$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa File: 9061acde-1566-3f28-a9b6-14f165759f16.roa (raw, json) Hash identifier: wtWaQEOAKQTFoZPhKOGCnRRJJNqp88vjxtg6jEEMAAI= Subject key identifier: 23:E0:6A:3C:29:85:82:68:5F:70:85:4C:00:20:9C:7C:12:32:B0:A4 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624BF29A1692067810EF80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:f2:9a:16:92:06:78:10:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=45c88a9b-47c7-44a1-9920-7ced6ce69176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:77:f7:2c:5b:c8:86:46:c1:fe:13:1d:8e: a5:ac:6c:d7:8a:3e:8e:51:2f:ae:bf:33:c6:59:8e: 8c:aa:01:cb:c7:c5:56:78:a7:55:24:87:9e:7a:b0: e7:81:01:54:5a:b8:4d:da:19:df:9b:b2:68:41:ee: e0:41:c4:70:a0:6f:f1:a6:d9:76:8b:9d:cd:72:2d: c4:be:92:47:bb:18:64:c6:69:6d:6d:6b:45:f4:6d: 6f:55:93:1c:a2:e1:d7:63:91:a1:10:e8:91:15:ba: be:6d:98:2a:0a:b8:31:3e:cc:3f:93:3b:d9:f1:27: d1:67:88:d1:f3:ba:9e:1c:46:04:b4:69:43:c0:6d: a0:68:5f:5b:08:9d:e7:3f:a6:e1:b0:8c:d4:eb:48: 86:79:c8:67:46:38:0b:7a:5a:51:56:c7:20:d1:a5: b7:e3:1b:bd:18:5d:c7:5b:53:3d:39:b4:91:2e:87: ed:db:7b:2e:c5:7a:9e:0f:98:bc:2e:a4:3c:b8:56: f3:4a:6e:ee:81:80:f1:b2:29:ac:bb:0e:a4:36:11: 98:0f:34:78:86:ad:19:b1:e8:f0:1e:e5:44:87:02: c3:1b:52:aa:1d:6e:bb:61:3b:5f:78:0c:94:bb:5e: b7:f9:ea:57:03:d7:29:64:31:1d:18:2f:8e:8d:fe: 6a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E0:6A:3C:29:85:82:68:5F:70:85:4C:00:20:9C:7C:12:32:B0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:22:c7:21:0d:c3:6c:5e:f4:28:08:8d:bb:2e:0c:b9:7d:f4: db:b7:cb:d0:3b:05:d9:67:36:5c:ab:c7:b0:dd:69:92:67:87: 1c:3c:23:c7:c2:2b:45:26:6c:e9:14:e6:f7:ba:69:f2:09:77: 6f:68:c7:76:72:9e:86:e4:93:62:6c:16:81:97:3d:dd:50:7f: 16:b4:d2:0c:17:77:2e:bc:58:28:d7:ea:c4:3d:6f:b0:5a:da: 67:b3:6c:c7:1f:52:1b:1a:69:e0:e8:fe:3b:1a:67:37:35:24: 11:4b:62:79:65:3e:1d:95:f4:ff:54:14:70:11:df:b6:81:a6: 14:00:0e:08:cf:a7:3a:af:df:97:d2:76:d3:28:cd:51:21:7f: e1:83:26:7b:a4:88:e9:11:32:87:d0:21:61:f6:d8:e4:77:0c: e4:d0:23:3f:02:56:57:4a:74:42:95:a2:ab:6a:93:20:e8:61: c5:99:e2:94:3c:38:96:a7:75:fa:7c:f4:01:76:14:dd:e4:ed: ae:8c:c3:b1:05:f6:14:64:aa:60:38:ee:71:b7:91:0d:4b:d3: a1:6c:72:b6:3f:58:d4:58:84:81:0a:e1:33:21:95:c8:2d:f7: 45:53:11:39:14:49:eb:e4:39:27:76:f6:55:20:bb:0b:bd:cb: 2d:51:ad:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkvymhaSBngQ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NDVjODhhOWItNDdjNy00NGExLTk5MjAtN2NlZDZjZTY5MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TV39yxbyIZGwf4THY6lrGzXij6OUS+uvzPG WY6MqgHLx8VWeKdVJIeeerDngQFUWrhN2hnfm7JoQe7gQcRwoG/xptl2i53Nci3E vpJHuxhkxmltbWtF9G1vVZMcouHXY5GhEOiRFbq+bZgqCrgxPsw/kzvZ8SfRZ4jR 87qeHEYEtGlDwG2gaF9bCJ3nP6bhsIzU60iGechnRjgLelpRVscg0aW34xu9GF3H W1M9ObSRLoft23suxXqeD5i8LqQ8uFbzSm7ugYDxsimsuw6kNhGYDzR4hq0Zsejw HuVEhwLDG1KqHW67YTtfeAyUu163+epXA9cpZDEdGC+Ojf5qswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPgajwphYJoX3CFTAAgnHwSMrCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvOTA2MWFjZGUtMTU2Ni0z ZjI4LWE5YjYtMTRmMTY1NzU5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcixyENw2xe9CgIjbsuDLl99Nu3y9A7BdlnNlyrx7DdaZJnhxw8I8fC K0UmbOkU5ve6afIJd29ox3Zynobkk2JsFoGXPd1Qfxa00gwXdy68WCjX6sQ9b7Ba 2mezbMcfUhsaaeDo/jsaZzc1JBFLYnllPh2V9P9UFHAR37aBphQADgjPpzqv35fS dtMozVEhf+GDJnukiOkRMofQIWH22OR3DOTQIz8CVldKdEKVoqtqkyDoYcWZ4pQ8 OJandfp89AF2FN3k7a6Mw7EF9hRkqmA47nG3kQ1L06FscrY/WNRYhIEK4TMhlcgt 90VTETkUSevkOSd29lUguwu9yy1RrRk= -----END CERTIFICATE-----Generated at Tue Sep 22 02:28:58 2026 by rpki-client