$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa File: f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa (raw, json) Hash identifier: fedTA+Sdov3YWhbfzuJgpMoZo6j4wdNlLG/OQF4b1EM= Subject key identifier: 16:54:DC:6E:5A:FE:C7:36:DF:A9:7C:41:8F:62:5E:EB:80:8C:79:F7 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584CFC822A0AD2571F2FC481B328 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 398210 IP address blocks: 207.211.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:2a:0a:d2:57:1f:2f:c4:81:b3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=6a4c0d8c-cb97-4acb-8ee2-8a17e5be8055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:02:07:32:6c:4a:a0:13:9d:51:c7:59:1a: 23:69:b2:90:eb:29:80:94:b9:89:1c:29:be:cf:38: 54:96:2a:be:cb:ee:60:dd:a6:78:46:0d:9f:7b:37: d1:ac:6b:73:2c:58:b5:a5:28:34:e5:bf:4b:0b:ab: 0f:8a:50:ba:93:c2:a1:e5:29:f7:1a:a1:b8:6e:c9: 65:b2:06:d1:ca:e4:a3:06:2f:6e:5e:09:a6:ca:1a: df:dc:ab:b9:ee:0a:6b:36:85:77:9d:5a:97:39:af: 67:de:a1:b2:fd:b9:8b:cb:d2:96:8e:bf:ba:07:2c: 31:fc:b5:f1:e4:cc:c2:ca:15:d9:81:9b:c0:cd:10: 31:8f:e0:23:19:65:51:e6:22:95:37:c5:dd:4a:32: fd:6f:d0:17:4c:e2:3d:75:65:76:4a:9a:18:92:bb: 73:bb:7a:2a:6c:42:f1:a4:3d:34:6d:6e:ae:9b:a6: 2d:04:86:02:dc:77:05:01:e1:7d:7f:d8:81:a8:04: f0:cb:3d:8b:51:24:cf:2a:a8:89:6d:2c:47:50:22: 8c:85:20:99:93:0f:d2:bc:eb:b4:3a:5d:92:80:10: 59:3c:66:c1:8d:cb:bb:13:ff:0d:fe:a0:1b:b8:83: 74:7c:36:73:40:7c:cb:aa:76:07:0f:68:d4:8c:83: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:54:DC:6E:5A:FE:C7:36:DF:A9:7C:41:8F:62:5E:EB:80:8C:79:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:01:8d:ff:e0:69:56:d9:21:59:a1:be:cf:10:bb:79:d5:cc: e7:a4:f8:92:da:b5:58:29:ae:01:c8:44:73:a9:e1:5f:c6:17: 74:59:b3:cb:9a:55:53:a4:e4:92:49:a6:ea:85:b6:78:9b:ce: 54:6f:03:62:6a:61:43:5d:b9:a1:e6:c7:fc:f5:f4:7c:b2:a0: a1:8c:e2:75:2d:c3:71:cc:23:83:fe:d6:e1:01:88:49:2d:55: 74:35:60:75:72:35:c4:93:be:b8:d0:49:c2:fb:f8:45:c8:01: 98:e7:73:69:dc:78:04:11:6f:cc:89:77:a8:ff:f7:40:14:b0: c5:5e:67:90:68:ad:e0:00:ac:2c:02:d6:e1:dc:35:3a:bc:c6: f3:7c:3f:85:c2:c4:2c:f6:cc:70:5f:0a:1c:a9:f0:e5:6a:ca: 1e:47:37:bd:69:27:e2:27:f3:da:b8:ed:50:c6:0b:ac:57:21: ca:11:de:c9:4c:4e:3b:3a:f6:2b:b0:41:90:36:e9:21:b5:3a: 82:e5:18:9b:00:5d:53:94:6d:03:a6:8d:63:56:10:b1:96:49: 02:90:55:0f:90:06:b1:6d:bf:b8:18:91:9f:f7:59:00:14:e4: ce:ab:3b:dc:51:3b:c5:65:7e:b1:84:11:6f:ca:01:33:ae:8f: f6:6d:c4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gioK0lcfL8SBsygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk NmE0YzBkOGMtY2I5Ny00YWNiLThlZTItOGExN2U1YmU4MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRECBzJsSqATnVHHWRojabKQ6ymAlLmJHCm+ zzhUliq+y+5g3aZ4Rg2fezfRrGtzLFi1pSg05b9LC6sPilC6k8Kh5Sn3GqG4bsll sgbRyuSjBi9uXgmmyhrf3Ku57gprNoV3nVqXOa9n3qGy/bmLy9KWjr+6Bywx/LXx 5MzCyhXZgZvAzRAxj+AjGWVR5iKVN8XdSjL9b9AXTOI9dWV2SpoYkrtzu3oqbELx pD00bW6um6YtBIYC3HcFAeF9f9iBqATwyz2LUSTPKqiJbSxHUCKMhSCZkw/SvOu0 Ol2SgBBZPGbBjcu7E/8N/qAbuIN0fDZzQHzLqnYHD2jUjIPziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZU3G5a/sc236l8QY9iXuuAjHn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZjA1Yjk2ZDctY2ViZS0z MmYzLWIxZTItYzM5ZDVkZTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYBjf/gaVbZIVmhvs8Qu3nVzOek+JLatVgprgHIRHOp4V/GF3RZs8ua VVOk5JJJpuqFtnibzlRvA2JqYUNduaHmx/z19HyyoKGM4nUtw3HMI4P+1uEBiEkt VXQ1YHVyNcSTvrjQScL7+EXIAZjnc2nceAQRb8yJd6j/90AUsMVeZ5BoreAArCwC 1uHcNTq8xvN8P4XCxCz2zHBfChyp8OVqyh5HN71pJ+In89q47VDGC6xXIcoR3slM Tjs69iuwQZA26SG1OoLlGJsAXVOUbQOmjWNWELGWSQKQVQ+QBrFtv7gYkZ/3WQAU 5M6rO9xRO8VlfrGEEW/KATOuj/ZtxKE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:35:34 2026 by rpki-client