$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa File: 661fc493-e5f2-3843-b87f-cec243b8a026.roa (raw, json) Hash identifier: wjJ/GLYVsKqgRMhzLzHeiZWVV9/RYhH0NzpB9DY877g= Subject key identifier: 2E:4E:EF:10:7C:42:A4:BC:68:05:FA:DA:7A:72:A8:B9:5B:90:7B:11 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624BC62AB6E092DB517180 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:c6:2a:b6:e0:92:db:51:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=1805b1cf-931a-4385-b049-211805c0001e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:7f:ce:98:92:b2:f6:45:03:80:c6:7c:2f: 78:2a:f6:e1:3c:64:26:c5:db:8f:57:95:b1:94:88: 82:e5:2f:58:32:f2:3c:67:0e:2c:9b:20:b4:2d:20: 9d:bb:b5:72:3c:dd:eb:af:c5:bd:80:12:8f:a3:ef: ba:ea:b5:0c:a3:40:a6:f4:0f:92:20:82:c4:75:df: 4a:24:b9:ae:4e:06:39:f5:1c:4b:17:e6:e6:b9:e4: bc:2f:3b:e1:ef:36:0d:91:15:41:2e:b1:83:2f:34: fb:8c:b7:c5:69:fc:d2:06:8f:a2:d4:54:ec:1f:55: fe:16:df:de:86:b0:7c:6f:07:f6:33:9e:9a:e7:60: 12:d5:e9:25:94:32:41:42:10:e5:f7:b4:48:0d:c3: 0f:63:b9:d7:c5:44:f5:b5:46:fa:39:72:88:89:86: 83:ac:98:99:f6:71:3f:a9:84:cb:a4:90:b4:76:40: 52:e2:2c:13:20:ab:c4:a8:d9:97:5a:62:d6:90:20: 1f:11:22:6a:5c:c6:fd:1a:fe:28:24:15:1c:b8:1b: f5:3a:b7:a9:8a:74:df:d7:ff:0a:84:05:ce:5d:29: 2e:c1:a0:24:40:54:69:d7:49:38:84:1d:58:f1:e0: c4:4d:b2:9c:0b:62:82:d4:9f:8e:c0:78:85:98:2d: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4E:EF:10:7C:42:A4:BC:68:05:FA:DA:7A:72:A8:B9:5B:90:7B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b5:7a:ba:0e:90:6a:1b:46:64:6d:58:dc:11:6b:37:60:f8: 89:d0:ac:85:a7:e7:3b:a5:a6:84:a3:66:af:9a:52:08:62:30: 84:d0:f2:3a:41:e7:41:e8:ec:94:c5:24:1d:43:96:ff:53:e0: ba:e5:01:92:1c:c0:3f:64:ed:71:0b:3e:07:d0:48:05:b5:a8: 47:d9:53:67:ae:2c:bd:47:4e:37:9d:9b:9f:02:e4:2a:b4:c7: 6e:a6:6c:fe:e4:39:a8:87:a9:29:96:0a:c1:51:8a:04:77:0b: b8:28:54:2f:37:01:e8:4c:00:15:cb:5a:73:26:68:21:c9:67: cd:5d:7c:f0:79:96:76:78:ff:70:3b:c8:dd:35:a5:6f:be:3e: a2:b8:88:4d:cf:c6:43:99:a9:29:3e:1b:12:57:f9:b9:4f:79: 87:8d:b8:79:bb:dd:8e:f6:61:e5:da:80:30:af:40:6b:dc:72: f8:a2:10:c5:0c:9d:35:e0:0e:8a:f0:d8:71:a3:36:ba:af:d5: c0:b3:7d:51:f7:49:64:bb:ee:e3:24:42:ae:03:12:30:18:26: 40:fe:b6:4b:a6:cb:0e:d9:2c:8f:aa:e9:05:c4:cb:55:32:29: f9:1b:04:c0:16:fd:01:c7:38:92:f7:cd:20:43:ff:4e:df:d0: ec:86:50:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkvGKrbgkttRcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MTgwNWIxY2YtOTMxYS00Mzg1LWIwNDktMjExODA1YzAwMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYx/zpiSsvZFA4DGfC94KvbhPGQmxduPV5Wx lIiC5S9YMvI8Zw4smyC0LSCdu7VyPN3rr8W9gBKPo++66rUMo0Cm9A+SIILEdd9K JLmuTgY59RxLF+bmueS8Lzvh7zYNkRVBLrGDLzT7jLfFafzSBo+i1FTsH1X+Ft/e hrB8bwf2M56a52AS1ekllDJBQhDl97RIDcMPY7nXxUT1tUb6OXKIiYaDrJiZ9nE/ qYTLpJC0dkBS4iwTIKvEqNmXWmLWkCAfESJqXMb9Gv4oJBUcuBv1OrepinTf1/8K hAXOXSkuwaAkQFRp10k4hB1Y8eDETbKcC2KC1J+OwHiFmC1zDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5O7xB8QqS8aAX62npyqLlbkHsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNjYxZmM0OTMtZTVmMi0z ODQzLWI4N2YtY2VjMjQzYjhhMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq1eroOkGobRmRtWNwRazdg+InQrIWn5zulpoSjZq+aUghiMITQ8jpB 50Ho7JTFJB1Dlv9T4LrlAZIcwD9k7XELPgfQSAW1qEfZU2euLL1HTjedm58C5Cq0 x26mbP7kOaiHqSmWCsFRigR3C7goVC83AehMABXLWnMmaCHJZ81dfPB5lnZ4/3A7 yN01pW++PqK4iE3PxkOZqSk+GxJX+blPeYeNuHm73Y72YeXagDCvQGvccviiEMUM nTXgDorw2HGjNrqv1cCzfVH3SWS77uMkQq4DEjAYJkD+tkumyw7ZLI+q6QXEy1Uy KfkbBMAW/QHHOJL3zSBD/07f0OyGUGA= -----END CERTIFICATE-----Generated at Mon Sep 21 09:54:42 2026 by rpki-client