$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa File: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (raw, json) Hash identifier: u+qB8WofM1TOsKdSPPA6h0AlNA5U2eIcb+jeH+HnDRk= Subject key identifier: 26:31:ED:64:ED:B7:FE:46:C3:D0:F7:30:F9:87:07:C4:00:73:37:99 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBDF20FC6657104126E680 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 207.211.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:df:20:fc:66:57:10:41:26:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=e12b9959-b237-45d8-a95c-2e7fa203f8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:ee:a0:d9:43:f2:45:29:38:38:45:12:70: 1a:8d:d3:9c:bd:ba:6b:25:2b:98:91:0b:95:7b:29: 41:99:99:9d:f7:2c:af:4b:72:fd:9e:a2:70:70:22: a9:c0:37:af:1a:97:ee:fd:da:be:08:35:17:ab:ba: 55:9c:18:b3:c3:ae:d5:07:c5:24:ea:8c:eb:f6:a1: 64:01:98:ae:e1:26:05:46:b1:39:e3:ee:45:cf:f4: 11:6e:d5:83:7a:1c:98:88:f0:55:82:ff:9f:45:8b: 3f:77:bb:6b:49:aa:34:0f:2d:30:9a:b6:ff:09:ad: 8c:68:c1:3e:de:65:98:5e:37:fa:b4:56:c2:c4:fa: 2b:4c:96:2e:f3:7e:ce:a3:1e:6d:1e:9d:37:61:49: 17:d9:2e:59:6d:de:25:c6:a3:59:b6:3b:7a:9b:36: de:8a:a1:7f:66:63:9c:34:c3:51:0a:1e:44:be:c7: 47:20:bb:83:2f:bc:0f:65:2b:7e:c3:fc:18:07:d1: eb:c0:91:eb:6a:c8:60:2c:66:dc:1b:1d:76:3c:16: c4:2d:a3:8a:cd:b5:2e:cd:d3:75:c2:74:16:c8:1a: 56:00:81:24:7c:70:ea:f5:6d:a2:71:28:9e:76:78: 22:74:ee:bc:02:6c:73:51:ca:3b:79:d8:c9:0f:c3: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:31:ED:64:ED:B7:FE:46:C3:D0:F7:30:F9:87:07:C4:00:73:37:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2c:32:33:4a:71:c9:d2:6e:e5:df:0b:79:cb:03:7c:c4:d6: f3:e6:3e:a9:e6:dd:c2:1f:b4:e0:73:a9:08:78:38:0d:9c:0a: 94:4d:3e:6f:c2:79:f7:8c:c6:b2:09:b1:62:ef:ac:01:ee:66: 53:1b:2c:e1:61:52:78:e0:99:f2:0b:ed:bd:89:df:43:1e:98: e4:c7:11:6c:8b:1d:17:ad:ef:20:1b:4d:ad:9e:4a:8e:76:19: 0a:94:a4:d8:df:23:4f:ae:89:1a:94:67:8e:91:de:e4:fd:c5: ec:f1:72:1e:82:91:da:42:be:5f:38:7c:50:44:90:7a:2b:1b: 9e:6c:d8:14:31:51:e5:41:f3:62:92:93:e8:c5:f0:54:5e:40: 60:cc:f1:65:3e:64:ec:d4:96:3c:ec:88:16:03:d9:0b:59:1d: ca:94:a0:5a:f7:88:7f:56:e0:83:31:9d:75:61:b7:d3:b5:25: e7:09:dc:8f:a0:bc:35:30:b3:17:6b:e7:75:48:a6:5b:31:6d: 87:54:a8:20:f1:10:e0:ae:d5:cd:d1:55:7d:29:80:d0:92:fa: c9:54:9e:7d:f9:00:9f:ae:b8:f8:f3:05:a1:9d:18:40:46:6a: 8d:b6:3d:2f:66:21:ae:ff:ae:9b:75:e7:86:17:37:d1:34:73: a1:b1:49:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr3698g/GZXEEEm5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTEyYjk5NTktYjIzNy00NWQ4LWE5NWMtMmU3ZmEyMDNmOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvPuoNlD8kUpODhFEnAajdOcvbprJSuYkQuV eylBmZmd9yyvS3L9nqJwcCKpwDevGpfu/dq+CDUXq7pVnBizw67VB8Uk6ozr9qFk AZiu4SYFRrE54+5Fz/QRbtWDehyYiPBVgv+fRYs/d7trSao0Dy0wmrb/Ca2MaME+ 3mWYXjf6tFbCxPorTJYu837Oox5tHp03YUkX2S5Zbd4lxqNZtjt6mzbeiqF/ZmOc NMNRCh5EvsdHILuDL7wPZSt+w/wYB9HrwJHrashgLGbcGx12PBbELaOKzbUuzdN1 wnQWyBpWAIEkfHDq9W2icSiedngidO68AmxzUco7edjJD8MH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYx7WTtt/5Gw9D3MPmHB8QAczeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYjliNDFlYmQtODQwOC0z NzNjLTlmOGEtNzExNWZlYmJkMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0sMjNKccnSbuXfC3nLA3zE1vPmPqnm3cIftOBzqQh4OA2cCpRNPm/C efeMxrIJsWLvrAHuZlMbLOFhUnjgmfIL7b2J30MemOTHEWyLHRet7yAbTa2eSo52 GQqUpNjfI0+uiRqUZ46R3uT9xezxch6CkdpCvl84fFBEkHorG55s2BQxUeVB82KS k+jF8FReQGDM8WU+ZOzUljzsiBYD2QtZHcqUoFr3iH9W4IMxnXVht9O1JecJ3I+g vDUwsxdr53VIplsxbYdUqCDxEOCu1c3RVX0pgNCS+slUnn35AJ+uuPjzBaGdGEBG ao22PS9mIa7/rpt154YXN9E0c6GxSY4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:50 2025 by rpki-client