$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa File: 27938e9c-3192-3793-af30-042a052457c7.roa (raw, json) Hash identifier: 0F4p5SKARlwFlJR3x1bGfcvUzC/lrOjDSoSYl7gibUo= Subject key identifier: 55:EF:D1:6D:32:E9:3F:FA:1C:28:68:01:2E:20:F8:71:68:EF:88:76 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA85F9F7B7BA9A11F4700 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:5f:9f:7b:7b:a9:a1:1f:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=38b8a7d8-b16b-45d2-a413-1c245022bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a1:4b:46:66:f2:61:71:68:9a:af:8d:8d:c0: 8e:b9:47:d6:81:2e:1f:43:cc:a0:ab:99:08:0d:0e: f7:9b:c2:54:03:be:53:ea:b1:05:0f:c0:87:af:b6: 99:e6:f0:2d:ae:5f:83:8b:6e:e5:18:77:84:cd:dd: a6:30:6e:83:f2:7e:a2:5d:06:e6:71:95:52:8a:67: bc:6a:26:09:7d:4e:68:9c:c3:ee:30:11:84:1f:9e: e9:47:85:39:9e:44:e3:76:01:dd:1f:00:09:da:81: df:c8:88:f6:33:23:46:25:dc:1d:ab:01:a5:fb:ef: 09:2a:2c:62:d5:9f:5c:0e:9d:64:a0:74:cf:6c:e6: d2:f8:60:c8:de:6c:73:83:eb:af:53:41:5e:9d:02: 97:fa:e0:a0:54:90:c1:9a:3c:11:6a:d4:9d:0e:00: 7f:4a:18:f5:5a:3a:7b:ad:b6:91:c3:d3:14:40:ac: 60:19:5e:5c:b6:ee:03:46:0d:94:86:2c:65:6a:38: 48:a3:e5:7f:9a:34:6b:d4:38:8e:31:02:0d:69:9a: e0:ef:4e:3d:fc:f6:bf:01:34:83:48:a8:c2:f0:21: f3:05:56:f6:71:1b:d9:53:26:e2:d5:28:fa:32:f9: 40:14:8b:0c:47:7c:fa:b3:11:37:c9:cc:a1:89:1b: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:D1:6D:32:E9:3F:FA:1C:28:68:01:2E:20:F8:71:68:EF:88:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0e:61:88:9d:6f:c2:58:29:5c:81:fb:a9:ec:14:91:1b:49: f1:d6:73:c2:16:97:e5:61:82:09:b7:f2:e0:3a:32:fb:cd:73: 7c:26:2d:af:1c:3e:51:17:2d:10:e3:6a:d4:44:8b:8c:99:32: de:09:e6:0c:f5:63:a3:e9:b7:05:6a:db:f5:56:56:75:27:30: 6b:4e:a0:f3:84:16:ca:13:b2:9b:53:12:3e:09:b7:f6:6c:f7: 22:8e:c8:f5:48:9a:7c:06:0f:7b:e8:89:7b:df:e3:0c:be:47: bf:20:66:e7:5e:37:43:7b:6c:33:71:75:06:47:81:9b:b7:9b: c5:93:82:5d:98:be:24:a2:14:d9:d4:68:a1:2c:51:3e:d5:c7: cf:82:34:45:4a:97:58:51:57:69:d4:30:e1:e1:04:6a:ae:91: 6f:51:85:e1:ac:d3:90:18:b7:fb:05:43:0e:27:73:30:3b:0d: 35:07:30:e2:6e:df:dd:b9:eb:c9:c5:18:da:25:b4:10:ce:01: d5:0e:28:fc:f4:82:9f:69:8c:7a:bc:1e:33:fd:ba:e2:91:40: 2d:6b:a7:32:b5:a2:46:4e:44:1e:c1:57:57:92:d2:28:e3:88: 75:6a:f2:20:7d:25:6c:11:7e:ce:14:15:c4:c5:54:6b:fb:2f: 40:c7:3e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuqhfn3t7qaEfRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MzhiOGE3ZDgtYjE2Yi00NWQyLWE0MTMtMWMyNDUwMjJiZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqFLRmbyYXFomq+NjcCOuUfWgS4fQ8ygq5kI DQ73m8JUA75T6rEFD8CHr7aZ5vAtrl+Di27lGHeEzd2mMG6D8n6iXQbmcZVSime8 aiYJfU5onMPuMBGEH57pR4U5nkTjdgHdHwAJ2oHfyIj2MyNGJdwdqwGl++8JKixi 1Z9cDp1koHTPbObS+GDI3mxzg+uvU0FenQKX+uCgVJDBmjwRatSdDgB/Shj1Wjp7 rbaRw9MUQKxgGV5ctu4DRg2UhixlajhIo+V/mjRr1DiOMQINaZrg7049/Pa/ATSD SKjC8CHzBVb2cRvZUybi1Sj6MvlAFIsMR3z6sxE3ycyhiRsCqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXv0W0y6T/6HChoAS4g+HFo74h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjc5MzhlOWMtMzE5Mi0z NzkzLWFmMzAtMDQyYTA1MjQ1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAOYYidb8JYKVyB+6nsFJEbSfHWc8IWl+Vhggm38uA6MvvNc3wmLa8c PlEXLRDjatREi4yZMt4J5gz1Y6PptwVq2/VWVnUnMGtOoPOEFsoTsptTEj4Jt/Zs 9yKOyPVImnwGD3voiXvf4wy+R78gZudeN0N7bDNxdQZHgZu3m8WTgl2YviSiFNnU aKEsUT7Vx8+CNEVKl1hRV2nUMOHhBGqukW9RheGs05AYt/sFQw4nczA7DTUHMOJu 392568nFGNoltBDOAdUOKPz0gp9pjHq8HjP9uuKRQC1rpzK1okZORB7BV1eS0ijj iHVq8iB9JWwRfs4UFcTFVGv7L0DHPrg= -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:39 2026 by rpki-client