$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json) Hash identifier: mXqpOBCrPT+j77gTWmcElmVzmQEwxSiua3vs8j8TjSk= Subject key identifier: 9E:42:E6:36:9E:85:3C:39:2A:5C:AA:5D:A3:7D:F7:2E:6D:7C:31:D2 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624EDB7755EF7347B00080 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 207.211.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4e:db:77:55:ef:73:47:b0:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=0d7b0f48-8a31-4b7c-a8fe-350d049b2297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:06:50:3e:67:ca:64:75:25:b0:c1:9f:dc:f7: 05:b7:40:49:f0:63:17:da:e9:39:b2:a1:5a:1b:4d: c1:bf:97:7d:b5:41:77:5e:99:9a:90:7c:af:dd:e0: 3a:26:38:6f:a0:be:66:ee:12:d9:ae:7d:33:13:b0: cb:8f:73:69:65:6c:8d:52:01:7d:61:7a:1d:46:95: ea:4f:9c:38:2c:dd:9e:08:d8:a1:25:4b:36:78:a6: d0:97:52:3d:46:2a:ee:e6:7e:3a:65:af:19:4b:40: 4e:97:48:8a:1e:bb:cc:7e:6e:cf:32:7e:62:e4:32: fe:d0:7b:d5:5f:ff:24:51:bc:6b:08:73:54:95:28: b6:77:40:ad:6b:81:d1:a5:9b:80:d4:f7:2f:b9:b3: e5:dc:4c:a3:61:91:8b:38:a6:4a:7a:06:4a:af:99: 0c:97:f4:bf:d8:a5:60:ba:a6:ef:b6:63:8f:03:93: 81:3c:e9:a3:43:6c:6b:f5:a5:3e:d3:5a:84:26:ab: 30:ab:bd:2e:d1:b9:f9:d5:18:df:41:22:08:59:6d: 8d:be:e4:32:f4:ca:99:c4:95:76:fb:b4:97:48:03: 6e:96:c2:6f:04:71:58:76:e6:45:50:21:00:52:30: 2e:ba:0a:ce:9a:57:ca:50:c2:ea:40:ea:f3:47:4b: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:42:E6:36:9E:85:3C:39:2A:5C:AA:5D:A3:7D:F7:2E:6D:7C:31:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:52:70:6e:9c:fd:ba:14:1a:03:b3:6c:57:7d:d6:cc:d3:09: ad:20:f6:52:96:2d:93:98:cd:2b:ce:68:d7:31:51:55:3b:aa: 8e:6d:a8:df:bb:08:96:43:44:e4:28:4d:a2:e1:b0:cc:c4:c8: 55:06:dd:ae:eb:90:cf:a4:4c:55:5e:09:8e:06:dc:85:f6:4d: 79:11:19:44:1c:11:d2:2e:79:f4:c1:cc:ba:69:83:2a:a0:9e: 2d:de:69:e8:57:3e:46:6b:11:ca:43:db:eb:dd:40:2e:7d:36: 8f:be:74:0c:09:40:7b:10:b4:2f:07:a8:ba:aa:92:d5:d1:ff: 51:30:b7:3f:71:9f:97:0a:da:73:e1:1a:4c:88:99:61:6d:a6: af:2c:b2:60:29:8f:e4:db:90:6a:cf:3d:36:d7:bd:52:b5:dc: 0b:3e:4f:98:75:14:52:6d:18:20:c8:3d:1f:8e:fc:02:12:5b: 40:c2:e7:3d:8c:b5:48:9c:7f:1a:06:e7:e9:67:8b:e7:f0:36: 2c:1f:17:f9:9f:7d:1a:86:6b:e8:cf:32:4e:03:94:50:91:49: fd:09:91:18:19:a1:6a:6c:c0:0f:da:e7:bc:7e:5b:63:29:a2: 5f:8e:90:06:86:0a:9c:88:3b:f1:e3:df:58:57:19:ea:45:13: 30:77:e5:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk7bd1Xvc0ewAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MGQ3YjBmNDgtOGEzMS00YjdjLWE4ZmUtMzUwZDA0OWIyMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AZQPmfKZHUlsMGf3PcFt0BJ8GMX2uk5sqFa G03Bv5d9tUF3XpmakHyv3eA6JjhvoL5m7hLZrn0zE7DLj3NpZWyNUgF9YXodRpXq T5w4LN2eCNihJUs2eKbQl1I9Riru5n46Za8ZS0BOl0iKHrvMfm7PMn5i5DL+0HvV X/8kUbxrCHNUlSi2d0Cta4HRpZuA1PcvubPl3EyjYZGLOKZKegZKr5kMl/S/2KVg uqbvtmOPA5OBPOmjQ2xr9aU+01qEJqswq70u0bn51RjfQSIIWW2NvuQy9MqZxJV2 +7SXSANulsJvBHFYduZFUCEAUjAuugrOmlfKUMLqQOrzR0u2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5C5jaehTw5KlyqXaN99y5tfDHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTAyZGEyOTItMDhhOC0z Yjc1LWJjNGItOGQzOTBlNWZlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhScG6c/boUGgOzbFd91szTCa0g9lKWLZOYzSvOaNcxUVU7qo5tqN+7 CJZDROQoTaLhsMzEyFUG3a7rkM+kTFVeCY4G3IX2TXkRGUQcEdIuefTBzLppgyqg ni3eaehXPkZrEcpD2+vdQC59No++dAwJQHsQtC8HqLqqktXR/1Ewtz9xn5cK2nPh GkyImWFtpq8ssmApj+TbkGrPPTbXvVK13As+T5h1FFJtGCDIPR+O/AISW0DC5z2M tUicfxoG5+lni+fwNiwfF/mffRqGa+jPMk4DlFCRSf0JkRgZoWpswA/a57x+W2Mp ol+OkAaGCpyIO/Hj31hXGepFEzB35fg= -----END CERTIFICATE-----Generated at Mon Sep 21 16:06:34 2026 by rpki-client