$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa File: bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa (raw, json) Hash identifier: d/kW0dpBckiKCeTU+eZnQkL/9DkafUjUuAvGmIHO0+k= Subject key identifier: 61:B9:24:25:89:89:3B:13:5F:DD:68:D9:E1:E3:B0:8B:31:59:99:B7 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584B3C51A6DB14812CF02A3941B0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 398210 IP address blocks: 207.211.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a6:db:14:81:2c:f0:2a:39:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=8fa0aa85-af1a-48d4-8f57-53db0e05724d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:21:ae:c7:be:8f:90:8c:4c:0c:a3:ba:de: 4d:7a:fc:99:5b:07:2a:a0:a2:e5:7f:c7:54:6b:f4: cb:18:3b:4f:f9:66:a9:b4:dc:74:0d:96:89:dd:5e: 0b:1a:57:87:80:0b:8c:c0:4f:85:24:72:b6:10:5e: 39:a8:dc:49:ae:07:06:4f:43:67:d8:02:08:5d:2e: fc:7f:77:62:a2:0a:ad:95:2f:86:3f:23:56:bf:66: 7a:57:2b:84:6b:f2:05:2d:84:99:78:ae:f9:4e:d4: df:bb:af:27:ec:a3:c1:0e:cb:99:ef:02:30:5c:17: a7:da:5d:62:c8:8b:57:b6:6c:06:42:32:d4:25:e6: 4d:ac:18:c6:ba:33:24:e9:f5:18:9d:7f:7f:2a:2e: 2a:37:5d:44:68:36:31:40:20:da:a6:44:49:92:d1: f0:ee:08:2d:91:09:38:85:ac:47:30:29:44:8e:37: af:cf:62:da:2f:30:36:5c:59:db:1c:3b:0d:4a:ca: e0:2b:af:98:95:11:19:99:d2:eb:10:46:a1:d9:ab: b8:3e:fc:42:55:49:ca:ec:b2:36:1f:ce:d8:e3:2d: fa:12:78:6d:c1:e1:80:f4:2a:0b:13:5b:39:39:2f: de:b6:ed:02:34:8e:24:38:fd:af:b0:9c:c3:02:8d: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B9:24:25:89:89:3B:13:5F:DD:68:D9:E1:E3:B0:8B:31:59:99:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e8:71:09:07:91:23:fe:1f:17:40:6a:fc:49:0a:39:21:f0: f6:7b:83:d5:ec:1c:1a:85:96:f8:fa:0d:c5:61:3a:44:08:97: 37:f8:5f:95:a1:c8:37:c3:b8:59:07:0e:d0:4f:3f:6b:6b:01: b6:71:9b:ba:64:73:28:da:e2:52:cc:28:0f:79:85:00:ed:22: c9:3b:70:0a:db:bf:8d:8b:ce:3e:56:1e:a2:fc:c9:f7:81:32: 27:b3:e6:1e:d0:89:9c:6e:53:2c:84:2e:bf:b0:32:2e:85:11: 9f:2b:0b:2d:0f:f8:49:e7:7c:11:ef:c2:17:91:e7:3f:98:4a: 2c:d8:1d:c9:4f:dd:c2:12:35:ea:f9:98:07:a4:10:ce:48:75: 21:d5:f1:a5:a3:35:de:fb:d4:97:02:98:05:4e:cf:7f:41:8d: c4:16:f3:f5:ab:2e:7e:a2:5d:3b:a5:c1:84:44:72:17:17:16: 7d:1f:ab:e0:52:c0:8a:cd:3c:88:fc:4c:aa:e1:05:10:3b:26: 4c:d4:33:f0:15:19:47:5f:74:8d:ce:94:cb:92:e7:fe:ae:60: 20:77:d8:bf:74:fe:92:9a:ba:59:8e:76:63:88:e4:4c:32:93: 40:30:ec:1f:03:ce:2b:f0:51:98:86:ca:c2:8f:3d:5f:95:c5: 0f:45:d8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UabbFIEs8Co5QbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk OGZhMGFhODUtYWYxYS00OGQ0LThmNTctNTNkYjBlMDU3MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z4hrse+j5CMTAyjut5NevyZWwcqoKLlf8dU a/TLGDtP+WaptNx0DZaJ3V4LGleHgAuMwE+FJHK2EF45qNxJrgcGT0Nn2AIIXS78 f3diogqtlS+GPyNWv2Z6VyuEa/IFLYSZeK75TtTfu68n7KPBDsuZ7wIwXBen2l1i yItXtmwGQjLUJeZNrBjGujMk6fUYnX9/Ki4qN11EaDYxQCDapkRJktHw7ggtkQk4 haxHMClEjjevz2LaLzA2XFnbHDsNSsrgK6+YlREZmdLrEEah2au4PvxCVUnK7LI2 H87Y4y36EnhtweGA9CoLE1s5OS/etu0CNI4kOP2vsJzDAo2cHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG5JCWJiTsTX91o2eHjsIsxWZm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRkMDhlNTMtOGZlNC0z ZWQ1LWI3ZTEtNTViMGFlNTI3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7ocQkHkSP+HxdAavxJCjkh8PZ7g9XsHBqFlvj6DcVhOkQIlzf4X5Wh yDfDuFkHDtBPP2trAbZxm7pkcyja4lLMKA95hQDtIsk7cArbv42Lzj5WHqL8yfeB Miez5h7QiZxuUyyELr+wMi6FEZ8rCy0P+EnnfBHvwheR5z+YSizYHclP3cISNer5 mAekEM5IdSHV8aWjNd771JcCmAVOz39BjcQW8/WrLn6iXTulwYREchcXFn0fq+BS wIrNPIj8TKrhBRA7JkzUM/AVGUdfdI3OlMuS5/6uYCB32L90/pKaulmOdmOI5Ewy k0Aw7B8DzivwUZiGysKPPV+VxQ9F2J0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:32:43 2025 by rpki-client