$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: ExnUTFAsg32BXo303M+mDZQBawdmWmMMYQQFfetxdO4= Subject key identifier: B8:B0:74:59:0B:EC:C5:7D:C1:5E:7C:42:BF:C0:8C:31:2D:A8:28:60 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7F52EDF3E59A1CF07980 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7f:52:ed:f3:e5:9a:1c:f0:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=0d097c26-442b-4c18-a3e3-181665d26690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:d2:c2:f9:b9:6a:75:a4:03:8d:ca:f1:34: f0:47:fa:93:d3:46:20:a1:c4:bd:43:b2:51:5e:f1: b3:2e:43:b6:12:5e:e9:a2:99:e2:9e:31:3a:0d:cf: 1c:8c:29:28:76:7c:3b:0d:ba:84:b6:a3:9e:42:f1: 07:34:71:37:bc:34:c2:5b:c1:23:d7:ae:68:b0:53: 39:1c:10:9f:7d:24:01:50:be:37:26:69:40:28:1b: 85:bc:2d:1b:8e:b6:d8:38:18:a9:c7:07:47:f6:3e: 68:28:6e:0e:59:08:fe:3b:7c:63:22:a3:74:e1:20: 2a:d5:f1:7d:34:25:6f:33:37:67:eb:96:c2:d6:12: 2b:30:66:cf:c9:09:96:c0:0f:30:ff:87:43:65:b3: 1a:4e:f9:dc:ce:93:df:32:9c:16:ff:ab:7a:b3:3b: ba:7e:3d:34:a6:3c:74:2e:bf:13:a4:59:4a:cd:ff: 19:5f:b6:de:78:70:c3:8c:a7:57:9f:7a:7e:df:07: 08:65:18:f7:b7:5e:a5:4a:81:5f:df:bf:f3:c5:fe: 99:9e:d9:5b:1f:0c:23:2c:99:aa:ef:54:0f:1a:5f: f0:ba:27:05:44:a9:81:95:9e:18:18:4f:14:71:36: e3:56:b4:c5:69:aa:25:7c:57:a5:80:84:da:87:60: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B0:74:59:0B:EC:C5:7D:C1:5E:7C:42:BF:C0:8C:31:2D:A8:28:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:10:2c:e9:b9:2a:eb:89:49:07:8d:f6:da:90:85:00:54:52: 03:10:2c:a6:cd:40:8b:8e:01:54:a1:5a:02:7c:76:f3:b6:52: 6e:a6:5f:c1:48:b2:76:02:f7:cf:0d:fd:97:92:0b:d8:ad:f5: 73:d0:07:21:58:c3:4f:3b:83:03:d2:77:5f:71:5e:3d:a3:31: fc:64:52:dc:96:f2:b7:ef:be:9a:b0:b6:59:a4:22:3a:a7:0b: 31:7c:a4:db:63:3c:ad:88:2e:6a:5c:75:7b:db:40:0f:41:64: 50:ed:1d:6e:11:24:a0:6e:be:52:5b:3b:2a:e0:6e:a0:72:0f: 41:df:9d:98:6d:65:7a:9d:5a:4c:cd:9f:8c:07:d9:a8:fd:af: 74:a0:1c:b1:81:96:de:40:7b:1c:43:1b:57:f6:a5:65:23:54: 91:3f:91:23:1a:59:a6:49:0d:5b:ed:a2:fa:34:b7:ac:7d:d5: 64:cc:4f:62:04:ec:c6:b0:e1:6a:ca:9c:e1:6e:08:44:46:e5: 8a:8e:5a:f2:0f:64:81:a5:72:db:7a:3b:02:8f:2a:bb:fb:46: bc:d0:31:74:a9:79:d2:4c:cd:24:73:7e:a0:6d:18:19:57:84: 18:57:cc:3e:ac:f7:5d:35:d8:bf:f6:eb:a3:07:c0:40:6c:03: 31:0a:6c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/39S7fPlmhzweYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MGQwOTdjMjYtNDQyYi00YzE4LWEzZTMtMTgxNjY1ZDI2NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt3Swvm5anWkA43K8TTwR/qT00YgocS9Q7JR XvGzLkO2El7popninjE6Dc8cjCkodnw7DbqEtqOeQvEHNHE3vDTCW8Ej165osFM5 HBCffSQBUL43JmlAKBuFvC0bjrbYOBipxwdH9j5oKG4OWQj+O3xjIqN04SAq1fF9 NCVvMzdn65bC1hIrMGbPyQmWwA8w/4dDZbMaTvnczpPfMpwW/6t6szu6fj00pjx0 Lr8TpFlKzf8ZX7beeHDDjKdXn3p+3wcIZRj3t16lSoFf37/zxf6ZntlbHwwjLJmq 71QPGl/wuicFRKmBlZ4YGE8UcTbjVrTFaaolfFelgITah2BHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiwdFkL7MV9wV58Qr/AjDEtqChgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUQLOm5KuuJSQeN9tqQhQBUUgMQLKbNQIuOAVShWgJ8dvO2Um6mX8FI snYC988N/ZeSC9it9XPQByFYw087gwPSd19xXj2jMfxkUtyW8rfvvpqwtlmkIjqn CzF8pNtjPK2ILmpcdXvbQA9BZFDtHW4RJKBuvlJbOyrgbqByD0HfnZhtZXqdWkzN n4wH2aj9r3SgHLGBlt5AexxDG1f2pWUjVJE/kSMaWaZJDVvtovo0t6x91WTMT2IE 7Maw4WrKnOFuCERG5YqOWvIPZIGlctt6OwKPKrv7RrzQMXSpedJMzSRzfqBtGBlX hBhXzD6s91012L/266MHwEBsAzEKbHo= -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:05 2026 by rpki-client