$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa File: 43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa (raw, json) Hash identifier: swBd0QwHi/tMGQNUcCC0I50zDZgPSw1ibuZpxaKj58Q= Subject key identifier: 24:9A:BF:D7:59:BF:6D:49:42:51:33:FC:1D:DE:AA:55:0F:5E:D7:17 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173008DB52A8D99A1609E300 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:08:db:52:a8:d9:9a:16:09:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=eea3aa83-fc16-498f-84ac-24de7f9ac14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:0d:ea:1c:de:cc:44:ee:f5:0d:e0:1b:6e: 55:e1:58:de:1d:8b:f8:51:48:d4:fe:37:03:a2:70: 07:9b:91:82:72:19:67:b4:bd:6d:22:ad:db:3b:bc: 54:f0:f4:a9:fe:57:c6:f5:1b:ff:7b:d3:80:a5:cc: 31:76:63:28:d9:e7:91:0d:cf:89:13:8f:da:a7:15: 57:2e:c5:30:82:fd:7d:de:01:cd:07:2d:24:59:c5: e1:9c:d2:10:8e:09:e6:1c:11:0c:83:ab:b7:20:8e: 7c:76:c4:5c:a2:b9:40:3d:dc:6c:46:a1:6c:e9:5d: 35:5d:57:a8:ac:a9:bb:bb:61:27:89:6d:0b:de:60: 0f:20:f2:7b:34:3a:78:b0:3d:39:ee:ff:45:01:e2: c1:7c:ac:2a:14:49:38:0a:33:7f:03:92:2a:43:7a: 94:62:0d:c4:c4:ea:25:ad:ef:94:f0:85:b5:95:57: 43:63:0e:fa:df:ef:f8:36:91:64:a9:8d:49:26:6b: cc:87:f1:69:ac:e2:1e:31:59:51:7f:07:c4:03:95: 5b:e7:7c:ba:0a:41:5a:5e:ce:96:d1:b6:40:ad:af: 14:42:af:22:4f:58:67:44:33:8f:a9:82:b5:57:21: d8:2c:59:47:42:76:35:a8:cf:14:05:2d:be:79:a9: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9A:BF:D7:59:BF:6D:49:42:51:33:FC:1D:DE:AA:55:0F:5E:D7:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2c:8c:ca:89:81:3d:72:be:0b:3f:3f:c2:e5:6b:7e:c1:6b: c6:d0:43:04:ed:bd:61:c5:6a:29:1e:b2:7b:53:fb:25:93:4c: f1:59:d2:55:05:d4:80:25:88:12:25:c4:28:bf:8b:5c:29:7b: bd:93:88:6f:ec:c8:56:6f:85:a4:46:cf:42:1c:f7:24:dc:4e: ae:d7:44:61:04:9e:ba:7a:e5:b4:01:81:05:95:ec:2e:7f:8e: b5:d1:33:5b:35:f1:77:1e:22:67:11:46:a5:21:7a:02:71:e7: b7:46:4d:3c:2c:f6:80:fa:c1:84:44:3f:1b:d5:fa:0a:9f:b5: 22:32:7f:ce:df:54:20:96:eb:98:41:b1:ab:df:a1:75:6a:44: df:fb:6d:7f:5e:49:49:b2:c6:c2:1a:0e:cc:9e:4d:5e:e0:4b: 7d:e8:88:e0:78:84:03:47:1f:8f:0c:17:43:08:23:82:26:ca: 59:3a:ed:3e:00:79:6b:bb:08:b1:ab:f0:ab:bd:1a:e1:af:c9: b5:24:7b:34:0d:13:15:e2:82:42:89:ed:a5:be:f0:71:98:72: 4a:91:c7:3e:80:a6:64:e1:22:ff:c2:03:95:79:f2:2c:59:a4: 72:27:31:ee:e7:f6:65:c4:29:05:ff:b7:c0:1c:2b:63:10:f2: 8f:4e:51:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAjbUqjZmhYJ4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk ZWVhM2FhODMtZmMxNi00OThmLTg0YWMtMjRkZTdmOWFjMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgAN6hzezETu9Q3gG25V4VjeHYv4UUjU/jcD onAHm5GCchlntL1tIq3bO7xU8PSp/lfG9Rv/e9OApcwxdmMo2eeRDc+JE4/apxVX LsUwgv193gHNBy0kWcXhnNIQjgnmHBEMg6u3II58dsRcorlAPdxsRqFs6V01XVeo rKm7u2EniW0L3mAPIPJ7NDp4sD057v9FAeLBfKwqFEk4CjN/A5IqQ3qUYg3ExOol re+U8IW1lVdDYw763+/4NpFkqY1JJmvMh/FprOIeMVlRfwfEA5Vb53y6CkFaXs6W 0bZAra8UQq8iT1hnRDOPqYK1VyHYLFlHQnY1qM8UBS2+eamvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSav9dZv21JQlEz/B3eqlUPXtcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNDNmZWExYjgtMGM5Yy0z NzZjLWFmNWMtODNmNWIzYjY4NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEsjMqJgT1yvgs/P8Lla37Ba8bQQwTtvWHFaikesntT+yWTTPFZ0lUF 1IAliBIlxCi/i1wpe72TiG/syFZvhaRGz0Ic9yTcTq7XRGEEnrp65bQBgQWV7C5/ jrXRM1s18XceImcRRqUhegJx57dGTTws9oD6wYREPxvV+gqftSIyf87fVCCW65hB savfoXVqRN/7bX9eSUmyxsIaDsyeTV7gS33oiOB4hANHH48MF0MII4Imylk67T4A eWu7CLGr8Ku9GuGvybUkezQNExXigkKJ7aW+8HGYckqRxz6ApmThIv/CA5V58ixZ pHInMe7n9mXEKQX/t8AcK2MQ8o9OUeg= -----END CERTIFICATE-----Generated at Tue Jun 17 01:54:06 2025 by rpki-client