$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa File: 9061acde-1566-3f28-a9b6-14f165759f16.roa (raw, json) Hash identifier: kiciKupH2qRJBxb0Y0p3++bVDUK2OHKw2h/ZeiPjBlo= Subject key identifier: F0:47:DB:06:DC:10:5C:6A:23:67:89:BC:9E:ED:4E:D0:98:25:28:34 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA9400D36CDB9BAE34000 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:40:0d:36:cd:b9:ba:e3:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=f008b01b-a934-451a-a119-d42a85626ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0c:0d:19:f1:ed:83:0c:45:17:ae:84:67:4c: 13:5d:e0:72:02:d4:ca:90:cf:f7:98:6c:64:14:39: 26:a3:46:24:21:99:23:26:89:e3:a7:a1:e0:d4:58: 15:fa:5e:bc:60:d9:76:ee:3b:df:d8:3f:fe:ac:38: 20:30:7f:80:6b:11:fb:f3:1c:d0:bd:b1:92:25:c7: d4:2c:fd:dc:f7:8e:e2:9d:6a:24:a2:e1:66:06:dc: 82:e4:a8:b3:6f:c8:ee:cf:e2:0c:d9:d4:a5:1b:d0: c9:1a:ca:08:05:15:b2:0e:6d:5a:e7:48:eb:70:aa: 22:31:66:8f:99:58:99:3b:2e:ca:96:3a:cc:dd:19: 13:2d:b2:6a:93:ec:36:7a:37:2f:22:ec:ed:95:7e: c6:ba:8a:e5:ed:56:dc:33:c2:89:a0:78:f8:9b:ca: cd:07:a7:3a:c2:d6:be:77:71:3f:79:30:fe:2d:4f: 5a:99:c9:42:27:6d:07:3b:a0:2e:e1:42:8d:e7:cb: 95:71:80:08:ab:32:dc:88:38:56:4e:8c:2d:4d:7d: 0f:00:15:58:26:78:07:fa:53:00:0b:50:15:ed:70: a7:00:58:2b:38:e9:c3:ff:2a:20:84:3d:61:d7:83: e5:b2:34:01:e5:29:98:c5:02:fc:78:bf:1f:75:80: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:47:DB:06:DC:10:5C:6A:23:67:89:BC:9E:ED:4E:D0:98:25:28:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8f:d8:9e:d5:f9:b5:46:a8:e3:6b:77:3c:22:76:37:63:4e: 9a:1a:4d:12:ad:b5:ee:37:28:b0:c1:7f:86:03:ef:68:98:f4: a3:7f:39:86:c6:e6:12:b0:c6:b5:ea:4f:80:cc:38:ab:0b:95: f6:a5:07:b4:72:8b:fb:d5:1d:47:f7:00:a9:91:c8:18:6e:ab: dd:a2:64:fb:93:9d:a4:6c:5a:8d:c8:ee:a6:e6:e1:92:c5:8b: ce:1a:78:74:a9:08:6a:84:8b:21:ea:94:ec:9f:cc:72:1d:0f: 89:69:46:03:17:c1:ac:5a:bf:d4:d1:3b:88:78:0a:1d:3b:9e: e5:fe:9f:e9:2d:1c:1a:df:87:9a:60:f8:b9:64:11:d3:38:59: e8:b4:35:ee:76:b6:b6:a7:3a:85:3d:03:cd:38:d1:55:3a:f3: a0:90:ff:b7:6f:df:3a:46:8e:e4:de:43:95:e8:74:f4:a9:65: af:24:19:0f:53:d5:91:e1:61:04:c5:b4:d9:b7:04:3b:1d:01: e4:97:9d:de:c4:0f:ac:0e:6b:dc:74:6f:4b:e0:e7:1f:65:76: 1f:ca:6d:78:fe:07:a2:01:b8:6b:2a:d2:8d:28:24:35:33:75: 0a:4e:93:15:0e:7f:ee:93:4c:2d:4f:29:35:15:d9:46:76:e1: d6:8f:d6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqlADTbNubrjQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjAwOGIwMWItYTkzNC00NTFhLWExMTktZDQyYTg1NjI2ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQwNGfHtgwxFF66EZ0wTXeByAtTKkM/3mGxk FDkmo0YkIZkjJonjp6Hg1FgV+l68YNl27jvf2D/+rDggMH+AaxH78xzQvbGSJcfU LP3c947inWokouFmBtyC5Kizb8juz+IM2dSlG9DJGsoIBRWyDm1a50jrcKoiMWaP mViZOy7KljrM3RkTLbJqk+w2ejcvIuztlX7Guorl7VbcM8KJoHj4m8rNB6c6wta+ d3E/eTD+LU9amclCJ20HO6Au4UKN58uVcYAIqzLciDhWTowtTX0PABVYJngH+lMA C1AV7XCnAFgrOOnD/yoghD1h14PlsjQB5SmYxQL8eL8fdYCoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBH2wbcEFxqI2eJvJ7tTtCYJSg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvOTA2MWFjZGUtMTU2Ni0z ZjI4LWE5YjYtMTRmMTY1NzU5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSP2J7V+bVGqONrdzwidjdjTpoaTRKtte43KLDBf4YD72iY9KN/OYbG 5hKwxrXqT4DMOKsLlfalB7Ryi/vVHUf3AKmRyBhuq92iZPuTnaRsWo3I7qbm4ZLF i84aeHSpCGqEiyHqlOyfzHIdD4lpRgMXwaxav9TRO4h4Ch07nuX+n+ktHBrfh5pg +LlkEdM4Wei0Ne52tranOoU9A8040VU686CQ/7dv3zpGjuTeQ5XodPSpZa8kGQ9T 1ZHhYQTFtNm3BDsdAeSXnd7ED6wOa9x0b0vg5x9ldh/KbXj+B6IBuGsq0o0oJDUz dQpOkxUOf+6TTC1PKTUV2UZ24daP1gM= -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:35 2026 by rpki-client