$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa File: 2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (raw, json) Hash identifier: prGGFE2DYymqifvQ/rOw+qgW0W945s57ciP7JC7rVR4= Subject key identifier: 93:E4:11:DF:44:52:0B:D5:B2:39:B4:E2:99:17:59:D8:B3:83:47:3D Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD9412D76A68931461EA0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:41:2d:76:a6:89:31:46:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=903fd030-6b66-4780-b1be-31cea036c198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:11:9d:03:3a:a6:e8:c4:62:45:29:1d:c3: 48:d6:4b:55:c9:40:6f:90:d4:0a:cd:a4:33:f4:2b: ac:4b:4c:bc:50:3a:6f:df:12:bb:17:f5:62:46:40: fd:56:86:7c:f4:f3:f1:22:78:ad:7c:3a:e4:28:6f: 6e:bb:5f:5d:27:8b:12:d1:b8:e5:d3:b1:bf:36:c4: 69:a7:53:dc:8d:8d:6f:66:3f:50:64:92:59:4b:10: c5:f7:63:58:09:0f:aa:6c:6e:3a:eb:93:60:6e:29: 42:ee:3a:6a:48:20:8c:b7:18:31:d1:34:cf:d9:54: 78:09:3d:8c:d6:9c:b7:c2:6b:67:c6:9c:18:15:62: 45:20:34:f8:f4:89:d3:2d:ea:c9:6e:b4:b7:5a:b7: 5d:3d:0e:62:a5:0d:5a:b8:04:f1:ff:cc:af:ee:e5: 9c:1a:98:e6:17:59:45:ce:73:c2:3a:2e:be:b8:11: e7:67:7b:df:de:e6:9f:86:38:71:e7:47:54:6d:fb: bd:3f:be:a5:e2:9c:52:7a:5a:7d:a2:ee:c8:2a:61: e4:d7:65:73:ef:1b:70:c0:d3:3f:c5:2d:c8:69:19: fe:9c:23:e7:ec:53:86:29:71:2c:cf:d5:24:c0:d4: b6:79:f4:b9:2f:b1:df:fe:18:55:bd:72:5e:0c:c4: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E4:11:DF:44:52:0B:D5:B2:39:B4:E2:99:17:59:D8:B3:83:47:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ce:a5:c3:80:60:72:55:96:1e:66:a2:34:c1:bb:41:2d:6d: 49:33:80:07:f9:3e:bd:1e:8f:2d:af:49:23:02:a2:d9:ad:03: 93:50:f7:53:b7:0f:e5:60:d5:02:3d:b2:44:2f:bc:16:30:4a: e8:65:de:bd:1a:27:af:23:da:e7:30:5c:91:94:c0:ad:2e:ac: a6:62:8b:12:c9:0a:dd:a2:ec:01:f1:0b:b5:9e:85:9b:a6:37: 3b:3f:43:62:5c:36:dc:56:33:e4:83:a0:ae:6b:11:61:5c:2f: 1a:0a:32:9e:db:14:36:09:c0:c6:6a:fd:32:89:d0:8f:6f:11: 19:c1:55:ba:7a:98:5d:14:fa:f6:89:2b:73:95:25:24:e8:b1: 5a:74:6d:5d:b9:4b:52:84:f7:ce:96:95:e0:cb:64:4a:75:ea: 49:fc:f9:f2:c3:74:0e:1a:3d:2f:55:2c:31:47:ea:11:c7:d8: 9e:7a:9e:ae:03:f2:e8:c2:af:5e:ff:79:74:ec:f8:90:9f:1b: 30:af:86:73:7a:66:0b:09:67:04:e7:8f:f4:74:aa:6c:c4:b9: a9:e9:c2:f6:8c:b8:3f:a1:69:eb:b5:c9:ea:98:3b:69:fd:0a: 6e:ac:bd:9d:2d:46:16:c1:35:b0:be:fc:c6:21:d0:40:d3:65: 2b:60:4f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369lBLXamiTFGHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk OTAzZmQwMzAtNmI2Ni00NzgwLWIxYmUtMzFjZWEwMzZjMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8URnQM6pujEYkUpHcNI1ktVyUBvkNQKzaQz 9CusS0y8UDpv3xK7F/ViRkD9VoZ89PPxInitfDrkKG9uu19dJ4sS0bjl07G/NsRp p1PcjY1vZj9QZJJZSxDF92NYCQ+qbG4665NgbilC7jpqSCCMtxgx0TTP2VR4CT2M 1py3wmtnxpwYFWJFIDT49InTLerJbrS3WrddPQ5ipQ1auATx/8yv7uWcGpjmF1lF znPCOi6+uBHnZ3vf3uafhjhx50dUbfu9P76l4pxSelp9ou7IKmHk12Vz7xtwwNM/ xS3IaRn+nCPn7FOGKXEsz9UkwNS2efS5L7Hf/hhVvXJeDMSaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPkEd9EUgvVsjm04pkXWdizg0c9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMmJiZDhhNDYtMmNiYS0z OGExLTg1MjktMWFjY2JiMDEyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATOpcOAYHJVlh5mojTBu0EtbUkzgAf5Pr0ejy2vSSMCotmtA5NQ91O3 D+Vg1QI9skQvvBYwSuhl3r0aJ68j2ucwXJGUwK0urKZiixLJCt2i7AHxC7WehZum Nzs/Q2JcNtxWM+SDoK5rEWFcLxoKMp7bFDYJwMZq/TKJ0I9vERnBVbp6mF0U+vaJ K3OVJSTosVp0bV25S1KE986WleDLZEp16kn8+fLDdA4aPS9VLDFH6hHH2J56nq4D 8ujCr17/eXTs+JCfGzCvhnN6ZgsJZwTnj/R0qmzEuanpwvaMuD+haeu1yeqYO2n9 Cm6svZ0tRhbBNbC+/MYh0EDTZStgT/o= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:19 2025 by rpki-client