$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa File: 28e01cf7-f5be-34ef-9dfc-3719434f963a.roa (raw, json) Hash identifier: 0rNVMTBThVuFgU2hK3+tTnAYh+Og8UXBZTr7cXeR0uk= Subject key identifier: 19:00:BF:5F:DD:08:C7:E0:C1:EF:2A:61:E5:BE:2F:5D:C1:37:60:B9 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAACDBC81658C9E05B8BC0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 207.211.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:ac:db:c8:16:58:c9:e0:5b:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=cc200de1-ab8f-4001-b97a-d520f81028c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:ee:7d:02:ac:14:09:1a:1d:83:3d:98:f5: 1c:1e:8a:05:41:46:3b:60:4a:a3:31:7c:96:69:51: c0:e8:6a:14:4e:f8:2d:d7:9b:ac:84:bf:03:3c:61: a6:c1:89:1a:76:de:bb:fb:aa:77:29:c3:e1:71:28: 6f:76:b9:0d:e8:d0:94:22:fc:09:c7:11:d6:15:91: c9:fb:e0:bd:6e:2d:e1:8d:44:c9:38:b8:40:eb:df: bb:80:ab:bb:05:02:6a:a3:fb:b8:51:bd:d8:90:ff: 7a:e5:e9:41:15:96:c5:b5:f0:b7:10:0a:ad:06:b7: 70:f0:c4:1a:9d:e3:2e:e2:33:ad:f4:2e:80:a4:3b: 02:dd:4f:66:bf:41:d4:4b:1c:5c:dc:69:b3:68:7a: 63:09:58:50:7a:75:66:5b:01:88:12:af:b3:8f:01: fd:df:f8:69:8e:c8:ce:0a:24:5d:ac:79:9a:a6:54: a8:61:30:7b:91:8b:b4:49:ad:2f:a7:39:dc:46:0c: c7:16:5e:25:99:ac:d4:aa:e8:81:a2:d0:67:96:de: de:16:9a:a6:86:d2:c7:8a:83:07:60:d9:b6:0f:96: 82:f9:b5:05:fd:28:3e:62:a2:6e:20:9e:d0:d6:e2: e4:59:b5:14:f7:56:21:d3:49:32:8e:27:30:c8:d3: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:BF:5F:DD:08:C7:E0:C1:EF:2A:61:E5:BE:2F:5D:C1:37:60:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9a:40:78:e5:dc:40:d1:87:da:b1:ab:cb:80:8b:b8:40:c2: f6:6e:60:18:d1:b2:8e:a9:90:4b:fd:8f:77:66:4f:9c:4c:67: cf:e3:10:dc:ca:a3:9e:38:22:68:da:6b:07:9c:dd:cb:7e:92: 92:3c:29:35:91:97:7d:bf:b2:c9:6f:c8:ee:34:17:bd:b5:c0: 36:55:eb:6a:c9:b2:39:ff:a7:e9:98:da:ed:ec:aa:42:67:54: 52:94:bd:12:38:ed:1b:ca:d3:42:5a:f8:27:97:8e:99:06:ba: 03:fe:a4:90:9f:84:1d:59:c5:72:69:6f:75:a5:6f:a2:3a:70: 49:08:61:4c:66:23:2f:a3:21:fb:13:34:6a:98:88:4f:5d:22: d5:a8:ad:f9:6f:d1:fb:fd:2a:6d:45:4d:5b:1a:c3:1b:8b:84: 31:5c:62:81:5d:27:29:ba:ff:37:e5:c1:2d:5b:79:cf:44:62: b0:c0:5c:3a:c3:1e:1b:de:87:9f:0e:a5:6a:b1:00:f5:ae:2d: 59:8e:0e:1f:b5:d4:f1:37:82:35:bb:54:c2:04:7c:83:7b:d5: 56:72:c7:73:e4:86:ed:32:86:71:e8:ae:69:d4:77:52:9a:13: 51:47:71:a0:76:1b:9e:50:4b:7a:67:84:78:78:50:4a:da:49: e2:a1:4d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqzbyBZYyeBbi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk Y2MyMDBkZTEtYWI4Zi00MDAxLWI5N2EtZDUyMGY4MTAyOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l/ufQKsFAkaHYM9mPUcHooFQUY7YEqjMXyW aVHA6GoUTvgt15ushL8DPGGmwYkadt67+6p3KcPhcShvdrkN6NCUIvwJxxHWFZHJ ++C9bi3hjUTJOLhA69+7gKu7BQJqo/u4Ub3YkP965elBFZbFtfC3EAqtBrdw8MQa neMu4jOt9C6ApDsC3U9mv0HUSxxc3GmzaHpjCVhQenVmWwGIEq+zjwH93/hpjsjO CiRdrHmaplSoYTB7kYu0Sa0vpzncRgzHFl4lmazUquiBotBnlt7eFpqmhtLHioMH YNm2D5aC+bUF/Sg+YqJuIJ7Q1uLkWbUU91Yh00kyjicwyNNs4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkAv1/dCMfgwe8qYeW+L13BN2C5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjhlMDFjZjctZjViZS0z NGVmLTlkZmMtMzcxOTQzNGY5NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmaQHjl3EDRh9qxq8uAi7hAwvZuYBjRso6pkEv9j3dmT5xMZ8/jENzK o544Imjaawec3ct+kpI8KTWRl32/sslvyO40F721wDZV62rJsjn/p+mY2u3sqkJn VFKUvRI47RvK00Ja+CeXjpkGugP+pJCfhB1ZxXJpb3Wlb6I6cEkIYUxmIy+jIfsT NGqYiE9dItWorflv0fv9Km1FTVsawxuLhDFcYoFdJym6/zflwS1bec9EYrDAXDrD Hhveh58OpWqxAPWuLVmODh+11PE3gjW7VMIEfIN71VZyx3Pkhu0yhnHormnUd1Ka E1FHcaB2G55QS3pnhHh4UEraSeKhTZ4= -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:15 2026 by rpki-client