$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa File: f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa (raw, json) Hash identifier: CDDko4SlCQVBU9sGatnxxpN4ssCn4qJJSY4tllKkZwU= Subject key identifier: 13:77:EA:64:30:82:02:4F:DF:E1:87:ED:5D:3A:0D:84:F6:97:76:EF Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F497329074ACBCE0B97F72B80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398210 IP address blocks: 207.211.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:29:07:4a:cb:ce:0b:97:f7:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=17c04024-65c8-48ac-b011-123b8b046c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:6c:a1:df:01:b7:24:88:4a:77:53:a0:55: b0:0f:01:55:5b:95:c9:12:22:48:31:ad:8e:62:68: 50:2a:a2:1e:96:86:a5:ac:15:91:cf:c1:65:65:7e: 09:38:e3:f4:ff:28:e4:13:a3:35:01:9e:16:78:68: 2d:42:7f:b5:e0:6e:0d:20:1a:73:39:17:0a:85:8a: 7f:b4:4c:8f:b5:8e:50:a6:aa:dd:e5:85:5b:ed:11: 3a:77:34:c4:ef:90:03:11:81:a6:ff:1c:0f:ce:8d: 61:84:75:1d:94:e9:f8:e5:d3:cb:e7:56:33:a0:7d: 1f:2d:04:c7:15:0a:7a:91:10:f2:bd:f0:33:b9:8f: 7d:3b:7d:62:c9:f6:70:65:97:bd:98:88:0d:cf:b9: 54:1b:2e:b4:1a:be:d1:80:b7:b0:d0:a6:cb:ff:9b: 7b:a1:2b:ed:a0:41:6f:98:c6:84:41:f7:e6:b9:8f: 32:90:32:c3:08:ca:a8:87:f4:9d:82:68:e2:a9:14: 5a:d3:05:47:78:5e:74:05:69:c7:ba:4c:26:02:dc: 5d:57:f5:01:a9:0e:d1:dd:57:70:c7:85:5d:ad:5c: 51:46:8b:09:bf:aa:76:c4:84:a7:b4:2c:d2:15:64: 94:e8:b1:89:d7:4c:82:6e:00:20:ab:55:02:f2:83: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:EA:64:30:82:02:4F:DF:E1:87:ED:5D:3A:0D:84:F6:97:76:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ad:6b:99:16:7f:20:34:ca:5a:c0:7d:77:b0:4f:99:7b:74: c0:64:79:1d:ae:cb:ee:f5:2c:a6:3c:ec:5f:7f:52:7b:e9:a7: 7d:79:d4:09:2b:15:cb:6a:c1:e0:02:2c:5c:f3:92:48:52:8b: cf:10:ba:f5:5a:a3:b0:03:21:09:1a:5a:e9:bd:ab:b5:8f:e6: ae:f9:ba:b4:05:bb:fb:d1:25:fa:41:45:f8:41:b1:08:28:05: 29:93:91:e6:e3:59:42:5b:63:d6:3c:e4:4a:fb:a3:3f:61:38: a2:12:0f:a3:80:08:23:3a:a1:32:eb:19:85:b8:74:60:8b:6d: 66:2a:c4:a7:b3:0b:45:30:9b:a3:04:3b:f6:a1:85:a3:ee:f5: 75:7f:60:da:87:69:d9:e0:51:1a:9f:7a:96:6d:1e:5c:8b:29: 01:af:a1:09:60:7a:ab:f4:4f:13:25:14:fa:b9:00:4e:9f:97: 4f:ff:20:f1:68:a7:ca:9d:fd:c2:a4:59:cd:9f:f4:f1:8f:f2: 37:78:ed:c4:eb:22:f3:e2:89:3f:57:a0:2a:c6:9e:3b:bd:0f: 68:f6:f3:96:98:0d:d3:63:e3:c0:c4:61:e9:40:41:76:f0:0f: ed:d6:9d:2f:db:23:0b:7d:77:8c:10:1a:b2:ad:2b:bc:b2:0c: 00:63:65:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcykHSsvOC5f3K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTdjMDQwMjQtNjVjOC00OGFjLWIwMTEtMTIzYjhiMDQ2YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHNsod8BtySISndToFWwDwFVW5XJEiJIMa2O YmhQKqIeloalrBWRz8FlZX4JOOP0/yjkE6M1AZ4WeGgtQn+14G4NIBpzORcKhYp/ tEyPtY5Qpqrd5YVb7RE6dzTE75ADEYGm/xwPzo1hhHUdlOn45dPL51YzoH0fLQTH FQp6kRDyvfAzuY99O31iyfZwZZe9mIgNz7lUGy60Gr7RgLew0KbL/5t7oSvtoEFv mMaEQffmuY8ykDLDCMqoh/SdgmjiqRRa0wVHeF50BWnHukwmAtxdV/UBqQ7R3Vdw x4VdrVxRRosJv6p2xISntCzSFWSU6LGJ10yCbgAgq1UC8oMBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN36mQwggJP3+GH7V06DYT2l3bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZjA1Yjk2ZDctY2ViZS0z MmYzLWIxZTItYzM5ZDVkZTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCta5kWfyA0ylrAfXewT5l7dMBkeR2uy+71LKY87F9/Unvpp3151Akr FctqweACLFzzkkhSi88QuvVao7ADIQkaWum9q7WP5q75urQFu/vRJfpBRfhBsQgo BSmTkebjWUJbY9Y85Er7oz9hOKISD6OACCM6oTLrGYW4dGCLbWYqxKezC0Uwm6ME O/ahhaPu9XV/YNqHadngURqfepZtHlyLKQGvoQlgeqv0TxMlFPq5AE6fl0//IPFo p8qd/cKkWc2f9PGP8jd47cTrIvPiiT9XoCrGnju9D2j285aYDdNj48DEYelAQXbw D+3WnS/bIwt9d4wQGrKtK7yyDABjZW4= -----END CERTIFICATE-----Generated at Thu Oct 1 16:59:21 2026 by rpki-client