$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa File: d231e946-74bf-3765-97f0-efb9933dc249.roa (raw, json) Hash identifier: 8uKcfTgFuxPaUnX3HZi/1rVwjX4IVxizPv5cjNhKV6A= Subject key identifier: F5:F9:88:E4:C8:0B:59:4D:0B:9A:E7:80:47:77:44:4B:35:9F:91:EE Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA8850A2C27F8AC30EA00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:85:0a:2c:27:f8:ac:30:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=533a9e8c-e3e1-4fc7-8048-15fb92c0ab5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:c8:5f:6d:42:de:6e:1d:2a:76:4f:9c:7b: 80:4d:91:ff:23:bb:39:78:07:ab:f8:50:db:20:9b: d9:75:0c:21:3e:42:2c:e0:1d:c9:46:04:f6:5f:64: 9a:4a:d3:c7:6e:40:73:02:6c:87:00:c7:00:3e:da: 1f:32:f5:aa:a0:df:46:49:f2:2b:50:1e:ec:9d:ce: 1e:4f:34:f1:9d:75:7c:41:46:b7:d5:74:72:43:d7: df:26:80:dc:9e:ad:b0:83:55:58:26:9f:78:b9:4d: da:23:26:23:91:57:5f:7d:27:11:45:e2:4c:32:b8: c4:82:a0:d0:00:97:4c:e9:d3:73:c9:c3:a4:d0:d7: 5e:82:60:ee:6c:27:f0:74:18:dc:49:90:79:c1:fe: 85:41:e5:86:71:a2:e0:c0:6d:d6:9d:10:0f:f0:7d: 22:9e:e0:9c:93:d3:ab:b2:1d:2e:ed:ff:ec:0b:a4: 58:79:e1:1c:e8:0a:87:1d:cd:a6:77:3f:89:24:0f: 2f:3f:7a:c5:7f:ad:7e:41:36:ce:24:86:54:06:88: e8:da:09:ca:37:35:98:4b:4e:9b:b4:23:60:2b:ec: 0e:55:5d:a8:7a:af:4f:56:a2:0a:9d:63:f8:c5:5a: 8b:32:1b:91:db:12:2a:76:34:f6:ec:2f:9d:af:d0: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F9:88:E4:C8:0B:59:4D:0B:9A:E7:80:47:77:44:4B:35:9F:91:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8b:aa:16:43:4a:5a:57:38:39:b9:99:64:4b:f7:76:e4:51: f7:c7:e0:1f:f5:73:f3:08:19:f6:e9:72:ef:a5:6a:f4:ec:be: de:64:82:21:13:c3:55:5a:12:fb:4b:74:c6:75:31:1f:5f:15: 06:e1:fb:e4:8b:75:e1:66:f6:17:bd:ce:54:be:ac:7c:bf:64: 0e:1f:35:b4:96:2a:db:b9:5b:16:75:d0:ed:ec:7a:28:03:b6: 20:8e:56:04:b8:60:cc:75:d8:07:9e:f7:0a:cb:e6:56:5e:7b: fb:0a:6b:a3:0c:14:f2:bb:14:3e:ae:a9:33:62:9a:b0:fa:2b: 8a:b7:51:a5:ef:88:3b:18:13:04:01:c0:03:3d:63:22:f2:cd: 92:57:95:6a:5b:8c:ef:96:bb:90:d3:b7:e6:d5:30:b4:f3:61: 98:a0:70:13:35:38:f3:c5:2e:ed:e9:3d:bf:b6:2b:3e:7a:fe: 5c:35:ff:7f:3d:30:54:16:e9:f9:f6:a0:9a:d4:15:8b:5b:89: 13:10:9c:57:31:c3:9c:25:08:86:93:29:25:77:44:57:bd:09: 4b:73:3d:d8:bc:5a:59:29:f2:79:53:cc:b9:14:ab:4f:9a:a0: 78:31:cb:b5:d3:0b:d4:d9:2e:5c:36:15:c5:51:3e:55:74:42: 82:6a:ea:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqiFCiwn+Kww6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NTMzYTllOGMtZTNlMS00ZmM3LTgwNDgtMTVmYjkyYzBhYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzvIX21C3m4dKnZPnHuATZH/I7s5eAer+FDb IJvZdQwhPkIs4B3JRgT2X2SaStPHbkBzAmyHAMcAPtofMvWqoN9GSfIrUB7snc4e TzTxnXV8QUa31XRyQ9ffJoDcnq2wg1VYJp94uU3aIyYjkVdffScRReJMMrjEgqDQ AJdM6dNzycOk0NdegmDubCfwdBjcSZB5wf6FQeWGcaLgwG3WnRAP8H0inuCck9Or sh0u7f/sC6RYeeEc6AqHHc2mdz+JJA8vP3rFf61+QTbOJIZUBojo2gnKNzWYS06b tCNgK+wOVV2oeq9PVqIKnWP4xVqLMhuR2xIqdjT27C+dr9ASdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX5iOTIC1lNC5rngEd3REs1n5HuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDIzMWU5NDYtNzRiZi0z NzY1LTk3ZjAtZWZiOTkzM2RjMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuLqhZDSlpXODm5mWRL93bkUffH4B/1c/MIGfbpcu+lavTsvt5kgiET w1VaEvtLdMZ1MR9fFQbh++SLdeFm9he9zlS+rHy/ZA4fNbSWKtu5WxZ10O3seigD tiCOVgS4YMx12Aee9wrL5lZee/sKa6MMFPK7FD6uqTNimrD6K4q3UaXviDsYEwQB wAM9YyLyzZJXlWpbjO+Wu5DTt+bVMLTzYZigcBM1OPPFLu3pPb+2Kz56/lw1/389 MFQW6fn2oJrUFYtbiRMQnFcxw5wlCIaTKSV3RFe9CUtzPdi8Wlkp8nlTzLkUq0+a oHgxy7XTC9TZLlw2FcVRPlV0QoJq6n4= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:36 2026 by rpki-client