$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa File: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (raw, json) Hash identifier: CKWEl6xQfcnaB6x/0NehLoCyOiekHRLYk0vITd7BthI= Subject key identifier: 0D:AA:47:88:15:AE:33:03:40:11:3D:51:A5:4D:79:25:BD:E0:EE:0C Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D93971A2C17432A1A8F300 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:39:71:a2:c1:74:32:a1:a8:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=88b1b066-53de-4249-93b8-48bfea8f19d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:ca:7b:39:c2:34:f5:1c:52:11:8e:d9:f2: a0:fa:8c:ec:92:92:ad:93:72:bc:86:6c:d4:8e:b4: b9:3c:d7:6c:0e:59:ec:49:bf:0a:dc:79:1d:1c:11: 19:54:4d:b4:8b:e8:c1:38:dd:48:48:4d:82:58:89: 7b:62:48:6c:94:63:82:04:6d:3e:99:50:6c:a5:b2: 0b:4e:ba:2f:fe:82:59:11:bf:a0:71:ac:51:59:54: 42:bd:80:b1:ab:c1:8b:e1:c6:f5:85:1d:f6:7f:18: 2b:bb:9e:1d:4e:cf:f1:04:35:c3:37:e7:62:c6:1a: 17:f3:df:87:9e:f8:e5:5a:42:4d:1b:d4:e9:62:65: 73:8d:2d:3f:bf:d3:f2:a6:b8:df:c1:33:65:5a:9b: 25:26:fd:c1:88:bd:1b:5c:84:50:47:fc:68:00:1d: 5f:c8:59:c0:3d:78:27:0b:7f:65:ae:00:be:41:22: db:cd:4b:0e:61:10:b7:0b:60:81:a8:97:43:aa:82: 3d:bc:56:26:78:b3:a0:e3:ef:88:6a:bc:d0:68:9f: 2f:a8:a3:5e:56:b8:2d:9f:bc:20:c7:ba:31:8e:3f: c0:fe:c9:3c:e6:7b:77:45:ee:7b:d7:68:04:2d:bd: 5f:1d:38:f1:82:99:cc:b6:35:c9:ab:d2:33:47:b1: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AA:47:88:15:AE:33:03:40:11:3D:51:A5:4D:79:25:BD:E0:EE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9b:6a:5d:3f:d1:8f:33:eb:d0:d9:ec:88:2b:7c:95:86:d0: 7a:a6:dd:a7:63:5a:da:6d:b9:3b:1c:d3:33:80:e0:61:20:ae: cc:50:b0:bc:3e:60:c2:03:c0:08:f8:bf:d4:8e:08:b2:51:cf: b6:ab:65:2c:ed:28:b6:54:9f:f2:97:ba:7a:1d:44:89:51:9e: dd:1b:dc:6a:53:b1:d3:ab:26:b9:e1:a0:1e:6b:1c:1d:9b:83: ef:50:ce:3b:52:5f:bc:ad:30:d3:23:37:09:33:d5:d6:c3:86: b0:cd:8d:7a:fe:84:c8:7a:7d:38:cd:bb:e9:93:44:ca:17:77: 9a:c0:dc:4f:bb:32:4e:5f:9e:03:1d:a1:db:18:65:31:8d:e4: 1f:84:2c:79:8a:0d:8d:41:30:bd:30:19:b4:2b:c9:8a:ce:c9: 48:03:8c:99:36:37:03:30:fb:01:10:28:11:99:b0:79:28:bc: 94:2d:35:52:fb:57:36:e0:e1:bc:b7:9e:cd:24:d5:0a:a2:75: 59:a5:c0:a9:07:d7:4a:96:bb:86:8d:b3:4e:82:93:5f:e9:1f: 8f:8f:9c:22:85:0a:f7:fc:ca:26:00:5f:27:b2:63:67:a3:e9: 2c:82:a4:98:f7:62:b3:10:ef:85:a2:5a:a9:f5:65:de:d4:a9: bd:e9:98:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TlxosF0MqGo8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk ODhiMWIwNjYtNTNkZS00MjQ5LTkzYjgtNDhiZmVhOGYxOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnHKeznCNPUcUhGO2fKg+ozskpKtk3K8hmzU jrS5PNdsDlnsSb8K3HkdHBEZVE20i+jBON1ISE2CWIl7YkhslGOCBG0+mVBspbIL Trov/oJZEb+gcaxRWVRCvYCxq8GL4cb1hR32fxgru54dTs/xBDXDN+dixhoX89+H nvjlWkJNG9TpYmVzjS0/v9PyprjfwTNlWpslJv3BiL0bXIRQR/xoAB1fyFnAPXgn C39lrgC+QSLbzUsOYRC3C2CBqJdDqoI9vFYmeLOg4++IarzQaJ8vqKNeVrgtn7wg x7oxjj/A/sk85nt3Re5712gELb1fHTjxgpnMtjXJq9IzR7EjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2qR4gVrjMDQBE9UaVNeSW94O4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMWJlODQ2OGEtZThlZC0z ZmRlLWE1MmItZGExY2UxMWY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGbal0/0Y8z69DZ7IgrfJWG0Hqm3adjWtptuTsc0zOA4GEgrsxQsLw+ YMIDwAj4v9SOCLJRz7arZSztKLZUn/KXunodRIlRnt0b3GpTsdOrJrnhoB5rHB2b g+9QzjtSX7ytMNMjNwkz1dbDhrDNjXr+hMh6fTjNu+mTRMoXd5rA3E+7Mk5fngMd odsYZTGN5B+ELHmKDY1BML0wGbQryYrOyUgDjJk2NwMw+wEQKBGZsHkovJQtNVL7 Vzbg4by3ns0k1QqidVmlwKkH10qWu4aNs06Ck1/pH4+PnCKFCvf8yiYAXyeyY2ej 6SyCpJj3YrMQ74WiWqn1Zd7Uqb3pmB4= -----END CERTIFICATE-----Generated at Sat Apr 12 13:59:38 2025 by rpki-client