$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa File: 43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa (raw, json) Hash identifier: XCItLJpCT8ox55Dc3DMPcrKPUNGNaE04ew6xOgEIsJA= Subject key identifier: 44:B7:0B:E1:5E:30:9D:06:79:91:C3:5C:C2:5F:7F:98:79:25:D2:00 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA850F84FD6600A4E0EE0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:50:f8:4f:d6:60:0a:4e:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=90cbeb4b-648e-483c-8334-19a06c616a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:1f:43:98:2e:21:83:2f:bb:f0:78:52:ad: 66:ec:32:64:a4:4a:71:03:84:10:51:cb:23:a7:58: 03:b4:fc:0b:7e:08:62:1e:62:4a:61:c9:d9:87:0b: b7:d3:b9:4e:f3:4a:f2:69:04:61:ab:08:bf:59:0c: 61:91:90:6a:b3:08:ff:d9:76:d7:ea:a8:77:cf:96: ad:2f:f8:57:e8:22:26:00:54:be:36:22:c0:94:d3: 52:26:4a:9a:62:03:aa:8f:18:19:c8:a0:11:b2:2e: d8:0b:96:ea:35:02:e5:52:2e:35:95:be:6a:be:39: 27:2f:b0:1f:4d:86:1b:e9:33:55:d1:40:68:8d:94: 22:0a:97:98:fc:01:8a:69:e1:b1:51:9a:3d:a8:3a: 3a:db:d4:86:cc:1d:59:18:09:a8:0a:30:3c:55:45: a5:e0:96:61:07:c3:ab:0f:43:47:54:36:ea:b8:17: e2:21:36:ac:f2:66:9e:c6:dd:37:f0:5a:27:e6:4d: 98:28:d0:b3:27:05:35:cf:75:a2:21:da:34:cd:46: 22:e3:24:15:e3:23:ed:d6:93:a0:a9:90:96:85:cd: 1c:f9:37:f1:ab:20:dd:11:90:f5:ea:c2:b7:db:4c: 0d:e0:42:ff:de:0d:59:2a:34:1e:b3:4d:4d:ee:04: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B7:0B:E1:5E:30:9D:06:79:91:C3:5C:C2:5F:7F:98:79:25:D2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d5:49:ad:cc:b9:cd:a8:1d:8e:bf:e0:9c:d4:48:fc:0e:d6: 66:57:4e:10:62:d4:a0:a4:74:06:85:f1:c5:1d:19:c9:bd:2e: 19:91:fa:e8:95:23:f0:75:89:62:72:49:27:b1:b2:2a:29:55: fa:af:59:bf:89:25:9b:77:3a:c3:12:47:b0:de:1a:02:6e:03: 37:15:1c:26:c6:c2:36:95:70:0c:ed:1b:d4:f7:94:49:cd:ad: d2:65:f7:62:f6:2a:80:92:d3:a0:db:5f:b1:51:f3:e6:c4:fb: 2b:db:5b:21:05:0e:3f:c9:80:23:7f:c6:59:aa:a2:19:66:eb: 60:cb:05:46:cb:cb:80:45:38:da:4c:d1:0f:9d:79:c7:c0:cb: 97:6f:7c:82:a5:df:f0:f3:39:79:09:5b:42:1b:9b:67:3a:f7: e2:06:f1:0f:61:ad:ad:c7:9d:7f:4a:88:31:77:67:3b:86:e0: b6:b2:a8:cb:69:35:8b:9a:67:cd:d0:aa:4f:bb:23:43:49:c5: 26:d5:82:c3:47:be:a8:12:fc:b0:fd:57:4f:a6:07:30:eb:a1: ff:ad:0b:a7:79:7a:78:7b:af:6b:d0:0e:71:0a:02:f8:af:45: 1d:03:28:8b:8b:4d:8a:21:41:56:2a:4f:4d:de:22:84:e6:bd: 9e:23:5b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqhQ+E/WYApODuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk OTBjYmViNGItNjQ4ZS00ODNjLTgzMzQtMTlhMDZjNjE2YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIMfQ5guIYMvu/B4Uq1m7DJkpEpxA4QQUcsj p1gDtPwLfghiHmJKYcnZhwu307lO80ryaQRhqwi/WQxhkZBqswj/2XbX6qh3z5at L/hX6CImAFS+NiLAlNNSJkqaYgOqjxgZyKARsi7YC5bqNQLlUi41lb5qvjknL7Af TYYb6TNV0UBojZQiCpeY/AGKaeGxUZo9qDo629SGzB1ZGAmoCjA8VUWl4JZhB8Or D0NHVDbquBfiITas8maext038Fon5k2YKNCzJwU1z3WiIdo0zUYi4yQV4yPt1pOg qZCWhc0c+TfxqyDdEZD16sK320wN4EL/3g1ZKjQes01N7gSGnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES3C+FeMJ0GeZHDXMJff5h5JdIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNDNmZWExYjgtMGM5Yy0z NzZjLWFmNWMtODNmNWIzYjY4NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITVSa3Muc2oHY6/4JzUSPwO1mZXThBi1KCkdAaF8cUdGcm9LhmR+uiV I/B1iWJySSexsiopVfqvWb+JJZt3OsMSR7DeGgJuAzcVHCbGwjaVcAztG9T3lEnN rdJl92L2KoCS06DbX7FR8+bE+yvbWyEFDj/JgCN/xlmqohlm62DLBUbLy4BFONpM 0Q+decfAy5dvfIKl3/DzOXkJW0Ibm2c69+IG8Q9hra3HnX9KiDF3ZzuG4LayqMtp NYuaZ83Qqk+7I0NJxSbVgsNHvqgS/LD9V0+mBzDrof+tC6d5enh7r2vQDnEKAviv RR0DKIuLTYohQVYqT03eIoTmvZ4jW0o= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:19 2026 by rpki-client