRNZDReUZ5POIZwXgWmRw uk9ijP+izVAqGkX1/Dm8/GMX6T9gG3aDoUAs9OzWVpeZP+OZ3IxOss2biUROoA0b SRCoxrPfXgnoNUYkfvt8LJOLz4oN7q8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:31 2025 by rpki-client