$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa File: eb6bc177-0801-37e2-977d-c23f6a5ca132.roa (raw, json) Hash identifier: kp8ar/HVgXV6d90GqwBNN4XaUiaao4k/2hi5Ufr6ORU= Subject key identifier: F0:5B:18:FF:91:33:A4:7A:CF:21:C0:4E:5D:41:F7:67:8C:84:BD:50 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584D98BAA8C1355E23B6F59F1B00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398210 IP address blocks: 168.220.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a8:c1:35:5e:23:b6:f5:9f:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=b7f593a6-5f19-4bea-ae34-8d3e6da5e622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:20:ba:ba:e6:4b:73:b9:14:7d:96:70:2f: 09:f4:e8:06:1e:94:c6:4c:ae:7c:d9:a9:70:16:7f: c4:38:18:73:ff:2d:bd:ee:19:e4:2a:62:f5:fc:22: d6:13:cf:ac:de:91:90:ab:00:f3:28:33:5b:75:e5: 4c:1a:a1:86:93:2e:c9:b6:d9:44:72:43:b3:61:1c: 26:b8:76:90:b2:c0:ba:1f:ff:20:0b:a8:06:87:9b: c8:88:dc:f0:81:6a:bc:61:7a:cd:91:e1:ae:0d:4c: 3a:d4:01:16:d7:d0:17:24:b4:7d:06:2d:39:fd:7d: 14:3a:32:53:88:17:07:68:ab:5d:23:92:56:45:42: 2b:d0:68:6e:9f:c4:d8:02:52:f8:8f:18:1b:1d:53: 32:51:a0:cd:27:df:92:90:0b:8b:3a:b6:0f:db:21: 83:42:53:13:b5:12:73:3b:72:ba:5d:28:57:a6:8b: d5:1a:e9:ed:25:d1:1a:7d:cd:e9:82:74:da:9d:39: 6b:df:db:58:77:ae:12:12:28:4d:60:5b:13:a4:a5: ee:63:9d:6f:4b:46:41:e1:88:06:05:5b:f8:0a:c8: 64:c4:8a:55:bc:6e:56:53:6a:49:61:c6:2b:da:5b: f5:13:c4:e8:ed:85:34:e6:79:4d:39:03:01:fe:8f: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:18:FF:91:33:A4:7A:CF:21:C0:4E:5D:41:F7:67:8C:84:BD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a0:d3:fe:b4:eb:10:04:4f:7f:62:3f:68:90:00:a4:ad:87: ce:93:e2:b2:ec:de:e3:1c:40:66:a4:24:69:08:2e:bc:0e:ff: 67:0b:b8:58:f5:fd:ae:35:5e:27:c6:e9:79:0a:a1:8c:4c:6c: d1:d4:32:a5:0e:f0:80:03:84:67:ba:77:ec:ca:8b:99:3c:12: 91:13:64:2f:2e:d8:3c:e2:97:65:ba:67:82:37:38:9c:18:c8: ce:26:8b:a8:b6:db:7e:a6:10:cd:1e:d4:57:69:8b:80:49:fc: 44:24:0c:06:37:ff:b9:90:5d:8d:04:8b:3f:b5:e0:52:78:ac: 7d:44:ea:c9:b8:e0:32:76:44:87:7c:87:ec:3a:30:44:1a:96: d3:77:20:3b:55:87:ac:74:7f:ce:d1:9e:eb:ca:17:5c:ba:19: 7c:a7:de:d7:cf:f8:e7:af:4b:8e:a6:bb:87:fb:70:46:e5:2f: 13:c1:16:2c:bc:55:0c:37:ba:5e:ca:4a:9f:76:4b:a9:e2:7e: 04:5e:f4:82:ee:45:88:6a:42:66:90:50:89:49:4e:fc:da:62: b5:43:25:0c:3b:88:04:0e:82:bf:7c:e7:54:e7:43:a7:cc:e2: 6d:57:ca:c6:7a:b0:10:45:ac:2b:0f:6e:8e:22:a5:02:12:a6: c1:7a:89:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqjBNV4jtvWfGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YjdmNTkzYTYtNWYxOS00YmVhLWFlMzQtOGQzZTZkYTVlNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofIgurrmS3O5FH2WcC8J9OgGHpTGTK582alw Fn/EOBhz/y297hnkKmL1/CLWE8+s3pGQqwDzKDNbdeVMGqGGky7JttlEckOzYRwm uHaQssC6H/8gC6gGh5vIiNzwgWq8YXrNkeGuDUw61AEW19AXJLR9Bi05/X0UOjJT iBcHaKtdI5JWRUIr0Ghun8TYAlL4jxgbHVMyUaDNJ9+SkAuLOrYP2yGDQlMTtRJz O3K6XShXpovVGuntJdEafc3pgnTanTlr39tYd64SEihNYFsTpKXuY51vS0ZB4YgG BVv4CshkxIpVvG5WU2pJYcYr2lv1E8To7YU05nlNOQMB/o+sjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBbGP+RM6R6zyHATl1B92eMhL1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZWI2YmMxNzctMDgwMS0z N2UyLTk3N2QtYzIzZjZhNWNhMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+g0/606xAET39iP2iQAKSth86T4rLs3uMcQGakJGkILrwO/2cLuFj1 /a41XifG6XkKoYxMbNHUMqUO8IADhGe6d+zKi5k8EpETZC8u2Dzil2W6Z4I3OJwY yM4mi6i2236mEM0e1Fdpi4BJ/EQkDAY3/7mQXY0Eiz+14FJ4rH1E6sm44DJ2RId8 h+w6MEQaltN3IDtVh6x0f87RnuvKF1y6GXyn3tfP+OevS46mu4f7cEblLxPBFiy8 VQw3ul7KSp92S6nifgRe9ILuRYhqQmaQUIlJTvzaYrVDJQw7iAQOgr9851TnQ6fM 4m1XysZ6sBBFrCsPbo4ipQISpsF6iWE= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:26 2026 by rpki-client