$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa File: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (raw, json) Hash identifier: 5ypcQprW02br78FolEGhpQ9K+AJsDpXrRGQ+NrTOLUQ= Subject key identifier: 0A:C8:09:4A:53:66:58:C4:97:E5:0C:37:7E:8F:4D:21:CA:3B:EF:CA Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624BFF10361C8BC9EE5780 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:ff:10:36:1c:8b:c9:ee:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=b5d7cd73-3131-43d6-aae6-102d8880742c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c7:ef:37:62:23:e2:09:d8:d5:5b:1d:8d:d5: b2:f3:51:fc:73:fa:9b:fe:a8:9c:bd:11:db:bb:c7: b5:2c:4f:ca:a7:22:8e:16:d4:46:7f:c3:6d:0b:2d: 58:76:d0:fe:16:a1:8f:30:c2:4e:06:61:d0:b3:8a: d7:aa:e0:94:45:bc:d2:5d:12:f4:b6:5e:a1:aa:b0: 7d:10:c8:f1:26:55:da:d3:ac:29:d9:71:80:a6:38: f4:c6:5d:73:fa:df:53:b9:ff:b2:d8:8e:f2:ce:d9: 28:7a:27:f3:2a:b5:14:a6:ed:2f:5d:34:58:61:b2: 17:f2:b3:93:cb:25:85:cb:97:df:c1:f4:27:3a:15: 9d:1f:11:b3:b8:4f:41:32:cb:fc:d0:8a:84:10:33: bc:57:33:94:80:a4:f0:93:0c:10:ee:05:ac:00:4d: 07:db:cf:0a:13:26:40:81:94:a6:b7:b8:d1:69:54: 3f:7b:76:1c:e8:02:40:51:7d:bd:89:ee:6b:1f:cf: 63:17:d6:57:6e:c8:37:76:67:f0:44:b3:19:59:a8: c0:23:2d:1d:c1:10:79:ec:18:3f:98:aa:31:ed:51: bb:4c:49:ad:c2:70:c9:45:1a:ee:4c:b0:7e:84:cc: 84:e9:86:e4:b6:0f:25:82:c4:65:e1:a0:59:63:9b: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C8:09:4A:53:66:58:C4:97:E5:0C:37:7E:8F:4D:21:CA:3B:EF:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:07:ac:eb:fb:40:3e:54:ce:a4:59:53:dd:39:70:3c:43:27: b1:ef:d7:b8:81:12:40:01:d9:07:49:eb:d3:e4:ff:69:2e:91: ff:90:20:48:2e:90:d2:cb:d7:10:97:c8:fd:c1:6c:30:06:7b: ab:3c:91:da:c5:c2:11:ff:0b:4b:67:43:cf:cc:c2:97:84:38: 03:2d:10:f9:cd:d6:d6:12:a1:cd:d9:93:20:ee:87:2c:0b:19: 8e:1f:0b:5c:df:22:83:18:2d:b1:1d:ff:f4:b8:d7:97:a4:50: a4:fe:2c:2e:eb:e0:0b:4c:26:01:aa:7f:88:88:fe:b9:a0:9a: e4:93:ff:c3:c9:9b:83:2f:c0:7d:64:e2:ba:5e:f1:b5:79:3e: 64:95:eb:2d:72:14:52:f1:cf:fb:dd:2c:86:ad:e5:44:10:dd: 5a:d4:75:ec:2c:db:a8:bd:be:c5:7b:e4:fd:da:b3:85:29:b5: 2a:dc:e6:1e:48:9a:62:97:96:f7:dd:32:e6:00:62:f0:70:2c: 4e:99:7a:b6:7b:0f:45:94:53:c5:5e:95:7b:82:76:36:96:a3: 16:a4:14:ac:74:ab:a6:aa:d3:d2:5a:d6:21:4d:7f:4a:c0:fc: 4d:3c:8f:c9:26:93:db:55:24:3f:7e:6a:f4:56:a8:6a:51:39: d7:88:8a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkv/EDYci8nuV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjVkN2NkNzMtMzEzMS00M2Q2LWFhZTYtMTAyZDg4ODA3NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcfvN2Ij4gnY1VsdjdWy81H8c/qb/qicvRHb u8e1LE/KpyKOFtRGf8NtCy1YdtD+FqGPMMJOBmHQs4rXquCURbzSXRL0tl6hqrB9 EMjxJlXa06wp2XGApjj0xl1z+t9Tuf+y2I7yztkoeifzKrUUpu0vXTRYYbIX8rOT yyWFy5ffwfQnOhWdHxGzuE9BMsv80IqEEDO8VzOUgKTwkwwQ7gWsAE0H288KEyZA gZSmt7jRaVQ/e3Yc6AJAUX29ie5rH89jF9ZXbsg3dmfwRLMZWajAIy0dwRB57Bg/ mKox7VG7TEmtwnDJRRruTLB+hMyE6Ybktg8lgsRl4aBZY5uSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArICUpTZljEl+UMN36PTSHKO+/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYTZlOTBhN2EtYWQ2Yy0z MTVjLWI2YzctYjg0NzUyOTdkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoHrOv7QD5UzqRZU905cDxDJ7Hv17iBEkAB2QdJ69Pk/2kukf+QIEgu kNLL1xCXyP3BbDAGe6s8kdrFwhH/C0tnQ8/MwpeEOAMtEPnN1tYSoc3ZkyDuhywL GY4fC1zfIoMYLbEd//S415ekUKT+LC7r4AtMJgGqf4iI/rmgmuST/8PJm4MvwH1k 4rpe8bV5PmSV6y1yFFLxz/vdLIat5UQQ3VrUdews26i9vsV75P3as4UptSrc5h5I mmKXlvfdMuYAYvBwLE6ZerZ7D0WUU8VelXuCdjaWoxakFKx0q6aq09Ja1iFNf0rA /E08j8kmk9tVJD9+avRWqGpROdeIirM= -----END CERTIFICATE-----Generated at Mon Sep 21 06:27:22 2026 by rpki-client