$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa File: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (raw, json) Hash identifier: jgk9dH5iQZWlNWFNVNr4Ga0AtnPf/JmrOSBgyE7qqmc= Subject key identifier: 80:CB:53:26:CE:02:47:C2:15:B3:38:20:1F:40:A2:AC:31:BE:37:CF Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173009E8BE44F6A52D378100 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:e8:be:44:f6:a5:2d:37:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=b8fd2a05-19f2-437b-93e0-c6a2bce5dfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:76:10:26:a3:0d:9e:52:b1:73:6f:2d:3a: 93:fd:c0:db:84:98:f5:df:63:8d:1b:b5:cf:f6:17: be:e0:2a:5f:a0:82:b5:70:de:69:ec:41:d4:00:aa: f6:fd:1b:7f:13:28:ac:d3:e4:8d:6a:d5:ab:d8:0f: 48:94:53:9b:a6:b3:ac:c5:4a:13:ea:f7:e5:f8:a0: 68:59:d6:d6:47:21:bb:c3:04:f2:89:c5:dd:83:48: 06:ce:24:b2:43:ea:09:a1:99:a6:f7:4e:c0:4d:56: ca:74:76:16:ae:f0:f0:5a:f2:a5:ee:d9:45:25:5d: a7:1c:66:e9:a9:6d:5f:c8:a7:d5:e2:ff:98:32:19: 88:ee:3f:ba:1a:39:71:c0:4d:82:d2:fe:61:23:ff: fb:f0:b3:ad:39:a7:3c:92:8e:6a:b2:a6:0c:fd:f8: 2e:cc:b6:e8:a1:20:5f:b1:9a:de:da:ea:1d:13:fa: 60:4e:53:86:8a:c7:44:4e:22:04:60:43:0e:51:65: ea:b1:cb:35:06:17:c2:ca:5c:35:2c:66:0e:5a:47: f4:7a:c3:ac:59:0e:06:7b:dc:33:f6:58:17:00:a6: a6:f5:67:ef:cf:6f:a1:a8:b7:11:23:49:2a:7c:2d: ff:c0:36:6a:53:8d:7c:4a:c9:02:ab:52:27:cf:76: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:53:26:CE:02:47:C2:15:B3:38:20:1F:40:A2:AC:31:BE:37:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:40:3e:84:c0:57:c9:64:ad:7d:6d:45:5e:3d:6b:04:46:b7: 1e:05:9b:3a:d4:49:95:46:f6:05:1b:c7:b2:ed:1f:39:ff:e5: 5f:b4:02:c2:5e:7d:37:8f:af:59:67:f8:61:15:de:b8:a3:ed: 03:5c:fb:85:c7:87:3b:19:3c:a3:99:45:0e:2b:57:51:63:f1: 43:1a:58:99:7a:e8:ad:11:69:9e:55:91:a7:b7:63:5d:7c:ba: 84:2c:1f:34:e9:9e:ec:86:69:64:3e:f8:4a:53:22:42:0d:d2: 28:f8:f1:c0:76:70:b3:74:57:ec:bc:d0:c1:b9:75:8c:42:c4: 4c:8f:83:cd:78:c2:39:34:15:40:b9:7e:48:af:c2:e1:07:8e: db:46:41:88:ee:0e:33:96:ce:b7:e3:e9:07:c6:84:96:c3:b4: c6:86:a1:1b:d6:5b:80:77:50:35:bc:16:03:0d:a7:78:81:db: 9c:d0:ee:ef:4a:e3:09:84:1f:6b:3b:61:83:d1:d7:c1:20:b3: b6:29:c7:52:15:6d:7e:a9:f6:56:c8:d8:ad:aa:8a:c6:56:29: 3c:54:03:eb:8b:33:eb:b9:6d:ee:cc:27:c2:c3:52:45:4e:32: 91:b7:c7:a2:9d:8d:a2:13:57:9d:fd:31:2d:9b:20:d0:ef:09: f4:83:9f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAnovkT2pS03gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk YjhmZDJhMDUtMTlmMi00MzdiLTkzZTAtYzZhMmJjZTVkZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc12ECajDZ5SsXNvLTqT/cDbhJj132ONG7XP 9he+4CpfoIK1cN5p7EHUAKr2/Rt/Eyis0+SNatWr2A9IlFObprOsxUoT6vfl+KBo WdbWRyG7wwTyicXdg0gGziSyQ+oJoZmm907ATVbKdHYWrvDwWvKl7tlFJV2nHGbp qW1fyKfV4v+YMhmI7j+6GjlxwE2C0v5hI//78LOtOac8ko5qsqYM/fguzLbooSBf sZre2uodE/pgTlOGisdETiIEYEMOUWXqscs1BhfCylw1LGYOWkf0esOsWQ4Ge9wz 9lgXAKam9Wfvz2+hqLcRI0kqfC3/wDZqU418SskCq1Inz3Y1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDLUybOAkfCFbM4IB9AoqwxvjfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMWJlODQ2OGEtZThlZC0z ZmRlLWE1MmItZGExY2UxMWY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlAPoTAV8lkrX1tRV49awRGtx4FmzrUSZVG9gUbx7LtHzn/5V+0AsJe fTePr1ln+GEV3rij7QNc+4XHhzsZPKOZRQ4rV1Fj8UMaWJl66K0RaZ5Vkae3Y118 uoQsHzTpnuyGaWQ++EpTIkIN0ij48cB2cLN0V+y80MG5dYxCxEyPg814wjk0FUC5 fkivwuEHjttGQYjuDjOWzrfj6QfGhJbDtMaGoRvWW4B3UDW8FgMNp3iB25zQ7u9K 4wmEH2s7YYPR18Egs7Ypx1IVbX6p9lbI2K2qisZWKTxUA+uLM+u5be7MJ8LDUkVO MpG3x6KdjaITV539MS2bINDvCfSDn2g= -----END CERTIFICATE-----Generated at Wed Jun 18 09:05:08 2025 by rpki-client