$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa File: 27938e9c-3192-3793-af30-042a052457c7.roa (raw, json) Hash identifier: Bg9dHOUUlpd9LxN8nZLttb48NhoFX1IbUqwN9iz91Vg= Subject key identifier: 9B:D7:99:07:31:0F:9D:57:50:C2:AB:49:85:F8:07:90:9B:B5:11:12 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7E870D893B6D943813F8 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7e:87:0d:89:3b:6d:94:38:13:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=21575ba3-c851-4b75-a611-4b2f9ecaa110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:17:56:ef:86:46:f7:78:9c:ea:1e:bc:39: c8:b1:41:f8:da:a8:4d:bf:13:c0:ce:e9:ad:45:d8: eb:4f:2a:6f:72:70:08:92:07:70:a7:90:bb:d6:f4: 0f:4f:0f:cf:51:1c:80:da:ba:ea:4a:b2:81:30:34: 68:06:e5:20:9a:ef:85:6e:05:40:c8:d3:37:4a:70: d9:f0:3b:6a:e7:54:27:a7:19:2c:e4:aa:85:01:2f: 15:69:78:aa:d7:28:5b:ee:71:59:9a:92:f3:54:f0: af:25:ef:c9:76:54:11:1d:87:33:e0:19:c9:0c:94: ee:77:f7:26:66:99:c1:82:8f:df:44:2c:ed:3e:b8: c4:9c:5e:51:7b:cc:97:ea:f3:86:da:98:9e:be:7c: f2:12:23:a7:77:63:e8:a2:d1:5e:52:fd:4a:56:ea: 36:a9:11:0f:59:fe:e2:45:71:46:ab:df:f1:38:a4: f2:ad:8e:9c:c6:01:cd:a5:67:a1:27:87:02:4a:e3: 9b:cc:a3:da:35:24:7b:6a:1c:fa:90:23:de:e8:67: b1:1b:46:0c:1a:d7:5c:20:62:71:77:db:f9:59:38: bd:0c:5b:c1:ff:d8:71:03:0d:e2:60:6f:00:96:d9: b3:04:54:e3:de:d1:68:da:92:9a:4e:4b:dc:27:36: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D7:99:07:31:0F:9D:57:50:C2:AB:49:85:F8:07:90:9B:B5:11:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:bd:f8:a7:50:75:6c:6d:e1:ff:67:7a:f5:72:53:df:64:08: fa:f6:07:d8:a7:c4:12:86:e3:57:4d:71:08:47:e2:21:87:c7: d8:36:dd:84:f7:0e:84:ac:95:d9:f1:04:77:f3:22:2e:ea:d5: fa:20:bf:a5:38:b8:77:25:d2:e5:65:d4:9b:8b:09:6f:f8:59: ca:db:2b:ed:cb:df:3b:3c:1c:61:5b:91:bb:51:05:a6:b0:3f: d7:55:48:13:57:71:a0:de:a8:0c:6b:bf:54:a8:4d:88:97:43: ef:c6:d3:d0:b9:81:c2:8b:53:a6:1c:0f:62:37:12:e3:f0:51: 7b:53:5e:75:cd:5b:2f:29:43:9b:16:85:5e:d0:c4:25:82:f4: 95:3b:60:52:8f:b0:c2:39:3f:24:6b:36:bf:34:54:57:a4:80: 11:b2:4f:e2:89:ea:22:d4:53:7b:46:4d:ad:87:e1:e3:82:00: d2:be:31:59:4f:29:8f:6c:d9:83:77:4c:d6:fc:49:d7:08:60: 55:78:ac:41:bd:fe:fd:1d:91:eb:b8:db:21:6b:45:9d:a9:f8: 66:53:b4:ee:3c:44:a8:16:8e:f0:c1:44:ea:e8:52:e0:5e:4e: c8:34:55:52:c4:12:0f:d1:b5:09:ed:10:26:a6:5c:62:f8:1e: 56:8c:80:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/36HDYk7bZQ4E/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MjE1NzViYTMtYzg1MS00Yjc1LWE2MTEtNGIyZjllY2FhMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5UXVu+GRvd4nOoevDnIsUH42qhNvxPAzumt RdjrTypvcnAIkgdwp5C71vQPTw/PURyA2rrqSrKBMDRoBuUgmu+FbgVAyNM3SnDZ 8Dtq51Qnpxks5KqFAS8VaXiq1yhb7nFZmpLzVPCvJe/JdlQRHYcz4BnJDJTud/cm ZpnBgo/fRCztPrjEnF5Re8yX6vOG2pievnzyEiOnd2PootFeUv1KVuo2qREPWf7i RXFGq9/xOKTyrY6cxgHNpWehJ4cCSuObzKPaNSR7ahz6kCPe6GexG0YMGtdcIGJx d9v5WTi9DFvB/9hxAw3iYG8AltmzBFTj3tFo2pKaTkvcJzYcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvXmQcxD51XUMKrSYX4B5CbtRESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjc5MzhlOWMtMzE5Mi0z NzkzLWFmMzAtMDQyYTA1MjQ1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC9+KdQdWxt4f9nevVyU99kCPr2B9inxBKG41dNcQhH4iGHx9g23YT3 DoSsldnxBHfzIi7q1fogv6U4uHcl0uVl1JuLCW/4WcrbK+3L3zs8HGFbkbtRBaaw P9dVSBNXcaDeqAxrv1SoTYiXQ+/G09C5gcKLU6YcD2I3EuPwUXtTXnXNWy8pQ5sW hV7QxCWC9JU7YFKPsMI5PyRrNr80VFekgBGyT+KJ6iLUU3tGTa2H4eOCANK+MVlP KY9s2YN3TNb8SdcIYFV4rEG9/v0dkeu42yFrRZ2p+GZTtO48RKgWjvDBROroUuBe Tsg0VVLEEg/RtQntECamXGL4HlaMgKw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:37 2026 by rpki-client