$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa File: 9061acde-1566-3f28-a9b6-14f165759f16.roa (raw, json) Hash identifier: +rf9bJIVueXFtmq+tjED8h8HB97viq+EtKV2SQ8I6RU= Subject key identifier: 33:94:83:0C:1E:97:D0:CF:77:0F:D4:05:D4:07:ED:9B:93:CC:E9:63 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D93985B23627BE11EDCD00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:39:85:b2:36:27:be:11:ed:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=78ca32f9-4e21-4dea-80e0-dec2c3d4915d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:23:30:ec:cc:34:5e:ba:c3:b3:d1:7a:8f: 07:f2:65:40:f3:aa:d4:4e:1f:1d:8f:db:47:e0:55: 8e:86:12:91:93:db:c7:a8:ad:26:a7:c8:c9:f9:49: 7b:aa:3b:d9:df:6a:c7:f7:a7:7e:83:b7:e9:1a:01: f9:12:9d:88:dd:dd:07:8a:d9:10:69:83:9f:77:b9: 7f:4b:05:36:be:f0:eb:bf:40:00:22:68:cf:52:89: 62:02:89:03:d9:5c:02:7e:f0:2e:36:9e:9a:cc:be: 5b:df:ae:07:73:87:81:70:63:d9:6d:b7:18:fc:00: ad:dd:fc:c1:e6:f3:e4:2c:53:af:f3:b8:33:2e:aa: d5:c9:0d:55:56:32:41:a9:6f:63:35:e4:31:08:73: f3:51:2c:6a:5e:2c:84:9b:80:8a:bc:25:2f:f5:5c: 45:e8:87:8f:46:68:5d:7f:e4:a0:ac:a4:23:2b:28: cd:c6:33:86:11:e5:f1:65:53:47:ec:e7:8e:06:31: f7:d1:0a:21:1e:bf:ab:b9:38:4c:cb:c0:71:0c:50: 83:4a:cf:d5:dc:1f:6c:88:2e:b8:55:92:44:f6:ae: 87:b9:77:9f:c9:8b:dc:49:36:72:16:cc:4c:25:9b: 00:0d:ba:d5:91:a4:57:de:7a:09:ca:5a:2e:51:79: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:83:0C:1E:97:D0:CF:77:0F:D4:05:D4:07:ED:9B:93:CC:E9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e7:9e:95:1b:76:24:82:f9:14:be:30:82:ba:25:16:2d:17: b4:52:50:1a:1d:4f:ae:1c:ec:8e:eb:2c:d8:84:de:3a:30:63: 4d:a2:b2:f8:e4:78:09:d2:80:0a:70:20:2a:29:21:72:38:7a: e1:88:d2:ea:a4:d5:3a:67:09:b9:f6:87:e1:42:cf:f6:36:4e: 3d:f7:d9:2c:22:29:da:92:22:58:e5:49:1a:54:61:12:80:4a: d4:f2:a5:4d:1d:5a:05:b3:ed:07:d9:12:b9:88:88:c7:89:09: b1:99:9d:61:6d:f9:b6:82:0b:b0:94:70:3e:84:0f:18:00:dc: 80:09:e3:c4:b8:62:81:8a:92:38:f8:52:fb:9c:23:6d:b3:a7: e2:36:8d:4a:35:15:55:95:47:1e:c9:a2:d2:78:ad:7c:8d:78: 84:83:85:7e:3d:c6:95:44:b8:64:bd:1b:d1:6e:03:16:7e:31: fc:78:a3:56:47:56:38:80:55:63:9c:c3:c0:f4:fd:f0:2d:01: 34:9a:3c:17:f1:70:51:18:72:9d:c9:18:70:de:5d:ca:28:56: 92:94:08:32:64:c2:b9:1f:17:d5:58:9d:85:6b:17:87:9c:5f: 88:24:9c:24:bd:52:b8:9e:a2:ec:2a:0b:03:a9:81:30:ce:d0: 97:0a:3c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TmFsjYnvhHtzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk NzhjYTMyZjktNGUyMS00ZGVhLTgwZTAtZGVjMmMzZDQ5MTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL8jMOzMNF66w7PReo8H8mVA86rUTh8dj9tH 4FWOhhKRk9vHqK0mp8jJ+Ul7qjvZ32rH96d+g7fpGgH5Ep2I3d0HitkQaYOfd7l/ SwU2vvDrv0AAImjPUoliAokD2VwCfvAuNp6azL5b364Hc4eBcGPZbbcY/ACt3fzB 5vPkLFOv87gzLqrVyQ1VVjJBqW9jNeQxCHPzUSxqXiyEm4CKvCUv9VxF6IePRmhd f+SgrKQjKyjNxjOGEeXxZVNH7OeOBjH30QohHr+ruThMy8BxDFCDSs/V3B9siC64 VZJE9q6HuXefyYvcSTZyFsxMJZsADbrVkaRX3noJylouUXkJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOUgwwel9DPdw/UBdQH7ZuTzOljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvOTA2MWFjZGUtMTU2Ni0z ZjI4LWE5YjYtMTRmMTY1NzU5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvnnpUbdiSC+RS+MIK6JRYtF7RSUBodT64c7I7rLNiE3jowY02isvjk eAnSgApwICopIXI4euGI0uqk1TpnCbn2h+FCz/Y2Tj332SwiKdqSIljlSRpUYRKA StTypU0dWgWz7QfZErmIiMeJCbGZnWFt+baCC7CUcD6EDxgA3IAJ48S4YoGKkjj4 UvucI22zp+I2jUo1FVWVRx7JotJ4rXyNeISDhX49xpVEuGS9G9FuAxZ+Mfx4o1ZH VjiAVWOcw8D0/fAtATSaPBfxcFEYcp3JGHDeXcooVpKUCDJkwrkfF9VYnYVrF4ec X4gknCS9UrieouwqCwOpgTDO0JcKPEk= -----END CERTIFICATE-----Generated at Sat Apr 12 13:57:01 2025 by rpki-client