$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa File: f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa (raw, json) Hash identifier: WBzMEoJbZExmv6/dXDa8A5LIwZdZHE5UZ/35bWunii4= Subject key identifier: B2:C8:4D:91:C3:F9:50:5E:63:37:03:7B:1E:CB:82:52:AB:1B:D4:37 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584B3C51A6A9C675BF2828D5C880 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 398210 IP address blocks: 207.211.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a6:a9:c6:75:bf:28:28:d5:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=d7e64ff7-2eab-4ab7-95e0-a16652efc1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:ec:86:32:7d:5e:87:42:fc:68:66:7e:1d: 70:44:4c:7b:f8:58:a1:c1:65:21:1e:e5:b5:76:5f: c1:49:8a:07:c3:b0:fc:d1:c2:e6:9d:fc:19:0a:78: 89:63:0c:1d:e6:dd:32:d8:40:67:ea:df:d9:7c:04: c4:4d:0b:8c:4e:0c:39:4a:c4:f8:df:42:84:09:86: 59:14:04:87:e6:d8:95:93:80:39:7b:ef:d8:ac:84: 6a:8a:18:50:f0:96:04:22:97:20:85:33:be:9a:0f: b7:08:2c:18:a3:80:5f:db:8e:a5:8c:db:00:86:57: 9e:91:20:30:91:9c:d4:09:83:2b:59:fd:ac:31:7a: e6:ac:e2:78:3c:08:69:c6:eb:ed:b0:bb:25:11:30: ec:e9:ba:21:a7:2c:ad:85:ff:00:a7:25:2d:27:b7: d0:a9:8d:dc:12:f2:cd:7a:4a:9f:89:b3:9c:fb:a0: 5f:5d:02:a5:34:27:58:60:a8:47:66:c9:7c:9c:da: db:9c:87:29:47:df:b3:c9:20:c1:04:16:0e:8e:95: f6:18:45:26:34:99:9e:16:8e:34:5b:50:33:1b:29: ac:32:19:6d:cd:d7:9a:56:9b:2d:2a:70:43:21:69: fe:9f:7f:25:a2:53:01:5c:09:63:f4:e4:f9:a1:c2: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:4D:91:C3:F9:50:5E:63:37:03:7B:1E:CB:82:52:AB:1B:D4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ff:70:ba:a8:42:dc:32:96:ae:f6:ed:fe:84:8c:2a:f7:34: 89:06:3d:a0:e4:00:bc:b3:6f:cf:d0:f5:e0:8f:a0:ea:6f:81: 96:c8:11:ba:99:1d:73:e5:61:c6:94:22:51:74:b8:d6:4e:c6: db:ec:25:68:bb:5c:84:4d:c4:02:9a:18:e9:c0:cb:bc:c7:61: 10:66:3d:bd:18:5e:82:7b:c2:41:62:c1:3c:09:bc:d2:fb:4a: 3b:49:d5:e4:1e:1f:a0:1c:3d:69:59:63:9c:0d:07:0a:fa:ad: 28:3f:be:f3:7a:a0:45:b0:25:4c:7d:b4:ff:e5:95:40:c6:a8: 38:c4:3a:eb:99:33:d9:f5:0b:35:7b:f7:a4:59:09:cb:df:a8: c7:89:5e:cc:93:9c:7a:fd:5e:0c:b7:0b:45:d0:48:67:a1:d5: fd:1e:6e:3e:6c:49:38:84:0b:fc:58:0d:d0:6a:72:2b:a7:7d: fd:4c:b7:1c:7d:a3:a7:35:cc:c6:d2:0d:4c:9f:83:12:18:93: 25:55:ad:9c:d0:59:00:46:6c:ad:6d:8d:c4:57:42:47:95:4e: b6:b0:07:8b:f5:d6:3c:e9:5b:26:f9:b4:05:00:ac:7d:07:5b: 02:1e:da:31:ba:84:26:d9:41:a2:9e:8b:53:1d:76:0e:45:28: 29:61:2a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaapxnW/KCjVyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDdlNjRmZjctMmVhYi00YWI3LTk1ZTAtYTE2NjUyZWZjMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEfshjJ9XodC/Ghmfh1wREx7+FihwWUhHuW1 dl/BSYoHw7D80cLmnfwZCniJYwwd5t0y2EBn6t/ZfATETQuMTgw5SsT430KECYZZ FASH5tiVk4A5e+/YrIRqihhQ8JYEIpcghTO+mg+3CCwYo4Bf246ljNsAhleekSAw kZzUCYMrWf2sMXrmrOJ4PAhpxuvtsLslETDs6bohpyythf8ApyUtJ7fQqY3cEvLN ekqfibOc+6BfXQKlNCdYYKhHZsl8nNrbnIcpR9+zySDBBBYOjpX2GEUmNJmeFo40 W1AzGymsMhltzdeaVpstKnBDIWn+n38lolMBXAlj9OT5ocJ6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLITZHD+VBeYzcDex7LglKrG9Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZjA1Yjk2ZDctY2ViZS0z MmYzLWIxZTItYzM5ZDVkZTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz/cLqoQtwylq727f6EjCr3NIkGPaDkALyzb8/Q9eCPoOpvgZbIEbqZ HXPlYcaUIlF0uNZOxtvsJWi7XIRNxAKaGOnAy7zHYRBmPb0YXoJ7wkFiwTwJvNL7 SjtJ1eQeH6AcPWlZY5wNBwr6rSg/vvN6oEWwJUx9tP/llUDGqDjEOuuZM9n1CzV7 96RZCcvfqMeJXsyTnHr9Xgy3C0XQSGeh1f0ebj5sSTiEC/xYDdBqciunff1Mtxx9 o6c1zMbSDUyfgxIYkyVVrZzQWQBGbK1tjcRXQkeVTrawB4v11jzpWyb5tAUArH0H WwIe2jG6hCbZQaKei1Mddg5FKClhKr4= -----END CERTIFICATE-----Generated at Thu Nov 6 00:32:43 2025 by rpki-client