$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa File: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (raw, json) Hash identifier: TyyRCLa3NtgW8fWFHkWh5m5livLLcKAA7Cv1wtJWptE= Subject key identifier: ED:0D:CF:86:B8:E4:E2:C7:4C:89:E9:B4:41:8D:98:B2:F4:CD:F0:94 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA9505111E7035C197880 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:50:51:11:e7:03:5c:19:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=3ab22b63-e88c-45a1-a41d-c9c191371465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:ee:08:1e:c3:8a:b1:ef:7d:3c:1e:f7:f5: d2:8c:71:3a:e6:bb:2b:cb:46:05:94:ff:d0:95:d2: 3e:22:51:97:b1:ce:ed:f4:04:c6:9e:6b:1e:25:14: d9:d7:23:01:b3:ac:dd:77:0d:1f:5a:64:6f:3e:69: e1:a8:33:30:bf:d1:70:39:d0:11:df:f1:15:64:a2: c4:6b:a3:12:61:9c:40:63:db:0d:1d:8f:8b:d7:5b: fe:9f:25:ad:3c:94:5d:01:f0:fa:b4:26:0a:10:28: f8:eb:c0:86:a9:0f:eb:86:eb:0d:ca:9e:f5:cc:49: 84:ee:82:6f:0d:31:25:40:40:4b:eb:5f:25:66:75: c7:94:5e:94:4b:d2:b5:8b:c6:91:63:2a:ae:71:59: 43:13:92:ff:e8:b7:93:49:67:78:da:dd:1e:7c:8f: 5d:ed:fe:ab:bd:96:06:74:d7:4a:4a:8a:ff:09:27: 5a:c7:58:08:c2:42:3b:be:ac:e8:5d:fb:9e:03:2c: e4:fe:91:fe:ad:44:a3:74:ac:88:ec:a8:9b:04:5f: c9:80:71:c0:08:26:fb:84:d4:4a:9f:43:00:a9:e0: d4:0a:e3:27:e6:1d:8b:53:d9:0c:22:6d:60:08:8a: 1e:2c:42:8f:f1:da:9a:72:a0:f0:ae:03:c5:eb:12: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0D:CF:86:B8:E4:E2:C7:4C:89:E9:B4:41:8D:98:B2:F4:CD:F0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:92:85:04:13:e8:03:fb:96:cc:ab:56:cb:fe:93:76:21:bf: e5:d3:bc:ae:0c:07:0b:e8:d7:05:7e:96:34:61:49:a6:5b:56: a0:85:28:5b:15:a0:2f:63:dc:7a:b1:19:ed:6d:f7:58:dc:30: 6e:6e:c4:e4:6d:82:9f:6b:72:6f:f5:f6:ed:fd:15:a5:d2:93: b7:5e:de:46:7c:1a:d6:9a:30:d1:0f:57:11:26:7f:2d:78:8c: 63:86:c4:c1:3b:95:32:02:fa:7b:1d:b7:28:28:9f:d2:a9:79: c9:f3:f4:e6:fb:54:2c:b2:11:89:a7:db:bd:eb:19:ad:47:77: 99:27:82:4e:18:a5:ec:38:0c:3e:b2:c9:92:19:ea:99:04:d4: 86:a7:09:bb:ca:29:d9:dc:59:84:32:9e:02:aa:6c:23:2c:61: 11:34:94:15:ba:fa:89:07:29:fc:1f:6e:08:72:62:74:13:38: ee:d4:cd:9a:84:15:24:7c:72:4e:96:46:55:05:4d:6f:4e:5d: de:3c:ad:5a:87:b2:69:49:c9:28:b5:3a:d4:5b:50:21:59:a1: 6f:d1:a4:65:b2:6b:d8:91:0d:ec:c3:b6:27:64:1c:21:ab:10: 79:41:24:d9:a2:64:74:24:83:43:a0:1a:fe:e6:c9:b8:47:a7: 04:41:6c:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqlQURHnA1wZeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk M2FiMjJiNjMtZTg4Yy00NWExLWE0MWQtYzljMTkxMzcxNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwafuCB7DirHvfTwe9/XSjHE65rsry0YFlP/Q ldI+IlGXsc7t9ATGnmseJRTZ1yMBs6zddw0fWmRvPmnhqDMwv9FwOdAR3/EVZKLE a6MSYZxAY9sNHY+L11v+nyWtPJRdAfD6tCYKECj468CGqQ/rhusNyp71zEmE7oJv DTElQEBL618lZnXHlF6US9K1i8aRYyqucVlDE5L/6LeTSWd42t0efI9d7f6rvZYG dNdKSor/CSdax1gIwkI7vqzoXfueAyzk/pH+rUSjdKyI7KibBF/JgHHACCb7hNRK n0MAqeDUCuMn5h2LU9kMIm1gCIoeLEKP8dqacqDwrgPF6xLIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0Nz4a45OLHTInptEGNmLL0zfCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYTZlOTBhN2EtYWQ2Yy0z MTVjLWI2YzctYjg0NzUyOTdkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+ShQQT6AP7lsyrVsv+k3Yhv+XTvK4MBwvo1wV+ljRhSaZbVqCFKFsV oC9j3HqxGe1t91jcMG5uxORtgp9rcm/19u39FaXSk7de3kZ8GtaaMNEPVxEmfy14 jGOGxME7lTIC+nsdtygon9Kpecnz9Ob7VCyyEYmn273rGa1Hd5kngk4Ypew4DD6y yZIZ6pkE1IanCbvKKdncWYQyngKqbCMsYRE0lBW6+okHKfwfbghyYnQTOO7UzZqE FSR8ck6WRlUFTW9OXd48rVqHsmlJySi1OtRbUCFZoW/RpGWya9iRDezDtidkHCGr EHlBJNmiZHQkg0OgGv7mybhHpwRBbMc= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:45 2026 by rpki-client