$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: +W7ceNmFqkhbtkt/xy1SBsUxBfkxt3YXZjwFshLL3+4= Subject key identifier: 8D:6B:7A:C8:75:79:08:44:4F:B4:FC:7D:27:D1:F4:5E:8A:74:57:82 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624C0CA27F9895D6242A00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4c:0c:a2:7f:98:95:d6:24:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=21f2b7c2-1863-4195-85b7-1ca823b19a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:15:64:99:78:5a:57:cf:ea:9d:95:ff:39: b3:7c:a1:5e:6e:a8:e5:3f:72:8c:b9:02:91:35:0e: b2:fa:46:b5:ce:8a:97:dc:91:d8:51:86:6a:97:6a: 25:63:f0:fd:a8:24:b2:ce:90:8f:dd:0f:b3:97:c1: c6:97:ca:46:66:be:49:18:17:a6:c8:a7:0c:82:59: 2b:21:e0:2b:75:2a:99:10:6c:0a:c4:12:bf:f1:b2: df:ac:3f:64:ef:54:1a:1d:be:68:7e:be:2a:82:e8: 80:9d:36:27:ee:cb:2d:32:34:b2:05:33:2a:a2:27: dd:88:31:98:65:cd:e0:d2:d2:20:50:78:7d:eb:c9: 61:fd:c5:8b:63:ed:17:4b:b4:a5:3f:a7:55:3e:3f: eb:8b:b3:45:8c:e5:26:94:f8:e8:8c:0c:4b:8f:34: 71:19:0c:48:d3:f9:89:e5:b4:a6:55:f2:14:77:d5: 6d:6b:76:3e:52:f1:cc:9a:fa:fa:6e:4c:e9:d4:b3: 7a:f6:f3:2a:93:87:0a:e3:d7:76:ec:31:5a:8f:98: 1d:72:e3:a7:29:96:af:c6:a1:78:1a:93:11:e4:f4: b1:d8:d1:bd:ca:c2:27:c4:ec:53:93:6b:9e:84:36: d9:a6:cb:ab:bd:96:22:07:ed:bc:4b:df:59:fb:f3: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6B:7A:C8:75:79:08:44:4F:B4:FC:7D:27:D1:F4:5E:8A:74:57:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5d:9a:c8:5e:df:1c:66:9f:45:88:6a:2f:c5:c6:37:74:de: ca:6f:90:57:95:53:9f:37:36:4b:86:e9:1e:e1:56:93:9a:d3: 0c:5a:b7:73:b3:b5:f6:24:dc:69:a9:84:d2:aa:7d:ce:7f:9d: 1b:97:39:54:22:4b:c2:85:ea:07:f2:d5:be:52:f6:df:6e:b8: a9:da:3d:d3:2b:d0:20:83:72:ab:91:16:3b:62:d9:bd:34:0a: 8d:4e:61:2b:d9:81:9e:3f:c6:5e:86:04:e3:ad:cc:87:a6:a1: ce:b8:d7:2a:dc:9b:52:b8:25:8d:e3:c9:fb:52:56:5b:25:8c: 75:f5:93:3f:15:b8:f9:f2:0a:c1:84:e5:60:60:9b:c4:4e:d8: 07:3d:82:35:8c:54:f4:27:eb:e2:40:ba:fa:9f:9d:5b:99:62: 6a:75:ad:48:fb:17:fc:60:79:ed:42:2f:44:cf:e1:f8:fc:77: 40:be:4d:d4:18:ce:a9:75:10:f2:db:15:c6:27:3a:31:e1:d4: 78:6c:47:2d:07:af:81:97:3a:ce:bc:c6:84:27:31:ee:9d:54: 77:54:a0:a5:7f:1b:de:20:2b:4a:49:17:a1:5e:78:cc:47:6e: 50:ce:e7:c9:3e:1f:86:f6:69:81:9b:2e:95:4e:cb:ef:6b:68: a0:63:cb:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkwMon+YldYkKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjFmMmI3YzItMTg2My00MTk1LTg1YjctMWNhODIzYjE5YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlsVZJl4WlfP6p2V/zmzfKFebqjlP3KMuQKR NQ6y+ka1zoqX3JHYUYZql2olY/D9qCSyzpCP3Q+zl8HGl8pGZr5JGBemyKcMglkr IeArdSqZEGwKxBK/8bLfrD9k71QaHb5ofr4qguiAnTYn7sstMjSyBTMqoifdiDGY Zc3g0tIgUHh968lh/cWLY+0XS7SlP6dVPj/ri7NFjOUmlPjojAxLjzRxGQxI0/mJ 5bSmVfIUd9Vta3Y+UvHMmvr6bkzp1LN69vMqk4cK49d27DFaj5gdcuOnKZavxqF4 GpMR5PSx2NG9ysInxOxTk2uehDbZpsurvZYiB+28S99Z+/Nn/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1resh1eQhET7T8fSfR9F6KdFeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRdmshe3xxmn0WIai/Fxjd03spvkFeVU583NkuG6R7hVpOa0wxat3Oz tfYk3GmphNKqfc5/nRuXOVQiS8KF6gfy1b5S9t9uuKnaPdMr0CCDcquRFjti2b00 Co1OYSvZgZ4/xl6GBOOtzIemoc641yrcm1K4JY3jyftSVlsljHX1kz8VuPnyCsGE 5WBgm8RO2Ac9gjWMVPQn6+JAuvqfnVuZYmp1rUj7F/xgee1CL0TP4fj8d0C+TdQY zql1EPLbFcYnOjHh1HhsRy0Hr4GXOs68xoQnMe6dVHdUoKV/G94gK0pJF6FeeMxH blDO58k+H4b2aYGbLpVOy+9raKBjyxM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:34:46 2026 by rpki-client