$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa File: 039241b2-b599-30f0-bcc6-07b9fed5d863.roa (raw, json) Hash identifier: xXDVqQ/Q/dy1JJWvD+3HzCYuU2hqHLNCUR2Z9a+Nhfg= Subject key identifier: 3D:88:24:0A:68:66:19:F0:8F:BD:F0:71:54:71:1D:64:5A:9D:DB:C5 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173009728C7BCD925AB70B00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:72:8c:7b:cd:92:5a:b7:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=56f056f6-3dc0-44e5-bea7-00e051c1b1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:11:8c:35:ca:1d:a0:47:17:e8:8a:6f:79: 44:38:00:3c:95:ae:c2:71:cb:d9:33:92:3c:17:90: 63:ba:78:60:d5:cb:bc:e3:ab:43:cc:59:ad:be:a2: f0:96:bd:1b:7a:f4:da:9e:59:37:cf:9d:94:45:0f: cf:a2:fa:46:87:a3:00:7e:8b:7e:ff:2c:c7:38:4f: 8e:8f:5f:6d:e8:7b:e1:79:f1:a2:46:be:e7:5e:83: f1:2d:c1:6f:e9:2e:54:0b:34:66:df:45:79:cf:f1: 1f:f8:1e:6e:00:7d:76:b0:74:88:92:e1:0b:2b:8a: a2:9f:ad:1b:ef:2f:b1:68:c7:37:66:42:d4:eb:96: 8f:b9:b1:f7:8c:ee:e1:3c:c2:e6:8b:4d:7a:1f:73: df:64:a7:cf:0c:06:c9:c4:41:f8:13:ec:c1:2b:5b: a9:a5:a5:48:e8:d0:f6:07:76:cf:30:12:45:67:70: 1b:30:a6:bd:22:e4:1c:fc:4d:ae:ae:db:70:9d:0c: 5e:ba:41:07:5a:0e:fd:2f:38:48:32:79:d6:66:e4: 45:a0:fb:82:a8:9e:63:43:b1:50:da:4e:af:ed:7a: 3b:b8:84:e5:e1:ad:9a:f5:db:2d:ee:bb:3d:04:e1: 62:d2:96:5d:60:85:9e:f4:9e:7c:41:74:a0:6e:13: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:24:0A:68:66:19:F0:8F:BD:F0:71:54:71:1D:64:5A:9D:DB:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3f:bf:97:bf:40:4b:40:b1:57:b5:a5:8f:c6:ed:62:09:b2: 40:e8:a8:cd:2d:87:ab:ed:8b:9b:02:bd:17:2d:06:eb:88:82: 1f:a0:94:69:57:c9:13:e8:52:66:70:e6:b9:0d:19:e4:31:c7: 57:66:16:68:bd:b5:31:32:2d:12:57:f4:81:d6:01:91:0d:92: 54:67:d1:ed:c4:6b:cf:83:4b:d9:db:3f:4e:bd:32:31:d3:11: d5:de:3a:23:14:b8:c6:8a:8f:12:47:c7:a8:46:18:7f:f9:c8: 8a:8c:3f:cc:77:9c:ac:da:a9:51:df:6f:a1:e9:18:87:04:ae: ed:3e:fc:b5:61:d7:79:06:2a:d5:a9:be:5a:5c:11:96:a5:f1: ec:5d:09:61:48:41:83:a1:65:f8:87:23:c5:f1:8a:da:e1:03: af:61:9a:d2:ef:e2:cf:af:46:a3:56:b6:5d:69:07:d2:3d:5e: 99:1b:13:56:eb:8e:b2:88:7a:43:1d:f2:4f:3a:9f:6f:02:fd: 06:13:05:e6:57:bf:6e:32:02:20:c9:b6:07:cb:eb:c1:df:a7: 0f:cf:16:6d:05:f2:a9:03:1e:be:e5:05:d1:f1:46:18:79:17: 0d:f1:c1:e0:d5:48:32:10:61:3c:b0:d3:e8:a8:56:14:61:78: ec:7f:99:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAlyjHvNklq3CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk NTZmMDU2ZjYtM2RjMC00NGU1LWJlYTctMDBlMDUxYzFiMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+ARjDXKHaBHF+iKb3lEOAA8la7CccvZM5I8 F5Bjunhg1cu846tDzFmtvqLwlr0bevTanlk3z52URQ/PovpGh6MAfot+/yzHOE+O j19t6HvhefGiRr7nXoPxLcFv6S5UCzRm30V5z/Ef+B5uAH12sHSIkuELK4qin60b 7y+xaMc3ZkLU65aPubH3jO7hPMLmi016H3PfZKfPDAbJxEH4E+zBK1uppaVI6ND2 B3bPMBJFZ3AbMKa9IuQc/E2urttwnQxeukEHWg79LzhIMnnWZuRFoPuCqJ5jQ7FQ 2k6v7Xo7uITl4a2a9dst7rs9BOFi0pZdYIWe9J58QXSgbhOqMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2IJApoZhnwj73wcVRxHWRandvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDM5MjQxYjItYjU5OS0z MGYwLWJjYzYtMDdiOWZlZDVkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc/v5e/QEtAsVe1pY/G7WIJskDoqM0th6vti5sCvRctBuuIgh+glGlX yRPoUmZw5rkNGeQxx1dmFmi9tTEyLRJX9IHWAZENklRn0e3Ea8+DS9nbP069MjHT EdXeOiMUuMaKjxJHx6hGGH/5yIqMP8x3nKzaqVHfb6HpGIcEru0+/LVh13kGKtWp vlpcEZal8exdCWFIQYOhZfiHI8XxitrhA69hmtLv4s+vRqNWtl1pB9I9XpkbE1br jrKIekMd8k86n28C/QYTBeZXv24yAiDJtgfL68Hfpw/PFm0F8qkDHr7lBdHxRhh5 Fw3xweDVSDIQYTyw0+ioVhRheOx/md8= -----END CERTIFICATE-----Generated at Mon Jun 16 23:19:17 2025 by rpki-client