$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: 2bgKGz18a9ShVqhQ3Z+TGghd3CgP8sS9oEX4mmpaoq0= Subject key identifier: 44:3F:F7:18:E8:39:35:6B:16:32:A0:C4:92:C8:0D:8C:63:47:12:E0 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA8B0F232576B535EFC80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:b0:f2:32:57:6b:53:5e:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=9f0a3372-7faf-4868-84be-0e37ea11e45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:f1:f1:bc:01:96:fe:3a:65:02:b5:e0:61: 30:d5:bc:6c:a5:9e:a1:49:56:8e:4b:da:50:d3:a1: c0:7e:9b:4b:5a:b7:b0:8d:31:22:00:a8:99:49:ba: 9d:15:57:55:57:9d:c6:c5:4e:0b:dc:dd:12:66:a3: 2b:52:a3:c5:67:ee:41:cf:5b:8f:5f:87:71:a0:78: 7f:60:a7:10:b1:23:9c:b1:9d:61:26:f6:54:9c:29: 89:00:b0:7c:bb:4e:9f:e7:58:f8:9f:f1:90:f0:f6: e9:07:cb:2f:7b:ca:09:44:a6:94:e4:62:5f:4c:2d: f8:12:ae:2a:1d:e9:ff:7d:2e:71:72:6c:29:d3:39: 68:95:12:ef:a3:f4:ad:9f:e0:00:48:75:68:b1:be: 16:4c:46:a0:8f:d7:01:ed:bb:5c:8e:92:0b:c1:72: c8:2a:f8:3b:09:0c:04:a0:29:6a:23:e7:d5:b7:05: 39:0a:e7:f5:53:21:17:91:24:81:f9:0b:ec:2f:a1: 0a:b0:ff:0d:b4:78:67:61:28:40:1f:5e:2c:99:b7: ad:d6:b6:9e:c2:ce:00:39:d0:4c:c9:23:00:27:42: b3:53:20:9e:56:46:5f:b4:20:7d:61:8d:fa:2a:eb: 82:21:84:e6:62:50:4c:8b:1d:6a:ba:61:3c:55:e9: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:F7:18:E8:39:35:6B:16:32:A0:C4:92:C8:0D:8C:63:47:12:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e3:57:75:61:95:b0:50:fc:00:e5:e5:a3:80:5d:86:d5:fe: 04:d2:ce:f9:18:94:0a:8a:15:c6:cb:1a:b7:5e:a4:c6:22:37: ff:ba:e1:55:88:ed:f8:0c:4c:4a:cc:67:3a:39:5e:c7:04:8b: 64:8d:e4:0e:31:98:5b:d9:08:b1:45:16:a6:c9:a5:a3:b0:a5: 65:ef:94:12:8c:73:7d:5c:39:ed:51:7d:c5:f8:9b:43:e1:1f: ec:55:ae:8f:9d:96:85:b7:2c:f6:22:9a:36:2b:1a:51:8a:5c: 5d:e3:b9:50:41:fc:e3:b0:c1:f1:24:01:1c:f2:ae:e7:21:13: d7:f6:cf:1d:46:68:a8:e5:0c:9e:30:19:6f:4a:a7:f3:b6:e1: 61:3c:dd:fc:2b:87:99:29:fc:5f:27:d2:bd:e6:6c:bc:d8:2c: f1:e4:3d:89:e8:28:83:ac:ad:2e:1a:1f:5d:98:40:0d:a3:fb: 35:2f:e5:c3:1f:9c:69:17:b1:e9:14:21:98:48:c5:0c:a8:de: 17:6b:4f:8d:22:a6:b7:cb:f8:f0:23:15:74:db:98:1d:85:09: a1:73:55:f9:7f:3f:ae:c8:e2:bb:78:51:36:89:27:22:04:1b: 1d:a3:51:22:60:e3:60:43:a2:1c:99:a4:15:87:c6:8b:35:04: 45:05:29:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuqiw8jJXa1Ne/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk OWYwYTMzNzItN2ZhZi00ODY4LTg0YmUtMGUzN2VhMTFlNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmADx8bwBlv46ZQK14GEw1bxspZ6hSVaOS9pQ 06HAfptLWrewjTEiAKiZSbqdFVdVV53GxU4L3N0SZqMrUqPFZ+5Bz1uPX4dxoHh/ YKcQsSOcsZ1hJvZUnCmJALB8u06f51j4n/GQ8PbpB8sve8oJRKaU5GJfTC34Eq4q Hen/fS5xcmwp0zlolRLvo/Stn+AASHVosb4WTEagj9cB7btcjpILwXLIKvg7CQwE oClqI+fVtwU5Cuf1UyEXkSSB+QvsL6EKsP8NtHhnYShAH14smbet1raews4AOdBM ySMAJ0KzUyCeVkZftCB9YY36KuuCIYTmYlBMix1qumE8VekfnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ/9xjoOTVrFjKgxJLIDYxjRxLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLjV3VhlbBQ/ADl5aOAXYbV/gTSzvkYlAqKFcbLGrdepMYiN/+64VWI 7fgMTErMZzo5XscEi2SN5A4xmFvZCLFFFqbJpaOwpWXvlBKMc31cOe1RfcX4m0Ph H+xVro+dloW3LPYimjYrGlGKXF3juVBB/OOwwfEkARzyruchE9f2zx1GaKjlDJ4w GW9Kp/O24WE83fwrh5kp/F8n0r3mbLzYLPHkPYnoKIOsrS4aH12YQA2j+zUv5cMf nGkXsekUIZhIxQyo3hdrT40iprfL+PAjFXTbmB2FCaFzVfl/P67I4rt4UTaJJyIE Gx2jUSJg42BDohyZpBWHxos1BEUFKR8= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:23 2026 by rpki-client