$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: zJ/abG0Lf2tF7LYd93xO02rTIwCE1Qt56SZr1HFqaO4= Subject key identifier: B6:DA:0D:DB:90:5B:48:59:3A:9C:0D:B3:A4:F8:19:0D:01:64:C8:37 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624B7ACEEED0AA31C1E380 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:7a:ce:ee:d0:aa:31:c1:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=dc127343-ee87-4df3-a6af-8cad60fa17c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:9e:90:07:cf:87:6c:e5:b6:b3:83:fb:2d: 2f:ae:82:e7:4d:bc:91:2e:df:70:e0:8c:cd:e0:a9: ba:9e:0b:cc:49:4a:b6:64:d9:89:dd:9c:03:3d:6c: 6a:23:60:22:26:4c:2b:77:08:ca:b1:18:78:8a:e9: 23:23:6b:24:a8:0f:c0:76:32:8f:3c:12:ef:5b:1c: b6:18:2a:6c:be:44:3d:f7:ca:2e:fe:75:8e:e8:14: ca:a0:21:1a:d7:e0:9e:5c:2a:be:be:22:21:ee:19: 11:a4:47:e0:74:86:99:6a:eb:59:6e:9c:d2:4f:24: d2:01:28:73:9a:42:41:f2:45:73:7c:d8:86:a9:b6: 96:5d:7b:50:7f:be:36:95:06:8b:46:05:74:4e:c8: 92:28:31:87:fd:75:e9:cc:da:75:20:fc:8c:e1:cc: 17:b8:35:7b:27:36:92:a6:c3:f4:41:4d:9d:e1:e2: 61:cf:2c:09:cd:fb:3c:8a:57:ca:47:fd:93:cc:dd: 59:f5:ab:fd:95:27:30:17:83:44:69:44:98:e1:8e: 7f:e6:53:1e:b4:26:ec:4b:52:7c:65:29:43:df:48: 50:5c:96:8d:2c:de:39:48:e1:54:e6:89:b3:b0:15: f4:e6:08:58:44:f2:45:83:ca:ea:27:0a:f0:f3:93: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:0D:DB:90:5B:48:59:3A:9C:0D:B3:A4:F8:19:0D:01:64:C8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:03:50:5b:44:e3:6c:92:48:2a:83:d3:b3:56:03:bf:1a:c5: c7:ae:11:a3:bd:d9:5c:f3:08:85:84:06:57:f1:a1:ec:29:dc: 3b:8f:17:cc:ac:5c:3a:01:f5:2a:08:08:6c:de:b6:05:a1:14: f3:64:52:d8:f4:c6:99:c8:e5:b5:f1:e9:ac:6b:e4:7a:12:33: 3d:a9:4a:66:88:20:5d:08:44:9f:88:59:58:1d:e4:cc:63:72: 55:b0:1f:3d:4b:1a:fa:84:1f:59:3f:c2:4b:ab:62:c1:92:61: ae:b3:72:18:89:9e:db:41:a0:39:a6:ac:91:bd:4f:f2:bf:9d: 57:9b:3d:50:21:a4:f0:c8:c0:b2:2e:52:28:5b:c0:04:5b:62: 46:75:3e:73:d1:a7:d0:d4:4c:08:50:b8:dd:55:47:c5:7c:dc: 1d:43:90:5f:6c:e3:39:f9:f1:69:47:a1:77:da:95:4f:f9:27: 5e:4c:5b:eb:34:9d:39:ac:d2:2f:11:9c:fe:d7:e9:4b:85:0c: 07:85:cc:d5:0a:de:cf:d6:87:fa:74:1f:d0:cc:4e:2c:a7:3e: 01:a2:5a:81:96:db:56:e4:f4:ea:b0:46:c3:c2:e1:b7:46:05: e5:52:40:60:af:05:5c:ad:26:b1:5c:44:e4:d6:a3:74:94:36: 40:cb:40:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkt6zu7QqjHB44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGMxMjczNDMtZWU4Ny00ZGYzLWE2YWYtOGNhZDYwZmExN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtWekAfPh2zltrOD+y0vroLnTbyRLt9w4IzN 4Km6ngvMSUq2ZNmJ3ZwDPWxqI2AiJkwrdwjKsRh4iukjI2skqA/AdjKPPBLvWxy2 GCpsvkQ998ou/nWO6BTKoCEa1+CeXCq+viIh7hkRpEfgdIaZautZbpzSTyTSAShz mkJB8kVzfNiGqbaWXXtQf742lQaLRgV0TsiSKDGH/XXpzNp1IPyM4cwXuDV7JzaS psP0QU2d4eJhzywJzfs8ilfKR/2TzN1Z9av9lScwF4NEaUSY4Y5/5lMetCbsS1J8 ZSlD30hQXJaNLN45SOFU5omzsBX05ghYRPJFg8rqJwrw85NASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbaDduQW0hZOpwNs6T4GQ0BZMg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMDUFtE42ySSCqD07NWA78axceuEaO92VzzCIWEBlfxoewp3DuPF8ys XDoB9SoICGzetgWhFPNkUtj0xpnI5bXx6axr5HoSMz2pSmaIIF0IRJ+IWVgd5Mxj clWwHz1LGvqEH1k/wkurYsGSYa6zchiJnttBoDmmrJG9T/K/nVebPVAhpPDIwLIu UihbwARbYkZ1PnPRp9DUTAhQuN1VR8V83B1DkF9s4zn58WlHoXfalU/5J15MW+s0 nTms0i8RnP7X6UuFDAeFzNUK3s/Wh/p0H9DMTiynPgGiWoGW21bk9OqwRsPC4bdG BeVSQGCvBVytJrFcROTWo3SUNkDLQDQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:57:25 2026 by rpki-client