$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa File: 2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (raw, json) Hash identifier: M9vYZ4OYKHcYaGDfFlRSDhx+vFxSsXfn6L+FYsfUJK0= Subject key identifier: 5A:85:5C:86:84:91:2D:0B:F7:BF:97:03:36:A7:7C:92:89:67:18:65 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA8ED16F146378E548DD0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:ed:16:f1:46:37:8e:54:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=e1f7b95b-4a5f-4a41-9bdd-c7fbda10e1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:b0:1b:9e:81:16:67:bb:49:20:d2:ef:51: 6e:71:d2:f1:de:d3:af:a4:eb:46:16:5e:e3:16:b6: d4:92:c6:a5:1e:b7:58:19:b3:02:3e:74:9a:28:f6: 79:9c:de:21:e9:64:33:c8:8d:44:38:b1:96:e8:23: 05:6e:e0:59:3f:90:21:49:b2:c0:7f:c1:67:80:f0: 93:79:f6:c7:18:53:90:b8:a9:5e:01:37:ee:ba:ec: 30:ee:30:8d:9c:b3:23:7c:d8:21:bc:b8:a5:5d:ab: 1f:70:1f:44:0a:d6:8d:1e:89:03:fb:99:c7:8e:49: 9d:88:8f:e7:5e:13:d0:1d:29:b8:30:a6:77:9d:2e: 11:10:36:6d:a9:49:8f:5e:b1:79:52:7e:dc:bd:18: c9:42:b7:d9:ea:4f:a4:0f:06:97:e1:39:12:38:a7: c3:e4:07:21:7f:8a:3e:08:69:6c:4b:71:da:ac:0e: 39:2f:a2:5e:80:e0:cb:16:d4:df:b2:c7:78:50:3a: 7f:41:9b:c2:89:32:35:5b:50:b3:10:8b:37:a7:03: 7a:89:4e:ac:22:7a:ef:1c:c1:e2:bc:45:9b:8a:9d: ab:80:9c:9c:9b:3c:2b:8c:cf:82:ca:ca:84:79:c0: fe:1a:95:2e:76:be:02:26:51:bd:77:25:b3:2c:fb: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:85:5C:86:84:91:2D:0B:F7:BF:97:03:36:A7:7C:92:89:67:18:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f0:e6:c0:12:44:d7:1c:b5:37:1a:63:81:0e:0c:77:a8:40: c4:17:cd:72:d4:a1:59:26:dc:74:04:2f:74:3e:6f:41:27:3e: ec:ed:5a:29:c1:9c:fa:4e:58:a8:2f:cb:97:d9:e8:44:0c:41: b6:8f:ae:34:12:2d:2d:75:5c:17:4e:84:75:13:36:ad:49:04: 61:c5:d3:f2:3e:78:2c:e6:87:94:e5:c0:8b:c0:be:79:c4:46: 25:d7:6b:3d:1e:a9:37:54:83:3a:66:a7:ea:20:99:49:3e:f8: b9:b3:89:78:95:25:e4:ef:1a:71:80:61:48:4c:a9:3c:43:e4: 54:a8:4d:56:06:91:b5:36:91:7c:b0:1e:53:f6:d8:40:cb:53: 2a:42:ea:f9:60:80:c1:20:45:8e:19:66:17:1e:83:81:00:b5: a1:be:fa:dd:bf:bf:49:d9:2b:77:b8:1d:e2:c7:46:50:ac:76: 97:4c:55:c7:48:95:ae:ab:8b:2e:d0:e4:47:16:00:90:66:c6: bf:24:f8:73:d0:6e:1f:ce:35:b1:6e:3e:01:39:9f:d4:cc:d2: a2:06:fc:ba:89:00:5c:41:b1:50:41:1b:1f:df:58:3b:77:7c: 48:8b:5f:e1:5c:77:73:40:73:f0:e0:4b:9c:fb:b9:c3:27:95: e8:75:37:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqjtFvFGN45UjdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZTFmN2I5NWItNGE1Zi00YTQxLTliZGQtYzdmYmRhMTBlMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fSwG56BFme7SSDS71FucdLx3tOvpOtGFl7j FrbUksalHrdYGbMCPnSaKPZ5nN4h6WQzyI1EOLGW6CMFbuBZP5AhSbLAf8FngPCT efbHGFOQuKleATfuuuww7jCNnLMjfNghvLilXasfcB9ECtaNHokD+5nHjkmdiI/n XhPQHSm4MKZ3nS4REDZtqUmPXrF5Un7cvRjJQrfZ6k+kDwaX4TkSOKfD5Achf4o+ CGlsS3HarA45L6JegODLFtTfssd4UDp/QZvCiTI1W1CzEIs3pwN6iU6sInrvHMHi vEWbip2rgJycmzwrjM+CysqEecD+GpUudr4CJlG9dyWzLPs2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqFXIaEkS0L97+XAzanfJKJZxhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMmJiZDhhNDYtMmNiYS0z OGExLTg1MjktMWFjY2JiMDEyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELw5sASRNcctTcaY4EODHeoQMQXzXLUoVkm3HQEL3Q+b0EnPuztWinB nPpOWKgvy5fZ6EQMQbaPrjQSLS11XBdOhHUTNq1JBGHF0/I+eCzmh5TlwIvAvnnE RiXXaz0eqTdUgzpmp+ogmUk++LmziXiVJeTvGnGAYUhMqTxD5FSoTVYGkbU2kXyw HlP22EDLUypC6vlggMEgRY4ZZhceg4EAtaG++t2/v0nZK3e4HeLHRlCsdpdMVcdI la6riy7Q5EcWAJBmxr8k+HPQbh/ONbFuPgE5n9TM0qIG/LqJAFxBsVBBGx/fWDt3 fEiLX+Fcd3NAc/DgS5z7ucMnleh1N0g= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:24 2026 by rpki-client