$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa File: 57396bbc-4a2e-3445-940b-13e66d6ac953.roa (raw, json) Hash identifier: KCXzlReM+YKbWpiV8UhIgycGh28j20zz43O6Vwb/z30= Subject key identifier: 4B:FD:C0:2D:47:40:76:D4:D6:76:D1:B9:AB:76:3D:E9:CF:FF:4A:F2 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F4989617BDAB18C7EB87A4D80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398210 IP address blocks: 207.211.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:61:7b:da:b1:8c:7e:b8:7a:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c414c588-a55a-469e-be87-0d438825a81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:c6:d8:1d:7b:5a:21:42:01:4d:d0:3b:57: 8b:43:c5:64:e2:31:4e:2c:ab:69:00:37:8a:13:8d: 3a:f7:2e:e6:c1:0f:51:51:29:05:1b:a9:20:64:0f: 16:11:02:23:e9:eb:e3:68:a8:85:05:09:b1:9f:5d: ad:9a:4d:86:43:e5:52:47:b5:4a:a8:86:e9:0d:9e: 98:b3:b8:e0:e5:13:f0:00:e1:71:4e:bd:6b:a3:1b: a4:97:41:48:9b:9e:91:cf:2e:e1:cf:63:f1:eb:a1: ec:67:56:8d:30:38:bd:19:05:28:1c:b4:df:49:ac: de:6d:d9:ce:66:24:f5:f0:0b:2c:9d:31:33:d0:ca: 26:ac:7c:2b:ba:7c:ef:73:d5:d8:77:35:ed:34:b9: 29:bd:5c:66:11:5f:a3:cc:e4:18:5c:87:04:f5:09: a8:1f:9d:0c:98:ea:2d:ff:5e:67:94:17:8e:a2:aa: 5d:12:e6:6f:0c:3b:7b:32:c7:4f:35:58:cf:a3:fb: dc:d0:3b:b2:fd:15:16:4c:19:57:ea:2c:81:39:cc: b4:cc:9c:b6:cb:be:a1:56:db:ea:fe:58:5f:75:62: ee:84:92:d9:01:46:11:51:d3:5f:2b:a9:2b:62:c7: 77:f5:97:02:77:ec:aa:e3:2d:ea:c8:3c:15:ab:f9: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FD:C0:2D:47:40:76:D4:D6:76:D1:B9:AB:76:3D:E9:CF:FF:4A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:65:1f:b4:5b:0b:82:ce:e5:a1:49:4e:bd:6b:03:e5:a6:e2: 68:7b:0e:3c:8e:15:c8:f4:d6:ef:6f:21:dc:5d:49:96:8c:18: 1f:d4:e0:18:ba:13:73:e4:d6:59:f3:36:b0:4e:af:87:41:0c: 81:f1:eb:19:b5:c9:80:dd:dd:53:c7:a6:6d:89:87:67:eb:9c: 1a:49:f0:f0:53:47:cf:8e:cb:2b:1d:4e:33:b5:c5:58:f1:e8: ed:43:54:28:fe:c3:2d:51:3d:7b:62:c2:6c:d9:ef:9f:8d:39: 79:ec:ad:a2:a3:49:d9:40:a9:e7:6e:3a:89:50:9e:96:fb:31: 02:ae:e4:10:6a:d8:b8:19:ea:c8:24:2c:0f:eb:dc:26:28:41: af:6d:0a:78:fe:67:57:a1:c3:06:77:e6:26:ad:50:d7:50:82: f8:f6:d0:b5:ae:86:bb:49:f7:fd:39:b2:25:d4:87:b2:cf:f6: ad:fd:3a:55:09:a9:cf:26:52:2e:1f:af:fa:4a:7f:36:0d:13: aa:57:b4:17:51:20:80:0b:87:34:43:39:56:e6:cf:26:e9:a4: e5:30:d2:0b:43:67:64:68:ce:24:ba:8b:e3:20:bc:49:e2:4d: 1d:71:a5:37:da:77:52:77:e7:02:53:bf:2d:64:8f:b3:f6:8b: 00:be:41:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiWF72rGMfrh6TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzQxNGM1ODgtYTU1YS00NjllLWJlODctMGQ0Mzg4MjVhODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoenG2B17WiFCAU3QO1eLQ8Vk4jFOLKtpADeK E4069y7mwQ9RUSkFG6kgZA8WEQIj6evjaKiFBQmxn12tmk2GQ+VSR7VKqIbpDZ6Y s7jg5RPwAOFxTr1roxukl0FIm56Rzy7hz2Px66HsZ1aNMDi9GQUoHLTfSazebdnO ZiT18AssnTEz0MomrHwrunzvc9XYdzXtNLkpvVxmEV+jzOQYXIcE9QmoH50MmOot /15nlBeOoqpdEuZvDDt7MsdPNVjPo/vc0Duy/RUWTBlX6iyBOcy0zJy2y76hVtvq /lhfdWLuhJLZAUYRUdNfK6krYsd39ZcCd+yq4y3qyDwVq/no9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv9wC1HQHbU1nbRuat2PenP/0ryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTczOTZiYmMtNGEyZS0z NDQ1LTk0MGItMTNlNjZkNmFjOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdlH7RbC4LO5aFJTr1rA+Wm4mh7DjyOFcj01u9vIdxdSZaMGB/U4Bi6 E3Pk1lnzNrBOr4dBDIHx6xm1yYDd3VPHpm2Jh2frnBpJ8PBTR8+OyysdTjO1xVjx 6O1DVCj+wy1RPXtiwmzZ75+NOXnsraKjSdlAqeduOolQnpb7MQKu5BBq2LgZ6sgk LA/r3CYoQa9tCnj+Z1ehwwZ35iatUNdQgvj20LWuhrtJ9/05siXUh7LP9q39OlUJ qc8mUi4fr/pKfzYNE6pXtBdRIIALhzRDOVbmzybppOUw0gtDZ2RoziS6i+MgvEni TR1xpTfad1J35wJTvy1kj7P2iwC+Qb8= -----END CERTIFICATE-----Generated at Wed Sep 30 11:03:58 2026 by rpki-client