$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa File: 661fc493-e5f2-3843-b87f-cec243b8a026.roa (raw, json) Hash identifier: +90NhxEhSx63jYCoTe4sir7iLqrjsRZwrNOfPEp4IEk= Subject key identifier: A4:75:31:BB:D0:C2:15:5F:C9:62:41:59:A0:EF:C0:E6:FB:B3:8E:5D Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA910E5CF30660AD56480 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:10:e5:cf:30:66:0a:d5:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=795ff8a6-9317-4f2c-ab07-eeef0064263b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:fb:a7:b5:20:c1:f5:91:fc:27:3e:fd:ce: aa:06:75:b6:98:9e:96:44:4e:be:7f:de:06:92:4d: 06:72:f8:84:0f:4d:03:5c:34:aa:75:1c:e8:01:0e: f5:84:3e:b6:6f:f9:8d:d0:03:cd:ad:1a:a6:7c:4d: 99:47:30:0d:8b:7f:72:0e:06:48:d9:35:d3:0b:24: 95:cd:71:c5:04:4e:1f:87:47:3e:a4:0e:78:f1:c9: c3:e2:bd:f1:fe:a9:40:6e:d5:17:89:34:6f:a2:26: c6:75:34:79:48:b4:5d:0a:d4:d3:78:d7:13:bd:da: fb:d4:f1:07:ee:fd:fc:57:2e:cf:c3:31:fb:5c:52: 1a:04:93:4c:24:5d:db:e7:2b:42:d5:2c:37:16:ab: b1:26:07:ed:cf:be:55:d0:8e:36:84:e2:92:00:70: 70:10:d0:2d:49:e3:49:55:34:ca:b9:b3:74:ea:3b: 27:16:ad:3d:b7:37:41:31:09:a5:4d:4f:7e:27:8b: f6:d9:74:27:bf:38:e1:74:b6:ab:b9:ea:d9:ef:76: ce:76:1f:ef:e0:9d:01:7a:65:c1:2e:74:d5:b8:4b: 06:0d:82:03:d5:35:45:3a:cc:8e:0c:47:6a:47:db: 43:16:d3:92:b7:84:58:51:59:82:a4:91:df:1c:f0: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:31:BB:D0:C2:15:5F:C9:62:41:59:A0:EF:C0:E6:FB:B3:8E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4e:1f:22:94:71:28:b7:f9:72:d7:60:b5:12:17:79:b6:85: af:c3:33:a7:13:82:8a:55:2d:64:1e:fa:c4:43:bc:da:34:1e: d9:68:d2:7a:e3:c1:b1:c5:9e:e8:81:2a:d2:f1:c7:0c:71:ab: 01:f0:ce:a6:5b:79:47:6f:70:df:8b:9d:8e:f2:cb:88:ba:ae: ee:0e:f8:1f:45:80:31:d9:83:48:e0:e4:b2:a0:15:6d:b8:96: 46:69:2c:da:41:3d:18:58:24:72:aa:e9:57:0e:39:05:0a:7f: 36:01:7b:8c:ac:d9:ec:6a:1f:1c:e9:b2:e7:06:d0:68:ea:83: ef:19:9f:bf:51:e3:ac:21:55:f7:e2:00:fb:f8:11:f4:07:b2: c9:f2:1f:65:5e:fe:ff:00:7b:2c:47:bb:2b:f3:af:98:2f:0d: 5b:98:33:12:af:e9:7e:5b:81:c7:c1:76:ee:e2:07:30:62:2b: 99:a9:f5:ac:54:4f:49:b1:79:3d:e8:a4:26:ba:b0:74:6e:48: 7c:94:f9:54:9a:24:fe:ca:0f:93:ab:f2:01:b4:62:dc:03:54: 71:1f:18:75:87:a9:36:ce:c3:1e:28:63:b3:96:5f:28:1e:59: 89:79:96:0d:ba:ea:bc:e3:42:3d:c4:63:c8:71:12:e7:11:e5: fd:9f:71:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqkQ5c8wZgrVZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk Nzk1ZmY4YTYtOTMxNy00ZjJjLWFiMDctZWVlZjAwNjQyNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGD7p7UgwfWR/Cc+/c6qBnW2mJ6WRE6+f94G kk0GcviED00DXDSqdRzoAQ71hD62b/mN0APNrRqmfE2ZRzANi39yDgZI2TXTCySV zXHFBE4fh0c+pA548cnD4r3x/qlAbtUXiTRvoibGdTR5SLRdCtTTeNcTvdr71PEH 7v38Vy7PwzH7XFIaBJNMJF3b5ytC1Sw3FquxJgftz75V0I42hOKSAHBwENAtSeNJ VTTKubN06jsnFq09tzdBMQmlTU9+J4v22XQnvzjhdLaruerZ73bOdh/v4J0BemXB LnTVuEsGDYID1TVFOsyODEdqR9tDFtOSt4RYUVmCpJHfHPCORwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR1MbvQwhVfyWJBWaDvwOb7s45dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNjYxZmM0OTMtZTVmMi0z ODQzLWI4N2YtY2VjMjQzYjhhMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFOHyKUcSi3+XLXYLUSF3m2ha/DM6cTgopVLWQe+sRDvNo0Htlo0nrj wbHFnuiBKtLxxwxxqwHwzqZbeUdvcN+LnY7yy4i6ru4O+B9FgDHZg0jg5LKgFW24 lkZpLNpBPRhYJHKq6VcOOQUKfzYBe4ys2exqHxzpsucG0Gjqg+8Zn79R46whVffi APv4EfQHssnyH2Ve/v8AeyxHuyvzr5gvDVuYMxKv6X5bgcfBdu7iBzBiK5mp9axU T0mxeT3opCa6sHRuSHyU+VSaJP7KD5Or8gG0YtwDVHEfGHWHqTbOwx4oY7OWXyge WYl5lg266rzjQj3EY8hxEucR5f2fcZk= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:15 2026 by rpki-client