$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa File: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (raw, json) Hash identifier: jQ6HnHaU0QCoxyTKl2124w+VKVaBYsS8aSIJF9k9L8U= Subject key identifier: 7D:94:55:8B:4D:E1:43:CE:2A:C0:6D:43:0A:4D:69:4F:44:04:47:FB Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624EE7E7B4EDB1B19C3F80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 207.211.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4e:e7:e7:b4:ed:b1:b1:9c:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=25ce743c-69c2-4664-baba-3454c8cf7112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:f6:8e:e4:c7:ef:43:4d:25:98:17:c9:43: 5a:d6:f5:f0:b3:f0:74:81:02:12:82:54:30:95:2f: 00:5c:02:8c:14:88:f6:44:85:5f:ac:42:87:c6:c6: 49:4b:34:c1:ad:03:7b:75:4b:33:25:0b:c8:c2:1c: dc:99:e3:43:af:6c:d4:a4:31:36:d5:68:db:2d:ab: 51:bd:32:20:3f:68:27:ae:57:29:57:7a:21:14:41: 89:70:8d:75:ae:a1:fc:1b:23:1e:47:c7:4c:5d:e4: 5a:7d:24:d8:66:da:42:ad:67:15:8e:4f:de:65:54: 78:e4:fb:8f:74:47:b8:f6:a0:12:b9:58:71:66:f9: 77:8b:54:4e:7a:7a:e7:f0:42:46:ea:01:79:f6:3c: 79:ae:98:62:fc:b5:d7:aa:8f:05:27:91:cd:f2:60: 45:5f:d9:ef:d1:58:94:08:55:4a:c5:10:f9:52:f6: c9:ea:50:25:e4:93:ea:b9:2f:a9:5a:09:88:bb:63: 51:10:dc:3d:10:2e:39:73:6a:f6:23:58:f3:b1:08: 00:fb:84:01:03:63:6d:2d:c1:93:5a:2e:19:4b:13: da:cb:db:19:b5:2a:23:4f:79:bf:22:02:e3:92:a2: b6:a0:a4:40:c1:b8:a7:5c:e9:a4:9e:88:b5:05:24: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:94:55:8B:4D:E1:43:CE:2A:C0:6D:43:0A:4D:69:4F:44:04:47:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:34:d9:c1:37:ed:e3:f5:3f:f0:3b:e8:8f:f9:55:69:51:f5: 4e:e4:f8:61:a6:b9:0b:d3:38:91:0e:4a:56:ff:f7:01:7c:67: aa:ae:b1:3d:97:fa:8e:08:e4:8a:3f:56:b9:d7:c9:73:03:79: b4:51:e5:60:5f:c4:ed:b7:bd:7b:67:16:09:ca:a5:5c:65:ee: 1b:e3:d9:9e:c1:2c:66:5b:d0:e6:f9:0b:6b:8a:81:22:a8:a8: e2:7d:f8:e3:60:b6:1c:26:ac:7a:52:49:04:e4:d4:fa:62:72: 78:b3:1a:57:ae:72:39:57:15:43:69:42:a1:ba:2f:8e:b3:70: f7:fd:12:3f:ba:ce:f1:dd:19:41:fa:96:66:c2:07:1d:28:c9: c7:6d:81:31:0e:86:97:57:04:bc:f2:40:94:98:48:09:21:7c: f4:58:49:c3:70:8f:08:85:fa:06:17:30:b4:b1:7b:5a:0f:18: a4:c2:7c:a0:8b:06:5c:25:11:99:70:0a:33:b5:bf:1e:77:5a: 02:69:cb:4b:a3:04:c3:70:08:1f:3e:0c:36:4b:b8:0e:1d:63: da:87:d1:07:82:01:ae:c1:20:ca:f8:1f:75:48:b1:5a:b7:f7: c0:0d:e8:cc:ec:a8:6b:7e:a4:de:7e:2b:9b:ff:e1:15:68:03: 4e:5b:33:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk7n57TtsbGcP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjVjZTc0M2MtNjljMi00NjY0LWJhYmEtMzQ1NGM4Y2Y3MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisH2juTH70NNJZgXyUNa1vXws/B0gQISglQw lS8AXAKMFIj2RIVfrEKHxsZJSzTBrQN7dUszJQvIwhzcmeNDr2zUpDE21WjbLatR vTIgP2gnrlcpV3ohFEGJcI11rqH8GyMeR8dMXeRafSTYZtpCrWcVjk/eZVR45PuP dEe49qASuVhxZvl3i1ROenrn8EJG6gF59jx5rphi/LXXqo8FJ5HN8mBFX9nv0ViU CFVKxRD5UvbJ6lAl5JPquS+pWgmIu2NRENw9EC45c2r2I1jzsQgA+4QBA2NtLcGT Wi4ZSxPay9sZtSojT3m/IgLjkqK2oKRAwbinXOmknoi1BSSc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2UVYtN4UPOKsBtQwpNaU9EBEf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYjliNDFlYmQtODQwOC0z NzNjLTlmOGEtNzExNWZlYmJkMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw02cE37eP1P/A76I/5VWlR9U7k+GGmuQvTOJEOSlb/9wF8Z6qusT2X +o4I5Io/VrnXyXMDebRR5WBfxO23vXtnFgnKpVxl7hvj2Z7BLGZb0Ob5C2uKgSKo qOJ9+ONgthwmrHpSSQTk1PpicnizGleucjlXFUNpQqG6L46zcPf9Ej+6zvHdGUH6 lmbCBx0oycdtgTEOhpdXBLzyQJSYSAkhfPRYScNwjwiF+gYXMLSxe1oPGKTCfKCL BlwlEZlwCjO1vx53WgJpy0ujBMNwCB8+DDZLuA4dY9qH0QeCAa7BIMr4H3VIsVq3 98AN6MzsqGt+pN5+K5v/4RVoA05bM04= -----END CERTIFICATE-----Generated at Mon Sep 21 23:26:11 2026 by rpki-client