$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa File: 43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa (raw, json) Hash identifier: E1IcIGuGzCB5BXY8vwwEt/C/Ux/SkRy5K9qZF06wL1E= Subject key identifier: 56:76:9C:F5:B9:90:EF:AF:E3:63:AF:3C:46:2B:A3:C4:D8:20:3B:66 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7E7B2A131C24F3625780 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7e:7b:2a:13:1c:24:f3:62:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=7e3b78cd-2b15-42f2-b2b6-61d7b7b32a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:7b:cd:e9:e9:37:3b:e6:67:07:cc:19:a4: 47:6f:ed:69:ab:45:95:be:0e:c0:49:d7:4d:fa:16: f7:aa:da:c8:09:a9:90:b8:16:b9:af:cd:79:ed:60: 1e:86:1a:0a:bc:cd:f8:1e:70:4c:ce:7d:1e:37:57: 0d:7d:61:a6:84:5f:24:db:47:02:56:47:50:6a:a0: 5b:e4:f8:5d:ae:f1:82:a1:0d:37:b7:15:01:16:26: 22:1d:dc:e7:26:fc:05:ed:7c:e0:40:ea:60:c7:70: ef:36:94:b7:49:67:a8:8f:8c:c4:fc:ee:41:b1:e2: eb:57:7b:54:3c:36:c5:00:cd:09:e9:90:95:9a:8e: 52:fb:14:1f:cf:28:88:9d:85:4f:d4:6d:58:1c:db: 18:f4:80:e2:6f:b0:81:34:b3:53:de:0c:42:94:be: 5b:29:95:26:e1:63:20:0c:e5:5c:25:d6:18:f7:cc: f8:39:3a:e5:da:f8:fd:be:4d:f6:39:19:bf:b8:16: 88:fa:19:ab:d4:83:a9:66:96:af:ff:34:52:67:54: 1f:e1:00:53:40:51:98:8a:0d:ee:12:15:b5:3a:99: 95:6f:5b:36:d4:d2:82:dd:62:df:e0:87:a4:d8:97: 32:32:19:57:0d:98:83:73:96:f1:c5:b2:35:89:50: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:9C:F5:B9:90:EF:AF:E3:63:AF:3C:46:2B:A3:C4:D8:20:3B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:bc:1f:63:e9:66:c3:85:64:2f:74:da:38:a5:5d:0b:48:88: 17:18:a6:fd:b7:cd:d5:9f:49:9f:93:38:bb:89:d7:d0:d2:bd: 7d:63:91:81:91:3c:b3:fb:c5:15:2e:87:db:9b:da:22:c3:31: 74:b2:5c:df:58:59:2d:fa:fb:cb:17:0d:4c:6c:c4:56:f6:bb: 5b:c4:6f:45:24:e1:97:dd:0c:ed:5a:60:97:cf:dc:0f:6a:ba: 0a:c8:26:e7:ce:f5:bf:b4:08:09:ae:85:90:49:b3:8d:4e:60: 4d:b9:96:8b:d4:a5:16:de:ba:15:f6:ef:2d:5c:45:6a:92:a4: 2f:5c:ea:8b:d0:5d:98:f1:d5:bb:d2:ba:9b:6c:25:3c:58:5e: a3:97:a6:fb:fc:41:17:da:b2:bc:49:27:b1:93:c9:6f:fc:e2: 79:7a:0c:7c:37:c8:5a:75:ab:ca:2c:98:98:27:f2:ef:31:34: 51:c3:ff:78:c1:54:07:ed:09:0d:da:a8:d1:1f:ce:33:33:ac: f9:88:fe:f4:2a:20:bb:b0:57:5f:9c:dc:69:22:ee:91:08:f7: 8d:18:ab:05:8c:55:5d:0c:c0:45:1d:60:59:04:55:3d:95:ef: 32:68:f2:48:c7:98:96:2e:ab:f7:6f:52:36:f4:31:16:f5:03: d9:8d:ca:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/357KhMcJPNiV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk N2UzYjc4Y2QtMmIxNS00MmYyLWIyYjYtNjFkN2I3YjMyYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4R7zenpNzvmZwfMGaRHb+1pq0WVvg7ASddN +hb3qtrICamQuBa5r8157WAehhoKvM34HnBMzn0eN1cNfWGmhF8k20cCVkdQaqBb 5PhdrvGCoQ03txUBFiYiHdznJvwF7XzgQOpgx3DvNpS3SWeoj4zE/O5BseLrV3tU PDbFAM0J6ZCVmo5S+xQfzyiInYVP1G1YHNsY9IDib7CBNLNT3gxClL5bKZUm4WMg DOVcJdYY98z4OTrl2vj9vk32ORm/uBaI+hmr1IOpZpav/zRSZ1Qf4QBTQFGYig3u EhW1OpmVb1s21NKC3WLf4Iek2JcyMhlXDZiDc5bxxbI1iVBcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ2nPW5kO+v42OvPEYro8TYIDtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNDNmZWExYjgtMGM5Yy0z NzZjLWFmNWMtODNmNWIzYjY4NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC8H2PpZsOFZC902jilXQtIiBcYpv23zdWfSZ+TOLuJ19DSvX1jkYGR PLP7xRUuh9ub2iLDMXSyXN9YWS36+8sXDUxsxFb2u1vEb0Uk4ZfdDO1aYJfP3A9q ugrIJufO9b+0CAmuhZBJs41OYE25lovUpRbeuhX27y1cRWqSpC9c6ovQXZjx1bvS uptsJTxYXqOXpvv8QRfasrxJJ7GTyW/84nl6DHw3yFp1q8osmJgn8u8xNFHD/3jB VAftCQ3aqNEfzjMzrPmI/vQqILuwV1+c3Gki7pEI940YqwWMVV0MwEUdYFkEVT2V 7zJo8kjHmJYuq/dvUjb0MRb1A9mNyh0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:01 2026 by rpki-client