$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa File: ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json) Hash identifier: Rs0UfUL4SXxE1scX9mE12T2CE54uP8gm0yy9kVKgE3Y= Subject key identifier: 8F:5D:35:59:33:E0:6D:30:97:39:CD:CB:36:AE:9F:DD:34:FF:21:E2 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D93935774C8F28E3FCC400 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:39:35:77:4c:8f:28:e3:fc:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=67236320-9ff3-47c4-9837-f85613115892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:1d:85:42:7d:a3:09:f9:16:a4:50:c7:28: 0a:f0:2c:73:af:e1:5f:2f:26:66:5c:3e:bc:7d:ac: 8a:05:bf:b9:f9:a9:59:f2:bd:4a:2a:80:42:bb:da: 9e:2a:4b:fa:8f:89:b5:75:88:04:7b:42:45:6c:14: fd:3d:3f:9d:b7:eb:2e:43:c6:de:0c:cc:ce:f8:1c: 8f:8e:e6:67:72:32:63:f1:af:c9:a1:c9:81:0b:ca: d3:25:e1:e5:f2:6f:17:20:6b:37:3e:9c:76:1c:5f: 72:9a:c6:7d:4e:9e:f1:0c:c7:d8:01:e4:e1:dd:e9: 39:c2:43:00:f6:d3:f9:52:23:ef:6a:70:30:16:30: fd:a0:e5:f6:c8:b6:92:34:a9:6b:ab:26:78:54:d7: b1:57:ee:fe:89:db:79:f7:22:fe:61:92:f1:fe:ab: c9:f4:7f:f2:8c:21:4d:d7:08:9e:d7:8a:e7:41:d2: 1d:04:67:7e:5e:a2:4f:4a:09:f8:89:2c:35:05:43: b0:00:05:b8:4a:fc:3c:b7:3c:49:0a:ad:ec:b4:68: 95:65:27:dd:0f:a2:96:e0:30:2e:81:8d:19:f3:af: cf:7b:be:e3:ee:14:ff:cc:b8:82:6a:3c:a2:ae:84: e2:be:4e:16:b3:7b:9f:24:27:64:b5:66:55:cf:eb: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:35:59:33:E0:6D:30:97:39:CD:CB:36:AE:9F:DD:34:FF:21:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:de:de:23:5a:f7:15:84:5e:12:d4:3e:fe:7e:eb:fc:07:d5: a6:57:be:c8:d1:c1:76:c8:db:bc:55:4c:fb:b2:cf:0e:d5:ab: 14:46:7d:f6:dd:f5:0c:4d:ba:76:67:1d:50:5a:f9:0b:6c:e7: 99:78:d9:11:14:f2:c0:60:0e:cc:6c:68:c1:a0:7a:26:ee:f5: 71:db:75:89:67:df:97:5d:dd:f7:68:8b:d4:54:b2:70:69:fe: 07:1e:b9:59:d5:42:c5:61:c3:43:84:81:14:af:4c:d0:3e:b3: f1:b7:98:38:b4:f6:d5:02:e1:ab:a8:aa:88:35:bf:d0:1e:7b: 34:9d:12:fa:20:26:49:72:5a:3b:02:dd:ad:34:6c:fa:75:8e: c3:39:60:1d:3d:6b:1a:fb:64:e4:24:ce:8a:ef:15:8c:80:8d: e9:bc:56:78:e0:00:0d:b8:81:e7:56:19:39:3d:6d:14:a4:e3: 8c:09:d2:46:49:b6:bd:16:a2:8d:54:44:4a:73:8b:d8:39:2c: 8f:46:d5:fd:17:74:65:f4:6e:db:2b:be:cf:09:27:b7:c4:fc: ad:7e:af:69:c4:61:3d:81:5e:c6:eb:46:a5:cc:ed:c5:f2:df: 8f:39:84:a0:82:2f:80:4d:28:64:95:9d:3e:9b:af:3f:55:0c: 9d:51:0d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32Tk1d0yPKOP8xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk NjcyMzYzMjAtOWZmMy00N2M0LTk4MzctZjg1NjEzMTE1ODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSwdhUJ9own5FqRQxygK8Cxzr+FfLyZmXD68 fayKBb+5+alZ8r1KKoBCu9qeKkv6j4m1dYgEe0JFbBT9PT+dt+suQ8beDMzO+ByP juZncjJj8a/JocmBC8rTJeHl8m8XIGs3Ppx2HF9ymsZ9Tp7xDMfYAeTh3ek5wkMA 9tP5UiPvanAwFjD9oOX2yLaSNKlrqyZ4VNexV+7+idt59yL+YZLx/qvJ9H/yjCFN 1wie14rnQdIdBGd+XqJPSgn4iSw1BUOwAAW4Svw8tzxJCq3stGiVZSfdD6KW4DAu gY0Z86/Pe77j7hT/zLiCajyiroTivk4Ws3ufJCdktWZVz+uz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9dNVkz4G0wlznNyzaun900/yHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYWQzNTQ3N2EtN2IzMy0z YWJmLWE5N2YtNzViNWE4OTI3NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACze3iNa9xWEXhLUPv5+6/wH1aZXvsjRwXbI27xVTPuyzw7VqxRGffbd 9QxNunZnHVBa+Qts55l42REU8sBgDsxsaMGgeibu9XHbdYln35dd3fdoi9RUsnBp /gceuVnVQsVhw0OEgRSvTNA+s/G3mDi09tUC4auoqog1v9AeezSdEvogJklyWjsC 3a00bPp1jsM5YB09axr7ZOQkzorvFYyAjem8VnjgAA24gedWGTk9bRSk44wJ0kZJ tr0Woo1UREpzi9g5LI9G1f0XdGX0btsrvs8JJ7fE/K1+r2nEYT2BXsbrRqXM7cXy 3485hKCCL4BNKGSVnT6brz9VDJ1RDbA= -----END CERTIFICATE-----Generated at Sat Apr 12 13:56:57 2025 by rpki-client