$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa File: dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa (raw, json) Hash identifier: 5mx7iaikGg96XXMhhJT5/FemjSV29Hu/GYRHG2h46t4= Subject key identifier: 9F:4B:70:22:90:CC:02:47:1B:17:55:92:04:A7:06:28:ED:5F:1F:E8 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584F1B624BD29D14A0F2E20043C0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 398210 IP address blocks: 168.220.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:d2:9d:14:a0:f2:e2:00:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=8a66b346-59fb-480e-9ed2-543b84d4f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:87:b7:38:ea:eb:b2:19:8e:55:e6:f4:18: ee:6b:ca:55:b2:20:ab:8a:de:75:2c:33:cb:67:3c: a9:e2:8b:c1:9f:fd:42:61:ec:9e:5c:f5:31:98:c1: 28:ec:40:35:8d:0c:f1:de:f7:5b:cb:17:ff:1d:4c: e7:52:fd:16:84:5e:3a:f1:82:12:47:4e:af:ce:bc: c1:08:69:2d:51:4e:fd:ed:2f:3a:f5:97:cf:24:24: 22:cd:73:7f:c9:1e:77:b9:5a:16:12:16:5b:c0:2e: 95:6f:21:b3:8f:19:ff:f7:7c:b1:c4:42:9b:f4:52: d2:f8:eb:51:46:1e:0a:8e:eb:af:01:90:98:e9:a0: 7d:65:a3:7f:04:8d:d9:05:6e:22:65:dd:4c:d6:41: 48:fb:8b:75:37:64:d0:ed:dc:87:5b:c7:98:9d:79: 71:76:8c:67:b0:5b:9e:6f:c7:f1:15:7b:08:b5:62: 3d:c0:30:d3:f6:65:6e:a6:49:b4:2a:0b:ab:4b:f0: 33:78:34:ec:4f:e9:16:51:33:8b:98:b8:53:48:3a: 66:fe:70:71:1d:8b:f5:b7:4a:08:26:5c:ed:e4:b2: 12:aa:96:81:27:34:25:be:e7:82:83:80:3c:9e:d0: 5e:1c:1e:ee:20:0d:a4:44:32:d0:c6:0a:e9:f0:12: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:70:22:90:CC:02:47:1B:17:55:92:04:A7:06:28:ED:5F:1F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9c:1b:ae:72:69:1e:f1:d3:93:97:6b:3c:a4:ef:8a:4c:d0: 3b:e6:6a:2d:c9:c3:57:04:84:bc:e3:13:a0:91:66:fb:dc:9d: f6:cb:b9:35:36:85:bd:d4:69:78:03:38:b4:ad:cb:ff:28:56: 33:d1:e5:da:38:e4:08:4d:e9:e8:d8:c9:f3:87:9c:dd:4d:c9: a3:00:7b:55:da:81:62:53:03:fc:88:9f:71:bd:5a:0f:eb:a6: 21:2c:69:fa:e1:03:d9:1f:9a:9c:81:49:82:06:93:ae:3e:f5: 75:9f:71:76:d1:5e:ef:80:b2:15:ab:8c:d7:28:11:c4:c4:ce: c5:53:8f:5c:ab:90:46:22:a8:23:c2:ef:55:10:20:f2:bd:81: be:58:fd:05:29:b3:18:4a:5f:c8:ca:84:5a:96:11:59:e9:6d: db:9b:3c:e4:a4:a1:74:ed:7e:2f:37:c8:ed:4c:58:3e:82:4a: 96:9c:c1:a5:3c:90:fb:f0:d7:fe:31:0c:79:ac:ab:42:9b:21: 58:c8:3d:6e:38:b4:0c:7c:51:7d:a4:03:b0:d7:bd:e7:11:5d: 2c:b8:a2:8f:c0:a8:36:f3:5c:8f:a9:a5:a6:e5:a5:f3:3e:87: de:28:1b:66:f1:1c:dc:ab:b4:08:c0:d1:fd:fa:47:f8:22:d2: 3c:b9:65:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkvSnRSg8uIAQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk OGE2NmIzNDYtNTlmYi00ODBlLTllZDItNTQzYjg0ZDRmNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZKHtzjq67IZjlXm9Bjua8pVsiCrit51LDPL Zzyp4ovBn/1CYeyeXPUxmMEo7EA1jQzx3vdbyxf/HUznUv0WhF468YISR06vzrzB CGktUU797S869ZfPJCQizXN/yR53uVoWEhZbwC6VbyGzjxn/93yxxEKb9FLS+OtR Rh4KjuuvAZCY6aB9ZaN/BI3ZBW4iZd1M1kFI+4t1N2TQ7dyHW8eYnXlxdoxnsFue b8fxFXsItWI9wDDT9mVupkm0KgurS/AzeDTsT+kWUTOLmLhTSDpm/nBxHYv1t0oI Jlzt5LISqpaBJzQlvueCg4A8ntBeHB7uIA2kRDLQxgrp8BL1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9LcCKQzAJHGxdVkgSnBijtXx/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZGZlMjJlNWItNjY1MC0z ZDUxLWFhOWMtNjZhMmUwMmI2OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqcG65yaR7x05OXazyk74pM0Dvmai3Jw1cEhLzjE6CRZvvcnfbLuTU2 hb3UaXgDOLSty/8oVjPR5do45AhN6ejYyfOHnN1NyaMAe1XagWJTA/yIn3G9Wg/r piEsafrhA9kfmpyBSYIGk64+9XWfcXbRXu+AshWrjNcoEcTEzsVTj1yrkEYiqCPC 71UQIPK9gb5Y/QUpsxhKX8jKhFqWEVnpbdubPOSkoXTtfi83yO1MWD6CSpacwaU8 kPvw1/4xDHmsq0KbIVjIPW44tAx8UX2kA7DXvecRXSy4oo/AqDbzXI+ppablpfM+ h94oG2bxHNyrtAjA0f36R/gi0jy5ZbA= -----END CERTIFICATE-----Generated at Tue Sep 22 05:47:49 2026 by rpki-client