$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa File: d1206389-b9de-36cd-8068-be081e3c00dd.roa (raw, json) Hash identifier: JXUJ1gHB9bl45YfY+dACBTC5IoE/Fkhf330YbuaeAnc= Subject key identifier: D8:BB:61:66:5C:D5:B7:B1:4D:70:CD:16:67:B4:A2:39:58:EC:5C:F7 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624B6D4376360D58107700 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:6d:43:76:36:0d:58:10:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=dae3a822-116a-4aaa-97f1-f84cb1e012c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:a1:7c:c6:fc:e8:e2:03:a3:05:b9:ac:ff: 49:1c:96:8a:4b:16:3e:cc:79:83:9b:60:84:aa:c4: ca:39:d7:86:a6:ea:55:a6:ac:35:2b:2d:1b:77:ca: 03:dc:d8:01:e6:da:28:c4:2c:43:c8:88:7a:cb:9d: ec:16:32:b1:9f:3b:d1:07:af:ff:7a:a9:10:14:96: 4f:3d:f9:16:fe:f5:65:a9:d1:34:4d:80:1e:0c:3e: 1b:b6:30:d6:c8:fb:f0:c9:30:1b:79:7b:ae:38:1f: f1:c3:48:6c:44:e1:63:99:0b:9c:59:a3:2b:19:7d: 52:54:b0:89:fb:e3:c9:49:92:df:5a:e2:53:a3:c3: 0d:93:76:5a:d8:96:aa:c6:37:63:d4:08:d6:a4:03: a0:3a:c9:dd:b9:03:a8:92:be:e5:66:3f:57:17:49: 82:d4:83:0b:21:c8:b8:c6:a6:f6:1c:a3:93:8d:4c: 96:68:db:0a:d3:cb:f7:7c:e8:51:fa:b8:07:76:fc: 97:ce:d7:31:62:ea:50:b0:bd:e5:87:e6:b7:e2:04: 39:e1:74:0a:f9:84:be:73:fc:97:86:4c:28:ca:21: 32:ee:5c:89:af:77:34:72:c5:de:ca:4e:ae:cc:8b: a3:41:94:d0:2e:ec:b0:19:ec:06:b0:05:f0:a4:22: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BB:61:66:5C:D5:B7:B1:4D:70:CD:16:67:B4:A2:39:58:EC:5C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e0:a6:1f:66:a0:35:4b:c4:8f:3f:7b:e1:04:de:24:50:15: 29:d5:c2:94:01:d4:fb:ef:e7:c8:d9:4c:39:94:e8:b7:b0:49: 99:17:60:0b:f5:36:4f:62:fa:53:bd:9d:4a:dc:74:bc:96:91: 95:6d:25:c4:fa:9c:c1:be:5a:18:64:34:a9:8b:b1:1c:70:89: 77:13:0b:15:c0:df:7e:65:46:66:8b:6b:63:ef:0a:da:fe:94: a6:d9:e7:9f:e5:c0:28:b3:91:5b:83:16:64:6a:1e:4f:d0:56: bb:16:b5:d5:db:38:ba:b6:f2:1d:0a:d9:11:ef:be:26:9b:77: 12:1a:4e:9f:a5:d1:9f:d7:1f:ee:b1:85:3e:d6:50:d4:a5:21: 69:fd:d9:01:9d:55:d7:6a:33:68:01:5f:57:09:23:fc:d9:50: 76:52:11:82:d9:b7:3b:ec:64:c6:a5:d9:1f:28:dc:b9:1c:7d: c6:ef:88:73:67:28:c5:9d:a0:6e:20:08:4c:93:7d:23:53:b1: 82:3d:2d:ff:22:c4:cc:57:4f:88:ee:35:41:8e:f5:b3:cc:e1: 6e:88:ca:65:c8:a6:8c:8e:75:b4:b6:e9:d8:65:31:a1:b9:92: fd:6e:6f:91:4d:a5:c1:ca:ec:41:e6:13:b9:d0:ec:6f:79:ab: b5:a2:8b:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkttQ3Y2DVgQdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGFlM2E4MjItMTE2YS00YWFhLTk3ZjEtZjg0Y2IxZTAxMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLmhfMb86OIDowW5rP9JHJaKSxY+zHmDm2CE qsTKOdeGpupVpqw1Ky0bd8oD3NgB5tooxCxDyIh6y53sFjKxnzvRB6//eqkQFJZP PfkW/vVlqdE0TYAeDD4btjDWyPvwyTAbeXuuOB/xw0hsROFjmQucWaMrGX1SVLCJ ++PJSZLfWuJTo8MNk3Za2Jaqxjdj1AjWpAOgOsnduQOokr7lZj9XF0mC1IMLIci4 xqb2HKOTjUyWaNsK08v3fOhR+rgHdvyXztcxYupQsL3lh+a34gQ54XQK+YS+c/yX hkwoyiEy7lyJr3c0csXeyk6uzIujQZTQLuywGewGsAXwpCJ6TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi7YWZc1bexTXDNFme0ojlY7Fz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDEyMDYzODktYjlkZS0z NmNkLTgwNjgtYmUwODFlM2MwMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACngph9moDVLxI8/e+EE3iRQFSnVwpQB1Pvv58jZTDmU6LewSZkXYAv1 Nk9i+lO9nUrcdLyWkZVtJcT6nMG+WhhkNKmLsRxwiXcTCxXA335lRmaLa2PvCtr+ lKbZ55/lwCizkVuDFmRqHk/QVrsWtdXbOLq28h0K2RHvviabdxIaTp+l0Z/XH+6x hT7WUNSlIWn92QGdVddqM2gBX1cJI/zZUHZSEYLZtzvsZMal2R8o3LkcfcbviHNn KMWdoG4gCEyTfSNTsYI9Lf8ixMxXT4juNUGO9bPM4W6IymXIpoyOdbS26dhlMaG5 kv1ub5FNpcHK7EHmE7nQ7G95q7Wii88= -----END CERTIFICATE-----Generated at Mon Sep 21 09:11:57 2026 by rpki-client