$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa File: 43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa (raw, json) Hash identifier: VHf8XLTTnvFE58SgH2r6DFxnXh1rBEDjjf/s+UAmfbE= Subject key identifier: F8:6F:27:88:A1:03:74:32:07:51:12:01:B7:2D:E9:FC:6D:E8:4B:14 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624B2E6142F1E210923400 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:2e:61:42:f1:e2:10:92:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=10d6b7be-0ad7-4684-89c2-5a0757812cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:52:96:f7:a2:98:b4:58:09:7e:bc:8c:ca: 6d:e8:e2:20:28:d0:cd:ac:93:72:22:8b:97:f8:ab: 8d:c1:0c:a7:0a:3c:b3:1b:c2:79:24:e5:b3:22:78: 66:26:fa:3a:57:71:5c:25:73:c2:20:20:1d:6b:81: 60:ae:0f:cb:23:ae:94:e7:14:99:75:04:2c:30:f1: ec:ad:88:20:71:26:db:c5:ae:90:0b:e8:e1:5e:3b: b5:09:ea:7f:eb:ef:a3:b1:03:b9:c1:3e:42:10:85: 8d:3e:3a:3f:8e:a0:c5:7b:80:dd:5a:aa:2f:13:bf: bb:0f:97:cd:5b:5d:dc:24:64:3c:2a:32:a3:a9:9a: 8c:4d:c3:99:52:76:21:a2:2e:62:ba:e8:d8:a7:1e: eb:e3:16:d9:e8:d9:12:8c:a6:8d:53:26:f9:09:d1: d0:0b:a8:fd:e3:b3:56:8a:92:75:c2:3f:4d:15:06: ef:63:a7:1d:41:9c:b5:d2:f3:f0:9f:a2:dc:de:de: 7b:69:e5:c9:c2:4d:56:c9:61:bf:8b:1d:7c:63:32: 48:1e:63:d1:05:a0:2f:97:a9:cc:98:f1:38:03:a6: 3b:6f:d7:f1:f4:ac:ce:d7:f2:2b:48:e2:75:74:0c: b3:23:11:e8:2a:fd:5c:fa:77:55:32:71:bd:a7:01: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6F:27:88:A1:03:74:32:07:51:12:01:B7:2D:E9:FC:6D:E8:4B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6e:16:b2:b1:b4:cc:92:c9:74:35:cd:10:a5:73:3d:85:27: 37:b5:d7:01:61:6b:eb:20:b8:0f:36:82:68:f6:7f:47:b3:be: 5c:18:7a:58:1a:c0:26:12:3c:9e:e5:24:e5:b4:65:ba:82:ff: 55:73:e3:56:04:1c:a1:93:d9:8f:07:15:c7:e5:d6:7a:28:d5: 98:65:a3:c8:ed:b1:e5:03:79:f4:ad:40:66:da:83:d6:a2:54: 4b:67:0f:19:b2:e9:70:75:d1:ee:c0:0c:06:fb:64:7f:e7:87: 9b:0e:12:38:44:fc:fe:a3:8f:1c:d0:ec:ba:fc:c6:e4:7a:96: 36:96:54:cf:07:2f:82:2d:02:77:3c:ad:2d:3b:1a:a3:88:c2: a1:a8:dc:eb:16:86:3a:5c:12:0d:8d:ae:8d:a3:27:a9:fa:c6: 33:3f:07:dc:36:ec:e9:60:be:ff:07:f5:79:08:e4:dc:76:37: 0c:1f:35:b6:76:1e:cf:7b:5e:fc:a0:00:f6:ac:a3:9f:af:e5: 57:b5:aa:3c:3b:5c:a8:4d:32:40:4f:fb:4e:fd:c6:3d:76:4c: 49:2a:a7:7e:f5:4f:62:9a:5a:88:06:56:d8:70:9e:83:d0:6f: de:77:68:71:52:8c:09:12:16:53:46:e3:9a:a5:57:9d:74:1d: a8:b0:72:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYksuYULx4hCSNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MTBkNmI3YmUtMGFkNy00Njg0LTg5YzItNWEwNzU3ODEyY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDJSlveimLRYCX68jMpt6OIgKNDNrJNyIouX +KuNwQynCjyzG8J5JOWzInhmJvo6V3FcJXPCICAda4Fgrg/LI66U5xSZdQQsMPHs rYggcSbbxa6QC+jhXju1Cep/6++jsQO5wT5CEIWNPjo/jqDFe4DdWqovE7+7D5fN W13cJGQ8KjKjqZqMTcOZUnYhoi5iuujYpx7r4xbZ6NkSjKaNUyb5CdHQC6j947NW ipJ1wj9NFQbvY6cdQZy10vPwn6Lc3t57aeXJwk1WyWG/ix18YzJIHmPRBaAvl6nM mPE4A6Y7b9fx9KzO1/IrSOJ1dAyzIxHoKv1c+ndVMnG9pwFnOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhvJ4ihA3QyB1ESAbct6fxt6EsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNDNmZWExYjgtMGM5Yy0z NzZjLWFmNWMtODNmNWIzYjY4NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZuFrKxtMySyXQ1zRClcz2FJze11wFha+sguA82gmj2f0ezvlwYelga wCYSPJ7lJOW0ZbqC/1Vz41YEHKGT2Y8HFcfl1noo1Zhlo8jtseUDefStQGbag9ai VEtnDxmy6XB10e7ADAb7ZH/nh5sOEjhE/P6jjxzQ7Lr8xuR6ljaWVM8HL4ItAnc8 rS07GqOIwqGo3OsWhjpcEg2Nro2jJ6n6xjM/B9w27Olgvv8H9XkI5Nx2NwwfNbZ2 Hs97XvygAPaso5+v5Ve1qjw7XKhNMkBP+079xj12TEkqp371T2KaWogGVthwnoPQ b953aHFSjAkSFlNG45qlV510Haiwcnw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:26:53 2026 by rpki-client