$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa File: d1206389-b9de-36cd-8068-be081e3c00dd.roa (raw, json) Hash identifier: gLpXAIMZMHMeV/9nKuK6HQI7Hz+D+qAarmffjC04Hco= Subject key identifier: 7C:92:78:30:4F:02:35:33:D9:44:95:E7:34:6B:EE:26:5E:6C:4B:96 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584E78FF7EBD4E326F7BB8CDE400 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 398210 IP address blocks: 168.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7e:bd:4e:32:6f:7b:b8:cd:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=2c55eb69-9c50-4ce0-beaa-94e8f351c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:83:87:99:48:68:7d:07:4b:d5:9a:10:eb: f9:e7:6b:1c:9b:e7:31:ab:5b:17:d5:95:c0:b1:3c: 6d:09:71:c6:58:f8:a7:8f:a7:25:4a:df:62:2b:25: fd:96:a8:8a:22:8f:07:eb:ce:ae:c3:6a:4a:cb:13: b4:3c:36:67:ef:72:ab:1c:4b:f8:e2:cb:48:7a:83: 20:95:9e:ad:e1:f9:e4:50:b0:6f:48:be:30:ea:5e: ab:bb:90:e6:f7:73:73:0a:72:a7:fc:5a:d8:6f:04: 44:e4:0d:26:37:3e:68:9a:60:05:6e:53:a3:03:0c: 72:5e:d0:76:0b:ee:c6:c8:5e:27:e2:86:4a:e1:86: c3:36:d6:28:64:6d:69:4b:47:bb:43:3f:8c:e4:ca: 04:21:b3:f9:7e:43:c6:bd:dd:c3:8b:e8:cf:35:de: f3:e7:7c:c4:cb:31:17:03:40:c3:6c:f2:14:72:2a: 59:f6:62:1e:ae:c6:52:2b:a8:8a:88:3c:b6:ec:35: 9a:30:74:77:41:a4:ac:ba:89:0f:85:88:ff:01:c7: 06:6f:5c:1a:05:43:00:2c:2b:96:89:ef:f7:fe:4c: 7d:2b:d1:c6:41:1b:1f:ea:79:ae:6f:22:a5:cc:72: e8:5f:33:be:05:36:44:5f:a2:7b:21:9c:b8:7a:09: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:92:78:30:4F:02:35:33:D9:44:95:E7:34:6B:EE:26:5E:6C:4B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b6:f9:c7:b3:15:d0:fe:1b:be:d4:9d:af:93:c2:6f:32:c6: 98:81:df:9c:de:62:ca:1b:8a:03:64:82:d0:41:18:06:d4:4f: 7d:61:66:ed:e5:2c:5d:29:d4:cf:b4:6e:ac:67:3c:6e:4d:a9: 73:08:d4:4c:f1:6c:9e:a3:54:8c:f8:ea:8c:46:88:75:ea:46: 58:cb:6f:d9:0b:df:83:90:85:1b:3e:3e:da:26:78:71:cb:1c: 10:88:43:a5:22:9e:60:f2:3e:05:a2:0a:3b:45:65:9f:6f:63: ea:19:cd:52:86:7c:d2:68:dc:3a:a6:87:6f:f6:36:91:90:ed: 78:8d:df:b9:d9:47:3b:cc:94:09:1b:0f:75:6d:39:7c:41:e6: ce:3a:68:86:ab:c2:42:8a:05:9f:a2:e0:50:ec:71:05:89:b8: 89:d3:e2:4c:21:86:2e:24:3a:44:d1:7e:72:fd:6f:ed:b2:36: 56:17:12:e5:08:9d:1a:62:99:b3:3d:3a:8d:6d:82:4e:bb:d5: 5f:7d:9a:41:09:69:8f:13:54:dc:60:70:ea:82:08:8c:f2:d9: e6:52:5a:12:e3:91:ae:aa:d2:0a:06:12:92:7d:1c:87:87:ae: 17:b1:00:e3:d7:56:ac:b7:5f:97:d7:43:1a:d3:43:09:eb:78: e2:1d:61:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/369TjJve7jN5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MmM1NWViNjktOWM1MC00Y2UwLWJlYWEtOTRlOGYzNTFjNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteqDh5lIaH0HS9WaEOv552scm+cxq1sX1ZXA sTxtCXHGWPinj6clSt9iKyX9lqiKIo8H686uw2pKyxO0PDZn73KrHEv44stIeoMg lZ6t4fnkULBvSL4w6l6ru5Dm93NzCnKn/FrYbwRE5A0mNz5ommAFblOjAwxyXtB2 C+7GyF4n4oZK4YbDNtYoZG1pS0e7Qz+M5MoEIbP5fkPGvd3Di+jPNd7z53zEyzEX A0DDbPIUcipZ9mIersZSK6iKiDy27DWaMHR3QaSsuokPhYj/AccGb1waBUMALCuW ie/3/kx9K9HGQRsf6nmubyKlzHLoXzO+BTZEX6J7IZy4egnIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHySeDBPAjUz2USV5zRr7iZebEuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDEyMDYzODktYjlkZS0z NmNkLTgwNjgtYmUwODFlM2MwMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG2+cezFdD+G77Una+Twm8yxpiB35zeYsobigNkgtBBGAbUT31hZu3l LF0p1M+0bqxnPG5NqXMI1EzxbJ6jVIz46oxGiHXqRljLb9kL34OQhRs+PtomeHHL HBCIQ6UinmDyPgWiCjtFZZ9vY+oZzVKGfNJo3Dqmh2/2NpGQ7XiN37nZRzvMlAkb D3VtOXxB5s46aIarwkKKBZ+i4FDscQWJuInT4kwhhi4kOkTRfnL9b+2yNlYXEuUI nRpimbM9Oo1tgk671V99mkEJaY8TVNxgcOqCCIzy2eZSWhLjka6q0goGEpJ9HIeH rhexAOPXVqy3X5fXQxrTQwnreOIdYd8= -----END CERTIFICATE-----Generated at Fri Jul 24 08:54:26 2026 by rpki-client