$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa File: d7dbe350-33a5-3258-aa70-7a64de946ef8.roa (raw, json) Hash identifier: nEwFoNOAD8j6iwRTZKUbo/uis31CF8mvjJ9ksO1KfI4= Subject key identifier: 35:70:ED:2C:59:EF:0B:26:76:8A:6E:6C:EE:09:DA:A9:1E:36:4D:99 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584DDE85B7FC1139AE529E40FD80 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 40509 IP address blocks: 168.220.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:b7:fc:11:39:ae:52:9e:40:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=036580b9-f7ab-475e-a581-45a353d3cf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:76:d9:c6:d6:3e:e8:49:b8:b9:53:f8:9c: d2:42:58:0a:a2:d3:62:4f:0f:3e:bd:46:a9:b7:28: a5:dc:a6:09:6d:b6:a6:6d:3b:bc:2d:e0:f5:4c:f7: 25:02:2d:69:f9:26:d8:5c:92:20:0a:15:20:da:8e: f9:08:ce:4d:97:e0:39:bc:7c:2f:df:b9:18:2c:12: 3b:e4:19:f9:82:b9:53:03:33:de:0b:14:bd:5d:3b: 94:04:ab:ca:29:5f:6e:ee:75:58:51:55:64:7e:fd: eb:b9:53:47:fb:88:ae:e4:ef:a4:71:97:1e:96:17: 9f:46:0f:9b:84:24:ea:16:08:8f:6f:cf:56:86:d7: f7:26:75:fb:78:2c:19:2f:da:2d:56:38:ee:71:bc: cb:10:bb:7c:1d:b1:19:af:36:b6:27:28:1f:d2:70: 84:02:0a:01:c6:c8:d1:be:26:56:a1:bd:86:fc:fa: 7b:ab:73:9d:49:7b:7e:4f:90:a9:99:45:60:56:bf: c0:f7:85:c4:5a:1b:ef:60:e9:77:cb:28:48:8a:70: 70:07:21:65:26:65:06:88:36:92:93:45:80:df:ba: d9:0d:03:17:0f:cb:30:cc:a8:76:e6:91:d9:80:64: 63:d0:dc:2e:d4:bd:58:28:1a:2c:8c:5a:52:ee:b3: 8d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:70:ED:2C:59:EF:0B:26:76:8A:6E:6C:EE:09:DA:A9:1E:36:4D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 168.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:af:0f:bd:7a:a3:52:84:38:da:ab:09:64:24:09:fc:00:d2: 61:ea:66:ec:15:f1:6f:7c:bb:48:52:1e:c5:8b:5b:fe:b7:f4: 55:1b:ba:0b:1f:94:e5:cf:de:98:33:28:6d:e1:7f:44:4c:ee: 32:2c:8d:92:2f:b7:c9:6e:fa:29:16:06:13:91:1c:2f:d1:c6: 2b:6b:de:ac:79:4e:15:63:67:df:1d:b6:b5:f5:e9:c2:cf:88: b0:1e:26:b4:9f:48:fc:e6:8e:be:15:28:bd:73:72:cd:21:e4: c9:c4:c0:d9:79:88:61:44:09:c3:a3:0f:a5:52:e2:e6:49:dc: da:be:e2:41:71:b4:e5:c4:7e:53:9f:aa:f8:7f:9c:81:47:c1: bb:04:43:fc:52:d7:f9:45:c0:0f:83:c6:af:91:0e:c5:b9:7a: 35:ae:9c:28:74:d1:14:d4:00:52:8a:83:5b:ed:67:ee:0c:9d: d6:d9:6f:f9:a9:7d:3d:e0:7d:6c:58:23:68:d2:86:e7:fe:a4: 87:2f:24:ef:32:3f:ae:4a:4d:1f:f3:16:48:0e:a9:24:02:65: fc:eb:b0:96:a7:54:dc:24:f9:2f:2e:94:64:af:6b:9e:cb:17: ab:e7:a8:82:8c:fe:ab:7e:9b:da:13:ec:ae:47:d9:c0:63:28: 5d:26:ee:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehbf8ETmuUp5A/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk MDM2NTgwYjktZjdhYi00NzVlLWE1ODEtNDVhMzUzZDNjZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmId22cbWPuhJuLlT+JzSQlgKotNiTw8+vUap tyil3KYJbbambTu8LeD1TPclAi1p+SbYXJIgChUg2o75CM5Nl+A5vHwv37kYLBI7 5Bn5grlTAzPeCxS9XTuUBKvKKV9u7nVYUVVkfv3ruVNH+4iu5O+kcZcelhefRg+b hCTqFgiPb89Whtf3JnX7eCwZL9otVjjucbzLELt8HbEZrza2Jygf0nCEAgoBxsjR viZWob2G/Pp7q3OdSXt+T5CpmUVgVr/A94XEWhvvYOl3yyhIinBwByFlJmUGiDaS k0WA37rZDQMXD8swzKh25pHZgGRj0Nwu1L1YKBosjFpS7rONYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVw7SxZ7wsmdopubO4J2qkeNk2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZDdkYmUzNTAtMzNhNS0z MjU4LWFhNzAtN2E2NGRlOTQ2ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqNxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2vD716o1KEONqrCWQkCfwA0mHqZuwV8W98u0hSHsWLW/639FUbugsf lOXP3pgzKG3hf0RM7jIsjZIvt8lu+ikWBhORHC/Rxitr3qx5ThVjZ98dtrX16cLP iLAeJrSfSPzmjr4VKL1zcs0h5MnEwNl5iGFECcOjD6VS4uZJ3Nq+4kFxtOXEflOf qvh/nIFHwbsEQ/xS1/lFwA+Dxq+RDsW5ejWunCh00RTUAFKKg1vtZ+4MndbZb/mp fT3gfWxYI2jShuf+pIcvJO8yP65KTR/zFkgOqSQCZfzrsJanVNwk+S8ulGSva57L F6vnqIKM/qt+m9oT7K5H2cBjKF0m7vo= -----END CERTIFICATE-----Generated at Mon May 25 05:49:59 2026 by rpki-client