$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa File: 039241b2-b599-30f0-bcc6-07b9fed5d863.roa (raw, json) Hash identifier: Uv5MA17WNIuHMlxBKipBH0OTzkgqzmr6g3KIL+uOqyg= Subject key identifier: 1F:E9:E2:7F:B6:01:CF:AD:5F:F5:58:C3:0E:E6:70:56:FC:68:8F:40 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7EE4D92500535DAE1C80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7e:e4:d9:25:00:53:5d:ae:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=41b1f393-83ed-47ba-b774-f5587b61f22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:d9:20:fc:17:52:46:7c:0a:5d:ac:ec:5f: c8:2b:e5:4f:b4:df:8f:33:57:aa:8c:b6:02:3b:69: 77:0a:ce:82:50:f0:33:37:e7:7d:92:3c:87:9a:dc: bc:4e:d0:cd:ee:11:6a:89:ae:8b:74:bc:97:52:64: 7f:62:08:04:cd:62:cd:da:f9:2d:67:51:7e:ee:27: fd:47:f4:fc:7f:85:0d:96:25:6d:fb:66:b9:15:07: 7f:ca:17:76:c6:d7:90:57:68:ac:08:b6:0c:91:8f: 4b:e5:c9:54:9c:77:c2:01:6a:6e:6c:16:99:61:f1: 19:6b:67:29:79:1e:9c:da:d4:08:8c:a6:91:1a:9e: d6:65:a0:a8:1f:14:b2:79:52:44:02:c4:25:af:41: c0:3e:17:a5:b7:b3:83:38:63:01:38:5f:e7:45:5d: 20:4e:9d:f0:f1:65:44:d3:d0:cf:d6:c0:a2:c4:9a: f6:81:fb:54:ec:b1:e3:6c:65:b5:5c:26:fa:e0:04: f0:2c:28:07:fc:0b:cc:3c:f0:a8:84:d3:c5:b5:21: b5:18:dc:48:f1:f6:16:48:e7:87:c4:fa:e8:52:f2: 96:aa:08:07:61:1c:f2:c8:da:2e:89:65:bd:39:2f: 51:0a:9a:d5:a9:6e:3c:6f:58:68:56:de:d3:33:6e: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E9:E2:7F:B6:01:CF:AD:5F:F5:58:C3:0E:E6:70:56:FC:68:8F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:86:8c:7f:b9:5e:a0:f2:46:da:58:6d:d6:9d:42:01:19:34: 6e:55:88:c9:fb:74:d0:0b:a6:ab:1b:4b:a3:75:d1:6a:94:49: e7:33:18:8a:e3:24:d2:28:0c:69:e9:c4:24:86:c5:38:0f:3f: fb:91:2d:e6:7b:fa:2d:7e:6b:22:41:48:2b:b8:79:26:82:34: 71:35:ef:62:20:85:c7:c1:59:86:cf:ae:02:a1:8e:38:2d:6a: 8a:89:25:0c:40:49:40:32:0d:0e:5f:83:c9:1d:57:ad:c4:12: d5:a5:72:47:97:dd:09:cf:3d:b8:1b:ca:17:6e:43:69:ec:95: 6d:71:c1:80:e6:c1:ec:4b:f5:d1:bb:28:8a:6f:80:8e:cc:b3: 1a:7c:33:52:b9:77:be:ca:2f:e9:7d:82:ea:68:5b:2d:79:71: 7f:06:99:0a:ce:d9:f7:07:14:4a:35:9d:59:e8:96:81:33:1d: 7d:3a:e3:0a:11:5c:1f:c3:4c:c4:50:c1:82:0f:e6:68:da:24: f9:bf:53:b9:93:7c:ba:b2:f9:8f:5d:60:31:41:27:39:23:7d: 48:5b:da:90:d7:1c:dd:98:a3:5e:1c:fa:71:38:15:cb:9e:8a: bb:8e:33:1b:be:da:50:bc:c9:87:7a:6d:b0:c1:17:2a:b4:6e: 84:d0:6f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/37k2SUAU12uHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk NDFiMWYzOTMtODNlZC00N2JhLWI3NzQtZjU1ODdiNjFmMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaDZIPwXUkZ8Cl2s7F/IK+VPtN+PM1eqjLYC O2l3Cs6CUPAzN+d9kjyHmty8TtDN7hFqia6LdLyXUmR/YggEzWLN2vktZ1F+7if9 R/T8f4UNliVt+2a5FQd/yhd2xteQV2isCLYMkY9L5clUnHfCAWpubBaZYfEZa2cp eR6c2tQIjKaRGp7WZaCoHxSyeVJEAsQlr0HAPhelt7ODOGMBOF/nRV0gTp3w8WVE 09DP1sCixJr2gftU7LHjbGW1XCb64ATwLCgH/AvMPPCohNPFtSG1GNxI8fYWSOeH xProUvKWqggHYRzyyNouiWW9OS9RCprVqW48b1hoVt7TM27dTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/p4n+2Ac+tX/VYww7mcFb8aI9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDM5MjQxYjItYjU5OS0z MGYwLWJjYzYtMDdiOWZlZDVkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOGjH+5XqDyRtpYbdadQgEZNG5ViMn7dNALpqsbS6N10WqUSeczGIrj JNIoDGnpxCSGxTgPP/uRLeZ7+i1+ayJBSCu4eSaCNHE172IghcfBWYbPrgKhjjgt aoqJJQxASUAyDQ5fg8kdV63EEtWlckeX3QnPPbgbyhduQ2nslW1xwYDmwexL9dG7 KIpvgI7Msxp8M1K5d77KL+l9gupoWy15cX8GmQrO2fcHFEo1nVnoloEzHX064woR XB/DTMRQwYIP5mjaJPm/U7mTfLqy+Y9dYDFBJzkjfUhb2pDXHN2Yo14c+nE4Fcue iruOMxu+2lC8yYd6bbDBFyq0boTQbxQ= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:48 2026 by rpki-client