$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa File: ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json) Hash identifier: rAfc7kB29a3xRdud8NYYYqd6LjAKC76rqEyhF3cTpPI= Subject key identifier: 7C:5A:03:7F:B1:9C:3E:91:95:F9:E2:A0:9C:09:75:3A:70:A4:74:D6 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA9023EF59D1087456100 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a9:02:3e:f5:9d:10:87:45:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=2e8c56d8-3246-44b4-ada6-92019381c092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9a:e6:dc:3c:90:09:a1:66:22:a6:b6:63:b6: 9a:2d:02:a7:6d:2b:be:03:2b:d0:7d:b0:79:14:4a: fc:a6:14:1e:fe:a8:b9:9e:fd:04:07:97:b2:24:fa: 07:28:e8:10:b0:05:ab:35:a1:e7:b3:a4:09:60:6b: dd:03:17:85:0a:25:9d:49:5a:bd:1e:e1:e9:16:7e: 5b:33:b1:8f:72:a2:af:26:5b:32:9a:5f:b8:42:ac: a5:25:27:dd:8c:e0:8a:3c:76:c7:e8:b4:b6:11:78: 56:7a:8d:6b:5e:d0:ce:08:9d:ac:d8:12:70:21:37: b6:4e:18:a3:fa:34:bf:0f:8a:e1:a6:d3:dd:03:4d: 35:1f:52:7e:6e:43:d3:bd:2b:4a:42:33:19:38:3f: ba:1e:d6:8a:47:69:e7:57:99:50:b0:ce:5b:c1:a2: 27:57:b9:60:20:78:06:d8:b1:fd:1a:19:48:aa:c3: 58:f3:43:14:aa:28:36:f3:1d:9a:de:b5:5a:a3:a3: 7f:c8:22:89:36:43:49:f2:21:58:08:94:8e:3d:99: d4:c6:f4:ff:8e:c2:f4:f4:04:d3:c4:2c:78:30:4a: 13:cb:ec:9b:46:36:a0:ee:14:50:aa:7e:c5:14:80: 20:85:bb:eb:87:2a:04:be:c4:c0:5e:da:bb:5b:33: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5A:03:7F:B1:9C:3E:91:95:F9:E2:A0:9C:09:75:3A:70:A4:74:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4e:b0:1c:ce:bd:06:fc:dc:d4:f6:d6:88:d2:1b:87:89:31: 0b:6a:38:01:ea:fb:99:33:49:4a:f8:01:e3:3b:78:71:4c:30: 88:7b:8a:97:8f:bb:41:50:b6:53:f0:a2:1d:06:17:80:0b:1b: a3:93:25:10:a5:04:d0:c1:f1:51:16:1a:78:5d:d0:2f:b9:6c: 96:cd:bc:24:59:36:3c:4e:7f:65:bb:61:81:f4:ab:0f:97:fc: 1d:73:13:27:ef:6d:37:be:20:bc:16:c0:96:08:49:5d:f8:e6: c6:04:7e:12:ee:53:12:e5:c3:28:e7:7b:14:26:59:63:52:fc: 03:48:f1:25:83:b3:4f:39:43:a4:ca:f9:29:d4:fa:1f:31:15: ae:08:75:8a:f4:07:8c:12:0d:84:ff:e3:49:02:8a:17:90:8d: be:f6:cc:92:1d:a9:ba:5d:af:88:48:f9:1c:b3:91:a6:89:38: 0d:09:81:00:02:f2:2e:06:91:66:12:46:c3:73:24:47:96:28: d9:da:55:15:10:9a:45:84:ab:a3:52:18:94:4f:e2:ba:b8:80: a6:73:29:a8:01:f3:29:35:73:9d:c9:56:08:41:8c:0f:45:04: 56:03:b9:5a:16:61:ad:71:51:5e:a1:ad:8a:06:ae:19:62:45: 21:5b:d6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqkCPvWdEIdFYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MmU4YzU2ZDgtMzI0Ni00NGI0LWFkYTYtOTIwMTkzODFjMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJrm3DyQCaFmIqa2Y7aaLQKnbSu+AyvQfbB5 FEr8phQe/qi5nv0EB5eyJPoHKOgQsAWrNaHns6QJYGvdAxeFCiWdSVq9HuHpFn5b M7GPcqKvJlsyml+4QqylJSfdjOCKPHbH6LS2EXhWeo1rXtDOCJ2s2BJwITe2Thij +jS/D4rhptPdA001H1J+bkPTvStKQjMZOD+6HtaKR2nnV5lQsM5bwaInV7lgIHgG 2LH9GhlIqsNY80MUqig28x2a3rVao6N/yCKJNkNJ8iFYCJSOPZnUxvT/jsL09ATT xCx4MEoTy+ybRjag7hRQqn7FFIAghbvrhyoEvsTAXtq7WzO0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxaA3+xnD6RlfnioJwJdTpwpHTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYWQzNTQ3N2EtN2IzMy0z YWJmLWE5N2YtNzViNWE4OTI3NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElOsBzOvQb83NT21ojSG4eJMQtqOAHq+5kzSUr4AeM7eHFMMIh7ipeP u0FQtlPwoh0GF4ALG6OTJRClBNDB8VEWGnhd0C+5bJbNvCRZNjxOf2W7YYH0qw+X /B1zEyfvbTe+ILwWwJYISV345sYEfhLuUxLlwyjnexQmWWNS/ANI8SWDs085Q6TK +SnU+h8xFa4IdYr0B4wSDYT/40kCiheQjb72zJIdqbpdr4hI+RyzkaaJOA0JgQAC 8i4GkWYSRsNzJEeWKNnaVRUQmkWEq6NSGJRP4rq4gKZzKagB8yk1c53JVghBjA9F BFYDuVoWYa1xUV6hrYoGrhliRSFb1lE= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:33 2026 by rpki-client