$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: 2vXUsZbIXVXVY8T5iHaEZ8RkZGVkyJektNICCH/xFjA= Subject key identifier: AA:B3:DC:FE:D4:71:59:D0:37:9B:2E:C9:C0:46:24:55:B2:10:6D:A5 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA95F806FCCB80E2BE500 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:5f:80:6f:cc:b8:0e:2b:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=725ad9c4-190a-4c1e-bea7-4d63378ada67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:0b:da:b1:96:cf:ab:f4:b4:64:28:25:16: e4:94:a8:b8:6b:86:57:9d:02:5f:df:03:e2:d1:69: 2a:76:d8:bc:8f:89:6e:a8:1a:50:b7:61:51:ae:5f: 3e:32:48:52:db:81:c1:45:9f:41:9a:01:41:bf:89: 68:19:5a:13:70:f4:4f:99:8e:cd:a3:af:5b:49:e3: 13:ab:cd:2c:a1:75:15:9d:98:9e:5e:60:13:ce:87: 86:9d:eb:ce:d4:c7:f6:ad:81:d4:26:4e:68:ac:50: e7:2e:24:fd:b2:e3:93:b5:ee:09:4e:85:a3:47:28: b0:80:21:a2:ac:30:e1:6f:52:7c:63:3d:17:97:db: 88:a7:34:7d:92:e2:86:03:3e:a0:ca:32:fa:7e:13: 9c:e7:6c:4f:a1:81:f0:48:82:d1:df:08:b9:87:33: ac:2f:47:7f:ba:fb:ee:03:ce:75:42:59:af:19:dd: 4d:85:5e:1d:3e:15:71:59:63:39:42:29:56:03:58: ea:4c:e7:37:4c:e8:aa:cc:af:6b:b1:73:6b:52:1e: 45:63:7b:68:c0:4b:ad:54:49:bd:34:7f:99:87:6b: e0:1f:94:81:25:5a:c7:b0:4e:e5:c2:70:e0:5a:94: 6a:0c:28:52:29:fa:89:17:f2:fe:8f:00:08:57:78: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B3:DC:FE:D4:71:59:D0:37:9B:2E:C9:C0:46:24:55:B2:10:6D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8e:f2:60:39:bc:e7:ad:fa:50:28:35:9f:78:9d:d9:fa:e0: 64:31:49:30:92:cd:92:ff:1d:60:9a:a0:8a:1c:45:db:68:f4: da:7f:3c:ae:7b:dc:5e:f6:40:e9:52:ff:a1:07:dc:09:c5:b9: 47:e9:b8:86:38:f3:65:0c:46:d3:6e:e8:dd:be:b9:a9:e4:76: c3:04:a1:15:5b:f7:4a:be:fa:2c:7d:e6:31:84:c7:31:81:d3: d6:37:30:fc:e6:bc:b3:57:5f:3b:93:50:13:ff:ba:e1:e3:0f: 03:16:96:0c:36:2c:60:d1:31:85:79:d7:b8:24:7c:bb:08:59: e8:bc:15:a2:4a:93:3a:df:5a:ad:44:db:ca:c3:29:16:10:89: 12:88:e8:73:df:8e:0d:18:e6:fe:6b:a4:73:ba:be:ce:f8:dc: e1:42:30:5a:e9:48:82:8b:2d:9c:07:73:75:94:7e:b7:be:84: 37:80:b8:22:f8:21:b4:14:4a:30:13:f0:e4:d9:94:d3:53:38: da:40:11:ef:cc:e7:33:a7:53:27:41:2c:8d:21:2f:c3:8f:a6: b6:0b:a8:35:09:ba:df:25:db:97:ed:93:31:9b:32:cf:ac:21: 6d:30:f1:ac:d4:ec:0a:b3:7b:d7:2b:2b:37:70:50:19:fe:86: b9:5e:64:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqlfgG/MuA4r5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NzI1YWQ5YzQtMTkwYS00YzFlLWJlYTctNGQ2MzM3OGFkYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vIL2rGWz6v0tGQoJRbklKi4a4ZXnQJf3wPi 0Wkqdti8j4luqBpQt2FRrl8+MkhS24HBRZ9BmgFBv4loGVoTcPRPmY7No69bSeMT q80soXUVnZieXmATzoeGnevO1Mf2rYHUJk5orFDnLiT9suOTte4JToWjRyiwgCGi rDDhb1J8Yz0Xl9uIpzR9kuKGAz6gyjL6fhOc52xPoYHwSILR3wi5hzOsL0d/uvvu A851QlmvGd1NhV4dPhVxWWM5QilWA1jqTOc3TOiqzK9rsXNrUh5FY3towEutVEm9 NH+Zh2vgH5SBJVrHsE7lwnDgWpRqDChSKfqJF/L+jwAIV3hQYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqz3P7UcVnQN5suycBGJFWyEG2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyO8mA5vOet+lAoNZ94ndn64GQxSTCSzZL/HWCaoIocRdto9Np/PK57 3F72QOlS/6EH3AnFuUfpuIY482UMRtNu6N2+uankdsMEoRVb90q++ix95jGExzGB 09Y3MPzmvLNXXzuTUBP/uuHjDwMWlgw2LGDRMYV517gkfLsIWei8FaJKkzrfWq1E 28rDKRYQiRKI6HPfjg0Y5v5rpHO6vs743OFCMFrpSIKLLZwHc3WUfre+hDeAuCL4 IbQUSjAT8OTZlNNTONpAEe/M5zOnUydBLI0hL8OPprYLqDUJut8l25ftkzGbMs+s IW0w8azU7Aqze9crKzdwUBn+hrleZGw= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:26 2026 by rpki-client