$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa File: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (raw, json) Hash identifier: W6tAaeet9hcw0o/8zceVZRQr7CKpGnrcBq7+DhxMVUs= Subject key identifier: 9B:E0:C2:B9:D6:D5:A2:3E:51:BF:A0:A4:A2:F7:D5:40:D9:28:85:74 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D9399560C91EAC82B76F40 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:39:95:60:c9:1e:ac:82:b7:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=35296b20-bcc5-4c61-89e8-3cf8960ae1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:6a:15:0f:f2:a2:b3:8b:7c:06:4c:aa:66: 71:f5:ff:76:f4:4a:cf:d9:15:2d:25:f2:7e:2c:61: d1:cf:10:6f:2b:0f:59:47:d3:05:97:1d:7a:f9:06: 87:66:e9:9f:38:1f:5f:ff:74:3e:88:29:76:e6:ab: ae:db:82:26:9e:1f:3b:7d:2c:69:1c:19:2d:5d:5d: 02:88:c1:af:69:9d:ea:70:ec:02:1e:f3:d0:e4:61: 69:59:17:0e:37:3c:18:d4:2e:b7:8d:d3:96:05:fe: 97:21:c8:22:52:ba:a0:31:71:e6:a2:4e:e1:34:f8: 94:0f:c3:66:8f:46:82:23:81:8c:bf:dc:c4:12:84: 3d:7f:01:5e:20:46:22:80:ba:11:a3:2c:86:98:22: 1c:16:3e:de:f9:35:f2:a1:b2:c0:51:23:5c:97:74: 82:b9:5c:20:2a:b5:25:7d:dc:e2:4d:ea:76:da:10: 92:6d:13:87:6a:8c:d6:e6:de:07:d1:00:37:e6:10: 95:7d:33:ba:23:30:89:28:a4:d1:03:9d:7a:44:9e: ae:57:86:37:95:cb:03:38:12:d7:f9:03:70:6d:fb: b9:e2:5a:91:1d:59:64:b3:07:36:5b:4c:05:dc:90: e3:91:81:a9:fd:5c:07:e9:d7:f1:16:ff:0e:39:32: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:C2:B9:D6:D5:A2:3E:51:BF:A0:A4:A2:F7:D5:40:D9:28:85:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d0:58:16:23:79:6d:56:81:fb:25:70:4b:8c:24:a8:b1:24: 07:f3:3b:63:fb:cc:33:a9:5e:c4:a7:2e:34:10:4b:91:fa:60: ef:38:98:ca:15:d6:a0:fe:74:cd:38:09:5a:64:3e:33:a5:ea: 0d:fe:90:b8:3a:1d:ca:36:1a:d2:ba:65:ee:37:66:ff:1d:66: 8f:57:fc:fb:5e:1f:da:2b:11:35:0b:fb:71:02:55:49:64:af: 70:b2:3f:7d:c9:7a:31:55:e1:98:fb:94:92:9c:f5:e6:26:fa: c0:14:f2:a2:05:e1:da:3b:26:d1:43:8f:b6:08:e6:66:f1:e4: 8e:ad:f5:8e:52:0d:de:25:e2:d0:64:bf:99:7a:70:3e:8d:61: 3a:e9:97:2f:42:95:7d:6d:54:2f:3d:0e:fa:14:9d:1b:bf:aa: 12:04:39:a9:0a:ee:22:ca:30:14:2e:89:3a:9f:fe:f0:1b:61: 8b:d0:dc:a4:dd:1f:b8:72:5f:4e:84:86:67:fb:1e:30:1d:6b: 32:7f:dc:bb:e9:ee:7b:19:f3:de:b9:c9:78:09:ca:f0:30:53: 40:a6:8c:ef:40:ac:62:89:d8:a5:f1:d6:ba:c5:27:06:4c:12: 91:01:f2:8b:1f:ff:e4:02:a5:9e:2e:70:29:b1:ef:3b:82:8d: e0:54:a2:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TmVYMkerIK3b0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk MzUyOTZiMjAtYmNjNS00YzYxLTg5ZTgtM2NmODk2MGFlMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJRqFQ/yorOLfAZMqmZx9f929ErP2RUtJfJ+ LGHRzxBvKw9ZR9MFlx16+QaHZumfOB9f/3Q+iCl25quu24Imnh87fSxpHBktXV0C iMGvaZ3qcOwCHvPQ5GFpWRcONzwY1C63jdOWBf6XIcgiUrqgMXHmok7hNPiUD8Nm j0aCI4GMv9zEEoQ9fwFeIEYigLoRoyyGmCIcFj7e+TXyobLAUSNcl3SCuVwgKrUl fdziTep22hCSbROHaozW5t4H0QA35hCVfTO6IzCJKKTRA516RJ6uV4Y3lcsDOBLX +QNwbfu54lqRHVlkswc2W0wF3JDjkYGp/VwH6dfxFv8OOTLDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvgwrnW1aI+Ub+gpKL31UDZKIV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYTZlOTBhN2EtYWQ2Yy0z MTVjLWI2YzctYjg0NzUyOTdkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLQWBYjeW1WgfslcEuMJKixJAfzO2P7zDOpXsSnLjQQS5H6YO84mMoV 1qD+dM04CVpkPjOl6g3+kLg6Hco2GtK6Ze43Zv8dZo9X/PteH9orETUL+3ECVUlk r3CyP33JejFV4Zj7lJKc9eYm+sAU8qIF4do7JtFDj7YI5mbx5I6t9Y5SDd4l4tBk v5l6cD6NYTrply9ClX1tVC89DvoUnRu/qhIEOakK7iLKMBQuiTqf/vAbYYvQ3KTd H7hyX06Ehmf7HjAdazJ/3Lvp7nsZ8965yXgJyvAwU0CmjO9ArGKJ2KXx1rrFJwZM EpEB8osf/+QCpZ4ucCmx7zuCjeBUonE= -----END CERTIFICATE-----Generated at Sat Apr 12 13:42:51 2025 by rpki-client