$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa File: 2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (raw, json) Hash identifier: FGr5trppEfLY3Lnmi07aBpykvHw064qiAMORT3z9zDA= Subject key identifier: 5E:A9:C2:9B:44:29:A5:04:80:E4:A5:89:54:C1:48:8B:12:99:22:C9 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300996E13BAFBA7693E900 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:96:e1:3b:af:ba:76:93:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=a0e7ac8c-8a3f-4ff9-9b22-1f3140dbb881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:9a:92:b9:56:9a:83:be:e1:5d:bd:d4:4e: c9:bc:c5:5c:14:9f:f6:ae:1e:48:47:36:e8:7f:be: 89:55:8c:70:1e:14:f3:5f:03:fe:f3:3a:8b:38:5c: bc:27:d5:d1:77:ed:85:af:b2:aa:3d:f8:a2:ba:db: 4b:16:77:a0:41:fa:e4:fe:3e:08:6e:b7:54:7f:53: f0:9e:28:4a:3b:f4:e9:4c:97:7f:fe:c4:3a:d6:93: df:85:3b:7b:2a:f5:c9:11:b2:5f:0a:3e:48:b1:b5: f7:aa:7c:3e:76:06:ad:33:28:12:5d:76:3d:23:c9: 31:e1:19:a3:d1:d8:e2:85:74:d2:5e:f8:08:f6:12: e8:35:61:10:2d:c9:6a:66:ef:9c:09:9f:db:a6:6e: cd:24:2f:dc:c5:d7:e5:81:0c:cd:9f:7f:e3:d3:73: 0b:ca:6d:5e:ab:63:64:da:ec:53:4b:91:89:ad:2d: dd:3c:74:0f:51:da:89:6c:26:27:e2:9e:c7:8c:d0: fc:3b:d6:e1:c2:5e:38:11:f3:2b:10:da:5e:95:34: 84:b1:48:da:0d:57:28:14:d8:a7:c0:78:2c:1e:7f: 7c:5f:f8:20:d1:61:0c:f4:5f:81:f1:8c:f4:50:28: a8:7a:5e:60:ef:73:bd:83:6d:c4:bb:bf:c9:71:27: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A9:C2:9B:44:29:A5:04:80:E4:A5:89:54:C1:48:8B:12:99:22:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9a:e1:e2:88:6c:a5:68:94:a0:0a:54:6d:83:55:0f:51:8c: 5d:16:d6:4b:40:e8:c8:88:2a:56:2e:22:8c:3d:9b:7f:c5:42: 57:25:4d:f0:0e:52:ba:39:f5:68:44:17:1a:07:fe:63:db:cb: 99:07:22:b4:c5:12:62:31:69:5d:72:3d:2d:98:55:e6:76:ce: 2c:53:ef:92:d5:87:96:3f:06:de:e1:25:c6:be:7a:c0:ae:19: e1:b4:b6:2f:09:5b:54:7b:77:ea:b8:7d:4e:5a:74:e6:77:51: 5f:35:68:c8:e6:08:d0:8a:eb:81:59:fa:ae:1f:c2:6d:17:6c: 83:97:eb:a2:18:51:42:bf:64:98:4f:91:49:83:27:cf:f1:42: af:e4:b4:ef:21:3f:b5:fc:0e:0d:ad:16:4c:26:4e:2e:47:b5: 5c:86:ac:2a:28:d6:7e:aa:7e:be:40:eb:34:89:c3:ea:a7:22: 6d:85:8f:40:ac:b7:49:62:25:0b:6f:fc:6d:8e:b1:94:5f:8e: 3d:72:0f:fa:f9:b5:36:6e:24:18:50:cc:8b:ed:ad:99:75:f4: 3a:83:ef:c1:26:1b:0d:04:b6:17:e2:e6:8b:57:86:63:19:1a: 06:8e:71:8b:85:cf:a3:bc:d0:d5:02:7e:8c:8a:3c:ba:1e:1f: be:e5:38:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAmW4TuvunaT6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk YTBlN2FjOGMtOGEzZi00ZmY5LTliMjItMWYzMTQwZGJiODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS+akrlWmoO+4V291E7JvMVcFJ/2rh5IRzbo f76JVYxwHhTzXwP+8zqLOFy8J9XRd+2Fr7KqPfiiuttLFnegQfrk/j4IbrdUf1Pw nihKO/TpTJd//sQ61pPfhTt7KvXJEbJfCj5IsbX3qnw+dgatMygSXXY9I8kx4Rmj 0djihXTSXvgI9hLoNWEQLclqZu+cCZ/bpm7NJC/cxdflgQzNn3/j03MLym1eq2Nk 2uxTS5GJrS3dPHQPUdqJbCYn4p7HjND8O9bhwl44EfMrENpelTSEsUjaDVcoFNin wHgsHn98X/gg0WEM9F+B8Yz0UCioel5g73O9g23Eu7/JcSeb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6pwptEKaUEgOSliVTBSIsSmSLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMmJiZDhhNDYtMmNiYS0z OGExLTg1MjktMWFjY2JiMDEyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFia4eKIbKVolKAKVG2DVQ9RjF0W1ktA6MiIKlYuIow9m3/FQlclTfAO Uro59WhEFxoH/mPby5kHIrTFEmIxaV1yPS2YVeZ2zixT75LVh5Y/Bt7hJca+esCu GeG0ti8JW1R7d+q4fU5adOZ3UV81aMjmCNCK64FZ+q4fwm0XbIOX66IYUUK/ZJhP kUmDJ8/xQq/ktO8hP7X8Dg2tFkwmTi5HtVyGrCoo1n6qfr5A6zSJw+qnIm2Fj0Cs t0liJQtv/G2OsZRfjj1yD/r5tTZuJBhQzIvtrZl19DqD78EmGw0Ethfi5otXhmMZ GgaOcYuFz6O80NUCfoyKPLoeH77lOP8= -----END CERTIFICATE-----Generated at Mon Jun 16 19:13:03 2025 by rpki-client