$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa File: 04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa (raw, json) Hash identifier: kUPYvpRx7DxhnW6rD/qeR4lglfIYE+oboS1KMbbx4vw= Subject key identifier: 8B:83:44:73:68:20:E2:8C:AA:83:C6:1B:F4:DC:02:DF:61:E1:15:C3 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A1730090364AE78BC6E98CB40 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:03:64:ae:78:bc:6e:98:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=9d819128-2f18-4585-8528-a24926aa5168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:6e:dc:2f:73:dc:4c:6e:26:2c:b0:7e:a8: 95:4a:07:d8:c2:87:09:c3:75:c6:ed:13:7a:cf:cd: 04:e1:7f:62:c8:ba:d0:36:86:8d:88:c6:6a:c7:0a: d0:a3:91:aa:9d:20:6a:c6:e4:93:24:39:21:3c:7f: 88:3b:d5:3e:03:14:b0:73:d6:38:17:b2:cb:97:48: 26:d3:15:64:3e:2b:7a:2b:2f:da:3e:62:be:75:72: a6:ce:e3:74:53:c7:cf:3d:e3:52:e8:70:db:46:b5: 13:60:ef:b2:53:5f:9f:2f:51:50:4c:6f:09:4e:52: f2:5a:f6:6e:9f:6e:d5:c4:10:e3:c1:cc:c1:38:6e: 87:34:45:16:cf:88:a2:a8:b1:c5:41:57:1a:b6:ad: 6f:a6:8d:51:d6:50:82:c1:e5:7d:55:28:de:22:f6: 1c:ac:ec:fb:df:21:63:66:78:f5:11:3f:39:b3:2a: 7c:51:44:cd:be:1b:07:5f:f9:21:ee:e9:b6:9b:30: 51:ea:92:6a:f7:ca:5e:0b:b3:0c:31:b7:b9:d1:19: d4:f4:72:45:ba:4c:5a:a5:a7:7d:68:c0:52:8c:02: 47:ae:dc:a7:5b:a4:d7:d9:2f:85:40:c6:9d:c2:69: 0d:58:93:7d:ac:b5:5f:94:43:5c:e1:5b:9a:49:e7: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:83:44:73:68:20:E2:8C:AA:83:C6:1B:F4:DC:02:DF:61:E1:15:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5e:ba:f5:b8:d5:08:c3:9e:e4:35:15:b9:4c:3a:9b:6f:8e: e2:77:0a:c3:36:dc:c6:e2:0c:ba:99:ba:60:75:af:6a:41:27: 51:b4:ae:79:a5:9e:b9:a8:3e:27:89:bb:a8:72:c6:33:ba:65: 5e:1b:ea:c6:98:78:e9:04:0d:1f:39:5f:82:26:36:21:14:08: d9:f5:8c:63:e3:50:fe:3b:62:d9:90:d0:dd:ef:d9:cc:0a:84: 62:ac:ca:29:ef:44:30:19:a9:b0:db:c8:a5:27:2c:dc:9d:61: 33:d7:ca:ff:93:d5:05:ae:ee:e1:68:c7:92:f3:74:4e:66:3a: 1d:e4:8b:78:ff:73:6e:01:24:c3:53:4b:d3:f4:27:fa:f9:c0: 5e:27:86:6c:90:1c:bc:5f:f7:3b:5e:f9:94:aa:80:d5:1f:67: 17:4e:49:a2:0a:fb:bd:1e:75:d6:c8:e5:00:86:08:65:70:d9: 5e:1c:8a:fc:9c:0d:e1:b6:4e:94:d7:d4:b4:fb:6e:ee:9d:28: 73:ec:a7:c4:5b:4c:9f:b2:e1:65:f3:77:da:11:05:bb:34:7f: b0:12:aa:f3:8a:21:39:7e:80:98:64:47:34:ca:f7:5d:ba:c4: 44:47:9a:3d:61:e7:fb:f9:9f:b8:44:a7:3a:8a:cf:64:0a:d0: 76:e1:3d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAkDZK54vG6Yy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk OWQ4MTkxMjgtMmYxOC00NTg1LTg1MjgtYTI0OTI2YWE1MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Bu3C9z3ExuJiywfqiVSgfYwocJw3XG7RN6 z80E4X9iyLrQNoaNiMZqxwrQo5GqnSBqxuSTJDkhPH+IO9U+AxSwc9Y4F7LLl0gm 0xVkPit6Ky/aPmK+dXKmzuN0U8fPPeNS6HDbRrUTYO+yU1+fL1FQTG8JTlLyWvZu n27VxBDjwczBOG6HNEUWz4iiqLHFQVcatq1vpo1R1lCCweV9VSjeIvYcrOz73yFj Znj1ET85syp8UUTNvhsHX/kh7um2mzBR6pJq98peC7MMMbe50RnU9HJFukxapad9 aMBSjAJHrtynW6TX2S+FQMadwmkNWJN9rLVflENc4VuaSeemawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuDRHNoIOKMqoPGG/TcAt9h4RXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDRlN2M1NzAtZDFkNy0z OGNhLWFhMTItZjQzZTIyNDBjYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNykMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABleuvW41QjDnuQ1FblMOptvjuJ3CsM23MbiDLqZumB1r2pBJ1G0rnml nrmoPieJu6hyxjO6ZV4b6saYeOkEDR85X4ImNiEUCNn1jGPjUP47YtmQ0N3v2cwK hGKsyinvRDAZqbDbyKUnLNydYTPXyv+T1QWu7uFox5LzdE5mOh3ki3j/c24BJMNT S9P0J/r5wF4nhmyQHLxf9zte+ZSqgNUfZxdOSaIK+70eddbI5QCGCGVw2V4civyc DeG2TpTX1LT7bu6dKHPsp8RbTJ+y4WXzd9oRBbs0f7ASqvOKITl+gJhkRzTK9126 xERHmj1h5/v5n7hEpzqKz2QK0HbhPXs= -----END CERTIFICATE-----Generated at Mon Jun 16 19:30:03 2025 by rpki-client