$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa File: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (raw, json) Hash identifier: u4sD6WA7ucr5zBI/3nJhND2tHYUaG/MYnsaqqcbHQMM= Subject key identifier: F9:E9:D7:0B:34:4A:5A:5A:52:10:66:8D:F4:2C:AA:C6:0D:74:B2:11 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624BDE8CF59ECB82A5F600 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:de:8c:f5:9e:cb:82:a5:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=e18996bd-491d-4656-b82f-a10ec9119db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:a7:21:19:c1:2a:fc:c9:57:0a:c2:3a:76: 38:14:3a:ab:0a:23:67:80:46:f2:92:59:eb:a1:4a: 4d:69:43:2d:38:cd:f9:a6:b8:ea:40:a8:79:0d:d2: 75:a1:49:9c:6e:ac:e0:2f:b4:26:54:e6:db:3b:31: d1:94:50:b1:71:3d:ae:7e:d9:49:3f:6e:99:90:fe: e4:e0:ef:b6:a3:b8:97:75:ae:92:1e:30:9f:da:f3: 3c:c8:d7:40:5e:fd:94:09:0e:c2:65:ef:96:cb:76: ec:38:a9:7e:8d:52:0d:c5:65:b1:05:4f:9e:c1:ba: 7f:8d:a6:d7:44:c0:58:ca:e6:d6:7f:51:3b:8f:c0: 74:d2:2c:9d:4a:86:d2:70:8a:5a:ab:51:ec:9d:00: 34:43:f7:45:7f:1c:fb:28:a7:6e:e8:66:16:8e:dd: 54:84:b8:3a:25:8b:ad:72:33:45:3f:01:ba:b8:be: 5d:ca:20:69:8f:3e:4c:76:9b:3d:08:e3:bb:29:88: 14:3e:e1:0b:ca:ac:a7:9c:ab:3d:05:7e:ad:d1:3c: cc:b3:81:c8:f7:11:4d:ec:14:90:e3:ed:49:30:65: d7:a8:a2:88:91:db:5b:7c:01:88:95:f7:90:c7:9e: 96:9a:61:9f:75:f5:7c:e9:24:08:9f:56:1f:0a:7e: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:D7:0B:34:4A:5A:5A:52:10:66:8D:F4:2C:AA:C6:0D:74:B2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5c:db:c1:03:ce:c2:0a:48:34:44:11:49:54:d4:d8:c5:aa: ec:3b:3c:a9:0d:52:09:81:45:40:b9:a8:f9:4a:45:62:96:13: cc:30:13:f0:45:8d:02:5b:1f:33:a0:f0:2b:08:8e:d2:ca:ba: 85:2f:0a:6a:82:e2:63:29:47:a6:3b:7f:35:28:f3:43:db:61: 32:68:38:41:71:31:2d:8e:f3:a4:a3:cc:3d:e5:15:4d:51:ce: ff:89:90:ac:53:a6:7e:07:3d:89:a3:68:71:b0:7e:3c:ee:30: e2:22:a9:a4:27:1c:de:77:1d:5a:f4:c1:36:05:33:5b:66:b1: e5:c9:de:5a:69:3f:2e:49:54:2e:e6:30:00:d0:83:d5:04:ac: 2d:2d:eb:bb:4e:93:30:b5:2d:a9:2d:41:9e:2b:aa:1f:e0:8d: 70:93:ab:bd:21:96:7a:b4:74:e0:b8:3a:66:bc:c6:fe:3d:96: 69:d3:eb:84:f0:d3:52:38:b6:b6:cb:8e:a6:02:e9:93:3d:d5: 9e:3f:19:77:6a:4e:32:bf:e5:b2:9d:d1:10:02:c7:b6:d1:7d: 89:1f:f7:66:c3:9f:03:a2:72:ad:36:f8:1c:68:e3:16:f9:bc: 1c:27:bb:01:b2:a5:e8:5f:ec:48:07:80:c3:f8:08:13:f8:3a: a1:91:a7:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkvejPWey4Kl9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTE4OTk2YmQtNDkxZC00NjU2LWI4MmYtYTEwZWM5MTE5ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9KnIRnBKvzJVwrCOnY4FDqrCiNngEbyklnr oUpNaUMtOM35prjqQKh5DdJ1oUmcbqzgL7QmVObbOzHRlFCxcT2uftlJP26ZkP7k 4O+2o7iXda6SHjCf2vM8yNdAXv2UCQ7CZe+Wy3bsOKl+jVINxWWxBU+ewbp/jabX RMBYyubWf1E7j8B00iydSobScIpaq1HsnQA0Q/dFfxz7KKdu6GYWjt1UhLg6JYut cjNFPwG6uL5dyiBpjz5Mdps9COO7KYgUPuELyqynnKs9BX6t0TzMs4HI9xFN7BSQ 4+1JMGXXqKKIkdtbfAGIlfeQx56WmmGfdfV86SQIn1YfCn4H5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnp1ws0SlpaUhBmjfQsqsYNdLIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMWJlODQ2OGEtZThlZC0z ZmRlLWE1MmItZGExY2UxMWY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApc28EDzsIKSDREEUlU1NjFquw7PKkNUgmBRUC5qPlKRWKWE8wwE/BF jQJbHzOg8CsIjtLKuoUvCmqC4mMpR6Y7fzUo80PbYTJoOEFxMS2O86SjzD3lFU1R zv+JkKxTpn4HPYmjaHGwfjzuMOIiqaQnHN53HVr0wTYFM1tmseXJ3lppPy5JVC7m MADQg9UErC0t67tOkzC1LaktQZ4rqh/gjXCTq70hlnq0dOC4Oma8xv49lmnT64Tw 01I4trbLjqYC6ZM91Z4/GXdqTjK/5bKd0RACx7bRfYkf92bDnwOicq02+Bxo4xb5 vBwnuwGypehf7EgHgMP4CBP4OqGRp7w= -----END CERTIFICATE-----Generated at Mon Sep 21 16:35:42 2026 by rpki-client