$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa File: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (raw, json) Hash identifier: Hu3zCC18hYxZQVDinqbsXkNjnA9eSe7ikEzchOhBL80= Subject key identifier: 5C:05:1C:56:66:0C:55:64:98:51:A3:3E:71:42:5D:47:0C:2C:B7:49 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA92FC8B63862D44ED6C0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:2f:c8:b6:38:62:d4:4e:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=2db93a2e-80e7-4655-a897-6d936403414e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:c8:de:19:7f:70:91:33:cb:04:c6:83:44: 9c:c2:63:30:e9:db:69:1d:69:9f:c9:da:3b:20:82: fb:d2:02:55:14:ff:95:0f:2f:c3:0d:ba:05:11:d3: 28:0e:cd:47:7c:83:65:6f:97:98:5f:78:d0:08:a2: 03:3b:4a:c3:7a:d5:22:07:8c:a9:5a:5b:68:82:83: c8:11:7c:19:22:3e:0f:03:85:02:17:ad:24:96:9f: ac:cb:40:e5:a7:64:cf:00:87:ff:b3:9a:7c:e6:52: c0:32:9f:7f:b9:93:c3:d5:4f:7e:8c:0c:7a:d3:27: 05:4f:5a:f8:94:42:2d:87:a9:2e:29:ed:1a:83:b8: 4c:36:b7:81:1a:cd:cb:b0:0b:7b:9b:c0:5d:f8:ea: 71:00:f7:53:0c:41:55:40:4c:3e:ec:e5:09:88:63: c9:da:fa:8c:40:56:de:10:44:94:ac:98:2b:39:1f: f4:22:c9:76:b5:c4:aa:12:a8:97:87:9d:c6:f2:19: fd:f9:b7:1c:ba:7d:54:3f:73:8f:57:b4:e5:26:5b: c6:e1:43:0d:ec:7d:ac:2f:d2:cb:42:2a:ef:d9:60: fd:18:ab:2a:e4:3a:c9:18:d0:1c:6c:b3:2b:8b:7a: 15:a9:c0:cd:02:29:88:7e:d0:ce:f8:b2:c3:60:ac: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:05:1C:56:66:0C:55:64:98:51:A3:3E:71:42:5D:47:0C:2C:B7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d9:b7:26:40:61:3d:5b:f9:da:20:e7:9d:bb:26:4c:dc:03: a2:8f:f0:1e:48:4c:9f:d6:23:78:2e:69:95:5a:57:06:2c:f2: 3f:4a:36:4d:f2:cf:5b:3c:10:7f:15:2b:65:17:0f:c3:6c:1f: e7:70:25:97:1e:e1:be:84:8a:79:26:f8:6f:cd:2d:24:ab:79: e9:48:a0:02:29:e6:87:9e:6f:ab:7e:57:80:97:ca:d4:88:c5: d6:5a:4c:83:66:81:34:81:51:5c:05:10:b8:fb:53:e1:9e:47: f3:f3:21:32:a4:07:7c:01:36:17:75:6a:0c:9f:2c:6e:94:0a: fe:31:21:e9:59:4c:36:2b:4f:7c:f5:7b:54:71:9d:1a:b7:6b: 8b:a0:e0:46:3d:c3:41:66:66:5e:10:d1:09:67:bf:0e:0d:6d: 1a:6a:c9:8e:c9:5b:b7:59:22:f6:44:1a:b2:66:0d:1b:d2:8d: 03:f0:a5:79:b9:92:b5:9f:29:ae:f9:3a:ec:8b:05:37:a6:68: 02:61:15:54:13:e2:d1:64:aa:a6:cb:a8:77:1d:94:1c:77:62: a5:65:1b:9d:3b:30:f4:6c:f3:c9:8c:c3:7c:ee:84:c0:fb:a7: b5:41:3f:6c:be:96:0c:41:14:7f:89:9e:02:7d:18:3f:4d:f9: dc:0e:b2:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqkvyLY4YtRO1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MmRiOTNhMmUtODBlNy00NjU1LWE4OTctNmQ5MzY0MDM0MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroTI3hl/cJEzywTGg0ScwmMw6dtpHWmfydo7 IIL70gJVFP+VDy/DDboFEdMoDs1HfINlb5eYX3jQCKIDO0rDetUiB4ypWltogoPI EXwZIj4PA4UCF60klp+sy0Dlp2TPAIf/s5p85lLAMp9/uZPD1U9+jAx60ycFT1r4 lEIth6kuKe0ag7hMNreBGs3LsAt7m8Bd+OpxAPdTDEFVQEw+7OUJiGPJ2vqMQFbe EESUrJgrOR/0Isl2tcSqEqiXh53G8hn9+bccun1UP3OPV7TlJlvG4UMN7H2sL9LL Qirv2WD9GKsq5DrJGNAcbLMri3oVqcDNAimIftDO+LLDYKzrHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwFHFZmDFVkmFGjPnFCXUcMLLdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMWJlODQ2OGEtZThlZC0z ZmRlLWE1MmItZGExY2UxMWY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELZtyZAYT1b+dog5527JkzcA6KP8B5ITJ/WI3guaZVaVwYs8j9KNk3y z1s8EH8VK2UXD8NsH+dwJZce4b6Einkm+G/NLSSreelIoAIp5oeeb6t+V4CXytSI xdZaTINmgTSBUVwFELj7U+GeR/PzITKkB3wBNhd1agyfLG6UCv4xIelZTDYrT3z1 e1RxnRq3a4ug4EY9w0FmZl4Q0Qlnvw4NbRpqyY7JW7dZIvZEGrJmDRvSjQPwpXm5 krWfKa75OuyLBTemaAJhFVQT4tFkqqbLqHcdlBx3YqVlG507MPRs88mMw3zuhMD7 p7VBP2y+lgxBFH+JngJ9GD9N+dwOsrI= -----END CERTIFICATE-----Generated at Mon Apr 27 11:17:50 2026 by rpki-client