$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa File: d231e946-74bf-3765-97f0-efb9933dc249.roa (raw, json) Hash identifier: IznPufnmiBUOYkpbTIKZsK8NVBXVsbp7Xa6dsH6O8b0= Subject key identifier: B7:CB:3C:B5:F0:9F:D8:A2:87:11:E5:E1:9D:AC:A2:32:A7:22:3A:B3 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300915DB9A198E35C2D380 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:15:db:9a:19:8e:35:c2:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=3a96ac9c-0eb8-4e8a-b205-402ef141f5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:3e:20:ac:76:c0:76:d1:97:e9:a1:3e:d2: 73:7d:91:79:6f:48:bd:26:3b:99:3a:d0:40:8e:4b: 23:f5:d6:64:78:60:7f:be:2c:31:9f:cd:41:63:be: 18:01:e4:4e:09:91:30:7d:67:61:0a:9d:d3:c1:34: 59:31:74:50:c2:88:e4:23:5a:1e:f1:ef:8d:3c:cf: a5:2a:fc:70:fa:01:de:72:27:bf:ab:04:7c:f0:7a: 52:ac:3e:c7:78:ac:fd:c4:15:6a:81:71:cb:11:4e: 7d:3e:19:d3:57:88:e6:5e:27:b6:dd:21:c3:88:ab: b4:50:f4:f3:c1:8b:69:b1:00:30:7c:8a:64:70:c7: 58:61:84:04:cc:85:c8:79:d8:f6:13:7c:57:40:73: f4:b3:7a:d0:c4:04:4d:c8:13:48:fe:32:55:dc:68: d9:f1:f5:72:fd:83:83:ab:f3:52:70:e8:34:a4:ba: b3:58:b7:f1:46:f7:7b:72:dd:37:5b:24:15:79:7a: 45:1a:0b:48:ee:0f:b1:fd:f0:ae:55:32:73:71:7e: 3e:db:12:f2:3a:ff:0e:3f:79:3d:14:7d:69:03:b3: 22:a9:b8:b0:32:e4:20:3c:c6:88:d0:89:10:d5:f6: 9a:39:18:87:65:59:d8:fd:3c:99:4c:ef:a7:b6:16: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:3C:B5:F0:9F:D8:A2:87:11:E5:E1:9D:AC:A2:32:A7:22:3A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e0:f9:ff:29:62:1a:ea:cd:bf:02:43:54:98:15:bf:e3:93: 26:2a:c4:eb:01:0d:4c:1d:cb:54:58:f3:44:53:09:ff:18:48: 3f:ba:ca:b3:65:a7:56:93:80:0a:f9:77:a1:db:3a:2d:8e:86: 72:38:5f:71:03:de:53:f3:d1:ad:50:cc:ae:27:ee:ae:78:f1: 61:ed:53:91:c6:62:0c:ec:a8:4a:60:5f:24:eb:9c:0c:bf:10: ea:e4:b9:d7:71:ba:bd:4e:20:42:a8:ae:41:38:ca:49:da:db: 39:1b:25:df:cc:15:1f:7c:b0:89:c7:d9:ba:8a:62:1b:11:e0: 5f:39:25:94:16:f2:79:14:d1:78:1f:ea:39:de:00:87:b0:0a: d1:c4:d4:61:4f:8f:84:10:f2:a7:86:88:e2:40:a3:9d:57:41: 29:7e:da:0c:06:ab:73:7f:af:af:07:bb:c7:99:e9:f5:e9:fd: bf:9a:2e:9f:8d:57:6f:00:6c:e5:c4:e9:41:61:09:09:ef:49: 4d:9d:a6:1a:fa:00:0d:f2:93:47:01:0c:13:dc:34:38:80:b6: a5:c9:41:82:4e:1e:aa:2b:d8:50:28:e4:b4:a8:22:4d:5e:bc: 6d:f8:2f:a9:7d:cb:53:04:26:3f:d1:f2:55:e4:bc:4d:7f:82: dd:af:44:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAkV25oZjjXC04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk M2E5NmFjOWMtMGViOC00ZThhLWIyMDUtNDAyZWYxNDFmNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbs+IKx2wHbRl+mhPtJzfZF5b0i9JjuZOtBA jksj9dZkeGB/viwxn81BY74YAeROCZEwfWdhCp3TwTRZMXRQwojkI1oe8e+NPM+l Kvxw+gHecie/qwR88HpSrD7HeKz9xBVqgXHLEU59PhnTV4jmXie23SHDiKu0UPTz wYtpsQAwfIpkcMdYYYQEzIXIedj2E3xXQHP0s3rQxARNyBNI/jJV3GjZ8fVy/YOD q/NScOg0pLqzWLfxRvd7ct03WyQVeXpFGgtI7g+x/fCuVTJzcX4+2xLyOv8OP3k9 FH1pA7MiqbiwMuQgPMaI0IkQ1faaORiHZVnY/TyZTO+nthbUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfLPLXwn9iihxHl4Z2sojKnIjqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDIzMWU5NDYtNzRiZi0z NzY1LTk3ZjAtZWZiOTkzM2RjMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbg+f8pYhrqzb8CQ1SYFb/jkyYqxOsBDUwdy1RY80RTCf8YSD+6yrNl p1aTgAr5d6HbOi2OhnI4X3ED3lPz0a1QzK4n7q548WHtU5HGYgzsqEpgXyTrnAy/ EOrkuddxur1OIEKorkE4ykna2zkbJd/MFR98sInH2bqKYhsR4F85JZQW8nkU0Xgf 6jneAIewCtHE1GFPj4QQ8qeGiOJAo51XQSl+2gwGq3N/r68Hu8eZ6fXp/b+aLp+N V28AbOXE6UFhCQnvSU2dphr6AA3yk0cBDBPcNDiAtqXJQYJOHqor2FAo5LSoIk1e vG34L6l9y1MEJj/R8lXkvE1/gt2vRNA= -----END CERTIFICATE-----Generated at Fri Jul 4 00:45:41 2025 by rpki-client