$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa File: d231e946-74bf-3765-97f0-efb9933dc249.roa (raw, json) Hash identifier: PPhBWeakAOsTMWdYSSrAtwrJeXTybqvKulI3tR7aBTc= Subject key identifier: 7F:44:E8:DF:7B:CB:86:E9:66:56:BB:22:42:29:77:1C:AC:21:0D:FF Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624B5454EB8D624E3E3800 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:54:54:eb:8d:62:4e:3e:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=99bca4d4-15c1-43ee-9ef1-b75203a1f417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:61:50:16:e0:aa:2d:47:cf:91:1f:cb:62:f5: 42:32:62:7a:83:11:0b:7d:2d:30:56:ef:b3:44:21: 37:88:bb:4b:34:e8:9d:33:85:d5:88:66:e7:bc:f6: 22:92:cd:f8:37:4d:a5:74:34:3f:b7:b0:29:ff:b3: 3a:d7:b5:7a:44:71:4e:6e:73:ea:6f:31:58:14:af: 9c:6a:f4:63:d4:ab:fe:ce:7b:cc:fd:00:c8:6a:ac: 48:9c:43:bf:1e:ab:2a:a5:fa:00:7d:fa:8d:59:69: 13:8f:15:6b:d1:c8:78:18:0b:de:71:6c:2a:8f:8f: 9a:52:75:47:0d:49:97:1a:72:8d:98:39:b7:fb:3a: 45:a2:ab:ac:88:19:f9:3d:b4:0f:8d:dd:68:1f:d0: f1:3e:2d:32:cf:8b:8b:6d:27:f5:47:28:3a:7f:91: 03:24:c4:ee:e1:c1:0a:8c:26:23:55:df:d6:1e:e0: a6:04:6f:ae:89:7d:9c:53:19:54:a0:21:c7:bc:4e: 2f:9b:f9:4d:ab:51:b0:d4:9a:43:f1:56:40:fc:7c: 50:bc:4a:c1:04:d5:14:43:22:a1:65:1c:df:aa:09: a3:57:f7:db:c0:38:ca:1e:b5:f9:92:aa:80:a5:85: ba:92:4e:aa:c4:71:e3:be:36:62:31:d3:36:d7:79: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:44:E8:DF:7B:CB:86:E9:66:56:BB:22:42:29:77:1C:AC:21:0D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b0:0a:de:96:1a:a0:86:11:f5:e4:d6:9f:c0:dc:20:63:34: 2f:2e:19:99:72:f1:ab:03:8d:63:7e:e8:d4:c5:e1:ff:62:e1: 30:bc:9a:cc:3b:a9:6e:5b:0c:ee:73:e9:65:07:37:cb:ca:4f: 16:63:1c:86:35:13:ce:f6:0c:89:95:e9:7f:13:42:57:8d:57: 90:09:af:a6:aa:05:ff:21:a0:3f:21:c7:32:69:6b:98:cc:17: b6:91:39:14:d8:59:3f:ed:ab:9d:f3:8a:e0:f9:29:c8:d3:b5: 47:5b:c8:2f:b7:4d:24:09:f2:dd:07:f9:c0:79:1d:e0:ca:62: eb:f0:07:ba:48:5f:94:3a:f1:ab:97:1f:4b:23:54:4e:ca:1a: 30:f1:18:97:ff:dd:e6:cd:ad:e7:d7:36:69:56:7a:d0:b6:02: e4:cf:98:ad:da:6b:ca:06:83:79:3d:58:c6:44:6e:06:c2:41: d5:c9:5e:3c:3e:6f:63:68:8d:47:b4:91:f6:5e:cb:1a:24:d1: b2:58:bf:64:f0:05:35:4c:39:05:9e:33:4f:86:31:85:87:10: 7b:c0:0d:47:c9:c7:d2:34:33:76:3e:8a:ac:6c:00:df:f4:35: d4:9d:16:8c:00:ef:e0:63:f7:2a:64:cc:81:a2:48:cf:fc:5e: ac:23:97:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYktUVOuNYk4+OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OTliY2E0ZDQtMTVjMS00M2VlLTllZjEtYjc1MjAzYTFmNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2FQFuCqLUfPkR/LYvVCMmJ6gxELfS0wVu+z RCE3iLtLNOidM4XViGbnvPYiks34N02ldDQ/t7Ap/7M617V6RHFObnPqbzFYFK+c avRj1Kv+znvM/QDIaqxInEO/HqsqpfoAffqNWWkTjxVr0ch4GAvecWwqj4+aUnVH DUmXGnKNmDm3+zpFoqusiBn5PbQPjd1oH9DxPi0yz4uLbSf1Ryg6f5EDJMTu4cEK jCYjVd/WHuCmBG+uiX2cUxlUoCHHvE4vm/lNq1Gw1JpD8VZA/HxQvErBBNUUQyKh ZRzfqgmjV/fbwDjKHrX5kqqApYW6kk6qxHHjvjZiMdM213lFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9E6N97y4bpZla7IkIpdxysIQ3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDIzMWU5NDYtNzRiZi0z NzY1LTk3ZjAtZWZiOTkzM2RjMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6wCt6WGqCGEfXk1p/A3CBjNC8uGZly8asDjWN+6NTF4f9i4TC8msw7 qW5bDO5z6WUHN8vKTxZjHIY1E872DImV6X8TQleNV5AJr6aqBf8hoD8hxzJpa5jM F7aRORTYWT/tq53ziuD5KcjTtUdbyC+3TSQJ8t0H+cB5HeDKYuvwB7pIX5Q68auX H0sjVE7KGjDxGJf/3ebNrefXNmlWetC2AuTPmK3aa8oGg3k9WMZEbgbCQdXJXjw+ b2NojUe0kfZeyxok0bJYv2TwBTVMOQWeM0+GMYWHEHvADUfJx9I0M3Y+iqxsAN/0 NdSdFowA7+Bj9ypkzIGiSM/8Xqwjl04= -----END CERTIFICATE-----Generated at Mon Sep 21 17:54:46 2026 by rpki-client