$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7332e9a4-0787-3148-ac49-59abb3ffcd35.roa File: 7332e9a4-0787-3148-ac49-59abb3ffcd35.roa (raw, json) Hash identifier: wXzrlZu07oQPbReqOjxrgPuHWHnOTAyUGTb77FNY3c8= Subject key identifier: 7B:72:4E:BA:E5:6F:3D:EE:0D:52:C4:B2:D8:5B:D0:11:D5:EE:E1:57 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624B60C56B07023BB2BF80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7332e9a4-0787-3148-ac49-59abb3ffcd35.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:60:c5:6b:07:02:3b:b2:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=b15657eb-8566-420b-a49e-fc2700f0ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:3d:a7:a0:82:4c:0d:b1:9e:ca:b7:9b:df: 97:f4:e3:a3:ed:c4:82:ce:f5:80:f6:54:8a:7d:24: e6:63:51:b2:22:08:73:26:09:31:86:63:70:64:3d: 19:a9:0c:59:b9:52:4f:ec:25:6f:df:ac:f2:29:af: 6c:14:ca:03:65:de:1b:7d:3a:5c:45:c2:ab:89:01: 29:c0:38:ee:c9:56:8f:45:94:2f:c9:d7:91:b0:03: fb:eb:2f:b6:ab:0c:22:ac:a8:43:04:be:e9:89:8d: 45:cb:a7:66:f4:55:db:f6:5b:bb:45:92:bc:17:97: 8b:aa:3f:84:a3:b9:a6:1c:cf:99:47:2c:27:7e:f7: 65:88:56:2a:20:c5:b1:16:29:14:2c:05:3b:ca:be: ab:95:24:0f:32:d2:e1:13:63:d3:27:3c:e1:f0:57: 46:55:9f:9a:af:65:84:ca:fc:ca:2e:46:ea:5c:42: d0:42:4b:bb:b8:f2:93:ca:c2:60:a8:06:8b:6b:2a: 61:58:16:43:20:17:5b:55:a1:5b:a3:14:29:68:b2: ef:91:c9:73:74:45:4e:ca:7c:91:a9:4f:80:1f:77: cc:c0:63:6c:3c:74:ae:e2:4f:72:92:ca:39:70:15: 1a:26:a5:44:61:a0:1f:e4:de:7d:37:f9:1f:30:b8: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:72:4E:BA:E5:6F:3D:EE:0D:52:C4:B2:D8:5B:D0:11:D5:EE:E1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7332e9a4-0787-3148-ac49-59abb3ffcd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:16:6f:e7:40:3c:2a:f7:c7:74:3c:6d:15:1d:86:a9:17:9e: 34:02:d5:2e:ef:35:8b:7f:77:4f:8f:1b:68:b4:aa:0c:3c:ea: 61:f1:1e:08:2e:32:8a:30:b6:37:5e:e3:9d:0b:67:44:ff:34: d7:87:a8:3c:1a:d9:aa:72:d9:91:56:28:1f:d0:50:ab:7b:d7: 08:a0:02:e1:7b:f8:79:92:c4:38:1d:ae:b7:03:67:da:25:b2: 2d:a5:df:89:fe:38:1e:21:5e:22:c4:e5:a6:a1:c4:02:66:0d: 5d:37:8c:9f:37:db:e1:0e:7b:6c:74:0e:c0:fb:06:36:90:98: 89:ba:53:9e:f1:e3:1f:76:36:ab:78:73:45:cf:f5:9a:04:46: 3d:1b:b3:65:d9:9c:53:34:eb:ea:19:61:db:c5:d0:9b:b9:c5: 55:1b:17:f2:7e:e4:d1:a9:34:ad:00:02:67:8e:07:88:8b:23: 0c:e7:57:a0:d1:c2:4d:a5:ee:3d:3f:4d:10:b0:64:4c:3f:78: b6:7d:db:e0:a8:53:75:29:dc:5f:0e:e0:e8:3e:02:fd:4c:c0: 04:1c:f5:1e:d0:01:5e:ce:61:a0:55:37:fe:28:03:04:70:af: 4a:e3:66:22:a8:e3:11:70:50:82:3f:53:ec:3b:7e:3e:60:f1: ad:7c:41:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYktgxWsHAjuyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjE1NjU3ZWItODU2Ni00MjBiLWE0OWUtZmMyNzAwZjBlY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHI9p6CCTA2xnsq3m9+X9OOj7cSCzvWA9lSK fSTmY1GyIghzJgkxhmNwZD0ZqQxZuVJP7CVv36zyKa9sFMoDZd4bfTpcRcKriQEp wDjuyVaPRZQvydeRsAP76y+2qwwirKhDBL7piY1Fy6dm9FXb9lu7RZK8F5eLqj+E o7mmHM+ZRywnfvdliFYqIMWxFikULAU7yr6rlSQPMtLhE2PTJzzh8FdGVZ+ar2WE yvzKLkbqXELQQku7uPKTysJgqAaLayphWBZDIBdbVaFboxQpaLLvkclzdEVOynyR qU+AH3fMwGNsPHSu4k9ykso5cBUaJqVEYaAf5N59N/kfMLjjqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtyTrrlbz3uDVLEsthb0BHV7uFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzMzMmU5YTQtMDc4Ny0z MTQ4LWFjNDktNTlhYmIzZmZjZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoWb+dAPCr3x3Q8bRUdhqkXnjQC1S7vNYt/d0+PG2i0qgw86mHxHggu Moowtjde450LZ0T/NNeHqDwa2apy2ZFWKB/QUKt71wigAuF7+HmSxDgdrrcDZ9ol si2l34n+OB4hXiLE5aahxAJmDV03jJ832+EOe2x0DsD7BjaQmIm6U57x4x92Nqt4 c0XP9ZoERj0bs2XZnFM06+oZYdvF0Ju5xVUbF/J+5NGpNK0AAmeOB4iLIwznV6DR wk2l7j0/TRCwZEw/eLZ92+CoU3Up3F8O4Og+Av1MwAQc9R7QAV7OYaBVN/4oAwRw r0rjZiKo4xFwUII/U+w7fj5g8a18QQs= -----END CERTIFICATE-----Generated at Tue Sep 22 18:01:57 2026 by rpki-client