$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa File: bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa (raw, json) Hash identifier: 0cpGjtTNWwiNXy25JuzqiLgti8Sst9te+RGbVszry8M= Subject key identifier: 11:01:1F:61:CC:1B:AA:2F:57:F6:08:BE:82:01:9A:C0:CA:38:40:70 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F49733A7894AC37B15FDCD190 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398210 IP address blocks: 207.211.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3a:78:94:ac:37:b1:5f:dc:d1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=764aa0a5-a6de-403f-9f71-07e532bda461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d2:66:78:ca:d1:5f:2f:b2:ab:08:4c:c3:c6: 78:e2:ed:2c:34:64:96:a6:d4:c0:77:33:d4:72:89: 09:1a:67:31:19:ef:41:b1:01:8e:9d:f5:7b:92:96: 0d:65:4f:ad:3a:89:58:ea:29:4d:1b:c4:94:64:c2: 21:5b:26:c1:b2:9f:7c:32:e7:7f:14:02:75:2f:dd: 5a:b3:4b:ed:de:d5:cc:32:e5:8f:32:94:f4:82:1c: a0:cb:33:40:1a:d1:39:59:4f:7f:bf:15:55:7d:46: 01:f9:fb:14:7a:df:98:f2:cd:37:b9:9a:3d:8e:a6: 96:96:b6:ff:3f:77:42:85:70:ed:10:08:95:8e:05: f7:97:2d:4c:cc:6c:b3:f2:b6:98:04:8a:c9:3b:50: 8f:e0:08:0e:0d:a5:d9:0c:13:c3:cb:61:84:f5:b6: 64:32:82:78:8f:14:f8:70:7d:f1:e8:44:51:85:84: 41:81:40:e8:cb:f7:bc:2c:3a:57:1b:58:52:18:07: 8f:fc:de:c9:3a:92:c0:31:54:b8:47:19:70:01:77: c8:6e:43:8e:38:80:97:60:7a:30:91:36:9e:31:b9: db:84:c5:19:c1:40:d5:7c:f0:b1:81:c5:6c:04:94: 60:b7:35:42:a4:05:98:9d:59:b5:be:a8:a3:3b:8e: 18:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:01:1F:61:CC:1B:AA:2F:57:F6:08:BE:82:01:9A:C0:CA:38:40:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fa:51:bf:7d:b2:65:f3:da:a9:93:f7:53:ce:46:ef:ce:98: 38:92:31:05:6e:27:ca:d9:18:fc:2f:13:20:00:80:6d:f9:ba: 2c:9b:dd:1e:b9:86:0b:a0:d2:35:6e:2b:5f:c2:c9:41:11:3c: 86:a7:b8:90:af:ad:7c:9f:29:d2:e1:8d:34:af:f1:74:15:c2: 24:03:ab:85:4d:aa:bc:f2:55:e6:96:89:ca:d9:a8:2b:c1:61: f8:fb:08:37:61:68:11:48:8a:d4:84:e1:7a:a2:5f:2a:81:48: 5b:ac:78:0d:51:19:34:11:3c:d6:ed:5a:f3:6c:03:61:6a:71: f3:9a:78:ea:e2:bf:23:62:a6:a7:e5:77:7e:54:8b:f1:6a:3d: ff:34:87:5a:56:cd:39:15:f6:7e:02:75:22:e6:e5:53:fa:4d: 81:3e:1e:36:60:ff:f5:c1:5b:d8:45:cc:fc:81:17:dc:98:8f: 3b:65:dd:10:cb:e9:92:ea:d3:6a:c1:94:d0:cc:3f:df:db:ef: 16:2e:89:6f:a4:48:f1:4d:7c:f6:bd:5d:1f:89:0b:04:6c:75: 2d:09:55:99:ea:4c:c0:94:a0:fc:fe:8d:6d:4a:4f:30:95:56: 87:e3:d6:71:e6:0f:ea:f3:e3:87:93:f9:a6:ec:b9:ff:db:e6: 54:05:f6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jczp4lKw3sV/c0ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzY0YWEwYTUtYTZkZS00MDNmLTlmNzEtMDdlNTMyYmRhNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NJmeMrRXy+yqwhMw8Z44u0sNGSWptTAdzPU cokJGmcxGe9BsQGOnfV7kpYNZU+tOolY6ilNG8SUZMIhWybBsp98Mud/FAJ1L91a s0vt3tXMMuWPMpT0ghygyzNAGtE5WU9/vxVVfUYB+fsUet+Y8s03uZo9jqaWlrb/ P3dChXDtEAiVjgX3ly1MzGyz8raYBIrJO1CP4AgODaXZDBPDy2GE9bZkMoJ4jxT4 cH3x6ERRhYRBgUDoy/e8LDpXG1hSGAeP/N7JOpLAMVS4RxlwAXfIbkOOOICXYHow kTaeMbnbhMUZwUDVfPCxgcVsBJRgtzVCpAWYnVm1vqijO44YVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEBH2HMG6ovV/YIvoIBmsDKOEBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRkMDhlNTMtOGZlNC0z ZWQ1LWI3ZTEtNTViMGFlNTI3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj6Ub99smXz2qmT91PORu/OmDiSMQVuJ8rZGPwvEyAAgG35uiyb3R65 hgug0jVuK1/CyUERPIanuJCvrXyfKdLhjTSv8XQVwiQDq4VNqrzyVeaWicrZqCvB Yfj7CDdhaBFIitSE4XqiXyqBSFuseA1RGTQRPNbtWvNsA2FqcfOaeOrivyNipqfl d35Ui/FqPf80h1pWzTkV9n4CdSLm5VP6TYE+HjZg//XBW9hFzPyBF9yYjztl3RDL 6ZLq02rBlNDMP9/b7xYuiW+kSPFNfPa9XR+JCwRsdS0JVZnqTMCUoPz+jW1KTzCV Vofj1nHmD+rz44eT+absuf/b5lQF9pI= -----END CERTIFICATE-----Generated at Wed Sep 30 17:12:51 2026 by rpki-client