$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: Xl6D8HXa4Cdpva7KwZkwSc1zdlQyVGVl+dTiKGfKAP0= Subject key identifier: 34:95:CE:F1:A5:CB:94:EE:B8:18:B3:38:C1:A4:9C:32:4B:79:83:7D Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7ECADBD518D29DC20F80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7e:ca:db:d5:18:d2:9d:c2:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=b87e7768-7594-4b19-9ba1-371273711520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:f7:3c:71:a9:b6:a3:d5:e9:0f:30:01:89: a7:e8:c6:94:c4:e2:bb:b0:43:0e:e9:4c:af:e8:59: d6:ea:0c:cb:03:8e:93:e6:dd:e9:6a:72:36:28:f1: 77:ee:74:72:0a:c7:6d:bf:c6:43:63:b1:b9:91:ba: 4c:3f:a4:0d:17:87:fa:2a:74:61:6f:ca:24:a1:4c: 08:a2:72:81:00:c9:6d:f8:dd:58:0a:14:43:51:e6: ac:af:a2:58:57:75:64:54:e2:02:27:16:49:c8:53: 88:4b:a6:8c:a9:f6:52:24:0d:80:04:bc:ee:20:cd: 5b:72:d5:04:12:6c:cf:fa:a4:44:02:10:2f:2c:a4: d2:65:a8:d3:08:38:21:0a:ba:2e:0a:dc:f4:31:7d: d6:46:39:76:b6:c6:1b:de:8c:0a:18:3e:51:bf:45: fc:f5:2e:9a:46:cd:ac:13:77:0d:4e:3d:e1:43:8b: 00:d2:f4:e9:e4:8d:61:ef:92:9d:fb:b8:1f:a3:a4: 49:ef:d3:41:30:fc:0f:7d:30:e1:16:cd:d5:cd:1b: 34:c2:7e:2e:a7:16:d1:9b:06:5f:b8:77:4d:70:3c: 99:88:a7:1a:3d:94:bd:df:a2:09:b3:c8:dd:8f:d9: 3d:89:51:48:2a:a3:36:54:68:72:e3:37:eb:ee:75: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:95:CE:F1:A5:CB:94:EE:B8:18:B3:38:C1:A4:9C:32:4B:79:83:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:43:26:f2:07:01:7c:77:14:bf:46:a5:de:ca:35:e2:83:5f: 9f:ca:43:cb:86:1a:f7:f3:5d:0e:04:98:c5:bd:0f:4e:34:44: 44:29:d9:22:0b:f2:13:c3:1f:97:78:2d:ea:43:59:f2:91:b8: 2e:83:96:be:fd:8a:e3:1c:48:f0:6e:60:b4:1d:25:a3:a1:1b: 18:e9:cf:8a:d6:6f:65:32:8d:67:e5:59:f0:e0:01:99:41:b0: 8d:56:a8:de:3c:74:bd:ea:2c:f7:dc:d4:d8:33:21:13:a2:ea: a3:e3:60:3e:4f:60:8f:47:d1:eb:47:0f:e7:88:de:be:36:c3: 9f:b2:f8:34:21:aa:d4:57:0a:f1:cf:3c:f0:de:49:b2:7f:c3: 0d:7a:d7:9c:63:d6:23:09:e9:2b:ff:de:b4:75:37:99:70:d2: 93:df:69:b9:1b:b5:9d:a0:40:64:b9:88:3d:ee:12:2c:a0:cc: 88:10:f4:b1:dd:f9:30:94:da:f0:4e:87:93:87:90:3a:12:8e: f7:70:88:1a:90:83:2e:e2:97:94:bb:a4:48:e1:0d:47:48:a4: 08:66:cb:26:ae:ca:c8:43:19:00:36:dd:f1:41:d3:8e:d2:cb: 64:f8:48:35:ef:e8:3c:f6:90:3d:16:90:00:86:ca:e2:e1:cf: 75:d5:2a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/37K29UY0p3CD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk Yjg3ZTc3NjgtNzU5NC00YjE5LTliYTEtMzcxMjczNzExNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2D3PHGptqPV6Q8wAYmn6MaUxOK7sEMO6Uyv 6FnW6gzLA46T5t3panI2KPF37nRyCsdtv8ZDY7G5kbpMP6QNF4f6KnRhb8okoUwI onKBAMlt+N1YChRDUeasr6JYV3VkVOICJxZJyFOIS6aMqfZSJA2ABLzuIM1bctUE EmzP+qREAhAvLKTSZajTCDghCrouCtz0MX3WRjl2tsYb3owKGD5Rv0X89S6aRs2s E3cNTj3hQ4sA0vTp5I1h75Kd+7gfo6RJ79NBMPwPfTDhFs3VzRs0wn4upxbRmwZf uHdNcDyZiKcaPZS936IJs8jdj9k9iVFIKqM2VGhy4zfr7nUtdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSVzvGly5TuuBizOMGknDJLeYN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5DJvIHAXx3FL9Gpd7KNeKDX5/KQ8uGGvfzXQ4EmMW9D040REQp2SIL 8hPDH5d4LepDWfKRuC6Dlr79iuMcSPBuYLQdJaOhGxjpz4rWb2UyjWflWfDgAZlB sI1WqN48dL3qLPfc1NgzIROi6qPjYD5PYI9H0etHD+eI3r42w5+y+DQhqtRXCvHP PPDeSbJ/ww1615xj1iMJ6Sv/3rR1N5lw0pPfabkbtZ2gQGS5iD3uEiygzIgQ9LHd +TCU2vBOh5OHkDoSjvdwiBqQgy7il5S7pEjhDUdIpAhmyyauyshDGQA23fFB047S y2T4SDXv6Dz2kD0WkACGyuLhz3XVKkI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:39 2026 by rpki-client