$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa File: 27938e9c-3192-3793-af30-042a052457c7.roa (raw, json) Hash identifier: N0QdWUKPudJBT77H4clbakMBJzuKWhukrTYJWqr86Fo= Subject key identifier: F8:09:E1:EE:3E:2C:E5:BE:E2:B8:20:AF:65:84:86:FF:F0:04:EE:5E Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173008EFE990AA004AF29700 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:08:ef:e9:90:aa:00:4a:f2:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=e0bf0a26-c2d3-4af3-8c23-8537c348518f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:73:44:cc:23:4f:f2:5c:9d:b5:79:4f:a9: ad:2f:5c:10:c9:8b:2e:a5:5d:b2:75:9c:ad:71:30: d1:82:20:47:1a:da:0c:7f:0c:dc:dc:48:ce:9f:6b: 1a:2b:e5:2a:0c:b6:a0:ba:b5:25:59:a5:8b:ae:3f: 40:63:09:d7:ff:21:11:4b:a2:fb:30:f4:77:84:d5: 9c:8b:b4:68:8f:dd:14:6b:a8:b9:f8:ba:a9:84:3f: fd:11:05:11:cf:da:50:c9:8f:b6:5e:8c:f1:7c:7a: d6:87:50:e2:63:2a:bd:81:ec:86:15:7a:dd:ba:b4: 72:40:89:76:7a:84:1a:51:01:91:6a:3d:83:5d:e0: cf:3e:20:5d:99:a5:fc:2f:52:c6:d5:c2:94:bf:4b: ee:68:78:88:ce:4d:4f:3b:94:f4:1b:ef:30:63:03: 61:de:62:01:57:4b:ff:cb:4d:87:b9:60:31:76:e0: e2:f0:ff:65:ee:49:f2:ba:b9:a7:31:bc:b6:e0:aa: f9:2d:3f:82:b8:44:6d:87:cb:73:b5:8e:eb:d4:cc: d5:aa:99:8e:c7:d5:19:ed:bc:52:9b:b7:9e:10:21: f6:68:66:90:bb:bb:57:c3:68:40:78:30:8a:96:01: 8c:81:2c:d7:0d:7d:8b:27:6f:96:36:87:47:93:fe: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:09:E1:EE:3E:2C:E5:BE:E2:B8:20:AF:65:84:86:FF:F0:04:EE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1e:46:e2:6f:fd:bf:40:65:b8:d3:15:e1:2f:b6:7a:7e:fa: 0a:6a:b5:a8:d4:64:86:b3:74:d1:2f:eb:ba:11:43:5a:cc:df: a3:1c:73:0b:06:38:9a:c3:77:44:17:26:9a:cb:6a:c9:ea:6b: 06:94:2c:b4:fd:df:cd:b1:87:d1:cf:1e:d6:9b:b5:92:60:a5: b8:86:45:bf:a6:0e:95:eb:00:95:b2:83:0b:86:9b:3b:d9:1f: 99:55:1b:ef:8b:4c:80:3d:f1:38:6e:1f:db:76:24:9e:28:e6: aa:cb:aa:e4:e4:01:be:10:15:5e:ff:1e:d4:3a:8e:fe:52:d0: 3d:3d:09:6b:ed:54:58:d0:66:d3:87:f1:e3:79:a4:aa:12:60: 1c:a1:ee:6c:7a:ef:00:88:bf:b6:ed:bc:36:6c:2a:d1:f1:8c: 63:98:74:1f:3b:56:3f:17:b3:4d:b1:64:54:06:65:7d:6c:6d: e7:56:07:c4:53:10:0f:66:30:a4:98:61:81:86:2a:ad:ae:2c: 28:cc:27:96:fe:45:86:51:cf:38:1d:ba:ce:7b:e4:8e:a8:ba: 5a:78:c9:c8:24:8b:c2:3a:6d:f7:4a:05:e7:f4:ef:49:09:be: 46:e1:f8:15:16:c9:d7:07:40:90:46:0e:4c:99:04:bf:9a:72: 56:2c:5b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAjv6ZCqAErylwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk ZTBiZjBhMjYtYzJkMy00YWYzLThjMjMtODUzN2MzNDg1MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2adzRMwjT/JcnbV5T6mtL1wQyYsupV2ydZyt cTDRgiBHGtoMfwzc3EjOn2saK+UqDLagurUlWaWLrj9AYwnX/yERS6L7MPR3hNWc i7Roj90Ua6i5+LqphD/9EQURz9pQyY+2XozxfHrWh1DiYyq9geyGFXrdurRyQIl2 eoQaUQGRaj2DXeDPPiBdmaX8L1LG1cKUv0vuaHiIzk1PO5T0G+8wYwNh3mIBV0v/ y02HuWAxduDi8P9l7knyurmnMby24Kr5LT+CuERth8tztY7r1MzVqpmOx9UZ7bxS m7eeECH2aGaQu7tXw2hAeDCKlgGMgSzXDX2LJ2+WNodHk/76dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgJ4e4+LOW+4rggr2WEhv/wBO5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjc5MzhlOWMtMzE5Mi0z NzkzLWFmMzAtMDQyYTA1MjQ1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYeRuJv/b9AZbjTFeEvtnp++gpqtajUZIazdNEv67oRQ1rM36MccwsG OJrDd0QXJprLasnqawaULLT9382xh9HPHtabtZJgpbiGRb+mDpXrAJWygwuGmzvZ H5lVG++LTIA98ThuH9t2JJ4o5qrLquTkAb4QFV7/HtQ6jv5S0D09CWvtVFjQZtOH 8eN5pKoSYByh7mx67wCIv7btvDZsKtHxjGOYdB87Vj8Xs02xZFQGZX1sbedWB8RT EA9mMKSYYYGGKq2uLCjMJ5b+RYZRzzgdus575I6oulp4ycgki8I6bfdKBef070kJ vkbh+BUWydcHQJBGDkyZBL+aclYsW3U= -----END CERTIFICATE-----Generated at Tue Jun 17 05:55:14 2025 by rpki-client