$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa File: 2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (raw, json) Hash identifier: 9WmFubnS0A0qPAgaKcODaP8IvLy6lohwp+xSKo0bGE4= Subject key identifier: FA:E4:BA:D7:3D:B7:D9:18:C4:16:02:DA:8E:15:4D:12:0B:56:9F:1C Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7EFD41375B03E4DE5680 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7e:fd:41:37:5b:03:e4:de:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=f9dd6638-012d-4e03-8713-096e60ba886a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:22:5f:61:ca:9f:00:a3:43:a8:90:b8:a2: bc:f1:1c:be:34:15:f1:21:3e:b1:a0:34:bf:a0:6d: 2d:b3:d9:54:1a:eb:70:d4:da:ff:ab:1a:c2:b6:0c: 7f:91:30:3f:29:8c:16:7f:5a:92:22:60:65:6e:07: a8:cc:6d:d3:e1:51:fd:53:50:8f:f8:b4:37:43:48: 82:0f:5f:a6:11:b5:4c:73:5f:79:40:8f:8a:96:08: 15:4c:13:53:27:ae:93:79:7c:00:d2:98:95:d3:3b: 1e:e7:a6:9a:39:0c:3d:da:de:2e:a1:10:ad:e7:ee: 94:66:64:70:9a:86:73:9e:d9:da:30:a3:d6:a1:7a: 36:d5:b1:28:f1:63:f6:fa:1b:85:3a:f4:fe:33:64: ff:94:f0:cd:d0:5f:58:15:be:48:66:55:10:28:40: 4a:d0:cc:ae:9b:88:4b:aa:cb:01:2c:d9:83:19:52: 03:f8:1c:c9:cc:36:0a:3a:79:31:6f:5e:53:9f:a6: 28:36:4f:8d:e7:3c:50:d1:72:b6:ed:1c:1c:f2:fc: 32:8b:66:79:b6:dd:b5:1b:f7:fc:dc:1e:60:e9:d9: 7b:29:7f:43:c7:7c:b7:48:be:2a:9a:ee:c0:24:01: b9:77:9e:1b:83:46:6a:53:dc:df:f2:d1:78:31:87: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:BA:D7:3D:B7:D9:18:C4:16:02:DA:8E:15:4D:12:0B:56:9F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9d:af:2e:d9:f3:18:99:2e:c0:72:71:be:51:67:ba:3d:87: de:e5:3f:01:e5:78:36:d9:5d:05:af:5a:a9:d6:ce:b7:b8:37: 9c:b9:a4:78:93:57:60:71:b0:5e:36:b1:a1:52:4a:08:43:00: 0b:05:9b:67:21:bd:32:00:9b:71:97:7c:ac:fd:a0:9a:1f:b7: 9c:bc:f4:f0:83:0d:80:95:99:e5:d3:b5:a4:2b:b7:68:74:21: c9:b4:25:82:21:54:d0:e1:5d:7a:15:a2:b1:01:e3:ea:93:f4: 8c:fc:1b:de:64:2f:e3:89:e8:d0:fd:23:46:63:a3:22:0e:97: c4:82:a5:3e:46:97:76:36:f3:dc:cd:26:a8:16:24:d7:28:e2: 5d:c8:94:ee:be:6b:c2:95:be:96:b3:a4:32:53:b7:43:78:93: 7c:b7:7a:fa:5e:ed:5d:83:6c:95:de:df:bc:63:41:d4:aa:28: 9c:f1:63:22:58:b0:bf:bb:44:80:e4:18:d3:37:2a:b3:1c:ae: 2c:f7:64:0f:a3:16:5b:21:c3:32:9b:1d:08:ff:5d:d6:7b:ec: d7:8a:0c:a1:4c:68:bd:0d:d6:8b:c6:2d:ef:cb:e0:44:a1:d6: 21:c5:21:f8:17:d1:49:3d:2b:db:d2:a3:e1:e5:a5:2a:6d:f0: e4:7f:37:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/379QTdbA+TeVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZjlkZDY2MzgtMDEyZC00ZTAzLTg3MTMtMDk2ZTYwYmE4ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitkiX2HKnwCjQ6iQuKK88Ry+NBXxIT6xoDS/ oG0ts9lUGutw1Nr/qxrCtgx/kTA/KYwWf1qSImBlbgeozG3T4VH9U1CP+LQ3Q0iC D1+mEbVMc195QI+KlggVTBNTJ66TeXwA0piV0zse56aaOQw92t4uoRCt5+6UZmRw moZzntnaMKPWoXo21bEo8WP2+huFOvT+M2T/lPDN0F9YFb5IZlUQKEBK0Myum4hL qssBLNmDGVID+BzJzDYKOnkxb15Tn6YoNk+N5zxQ0XK27Rwc8vwyi2Z5tt21G/f8 3B5g6dl7KX9Dx3y3SL4qmu7AJAG5d54bg0ZqU9zf8tF4MYf6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrkutc9t9kYxBYC2o4VTRILVp8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMmJiZDhhNDYtMmNiYS0z OGExLTg1MjktMWFjY2JiMDEyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADydry7Z8xiZLsBycb5RZ7o9h97lPwHleDbZXQWvWqnWzre4N5y5pHiT V2BxsF42saFSSghDAAsFm2chvTIAm3GXfKz9oJoft5y89PCDDYCVmeXTtaQrt2h0 Icm0JYIhVNDhXXoVorEB4+qT9Iz8G95kL+OJ6ND9I0ZjoyIOl8SCpT5Gl3Y289zN JqgWJNco4l3IlO6+a8KVvpazpDJTt0N4k3y3evpe7V2DbJXe37xjQdSqKJzxYyJY sL+7RIDkGNM3KrMcriz3ZA+jFlshwzKbHQj/XdZ77NeKDKFMaL0N1ovGLe/L4ESh 1iHFIfgX0Uk9K9vSo+HlpSpt8OR/NwE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:55 2026 by rpki-client