$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa File: 661fc493-e5f2-3843-b87f-cec243b8a026.roa (raw, json) Hash identifier: 8nfxHet4zLOtHyrr7C4fsNrrw0qt/MMJLCG7xJ45AFM= Subject key identifier: 7D:52:1D:72:DA:58:D0:55:3B:DE:BB:08:47:27:0A:4B:2B:BB:14:77 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173009BCD3C001A0CD82AE00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:bc:d3:c0:01:a0:cd:82:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=0e07a6a5-3749-440d-8817-ae0c9a4a5084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:3e:20:a3:b2:03:f5:fa:1d:76:61:b9:6f: b6:65:f6:96:cd:ec:75:8d:89:7a:e5:e9:08:f7:26: af:ab:58:c3:02:5c:2e:ca:32:5a:c2:96:55:3b:ff: d8:4a:c2:d5:b2:fa:65:4d:56:7f:52:54:b6:22:f5: bf:85:44:e3:5f:01:6e:4f:a3:3a:9a:b1:b7:91:14: 86:e2:56:05:39:7d:99:21:0a:f8:79:51:d2:eb:c0: 53:f8:74:43:cb:a5:b8:f7:eb:df:6e:f2:92:2b:75: 10:18:6b:ed:37:74:43:67:78:c4:f2:b8:2f:7b:53: 58:52:f1:8e:54:88:b3:0f:bd:ad:93:5f:54:3f:96: 4d:a0:0e:ab:94:f5:03:42:ef:61:21:ce:e2:df:a9: ca:a9:9a:d4:0c:86:2c:d0:2b:5d:a4:e7:85:d6:1a: 2d:41:6d:ab:d9:fc:c5:e8:a5:ac:0b:9c:92:15:21: 7f:c5:cb:86:c7:2d:fe:43:0b:db:92:a8:d1:18:fb: 01:68:49:f8:db:13:8a:84:d7:4e:9a:f4:e0:4b:d2: ec:a6:24:21:c9:59:0a:66:3d:16:ce:68:4f:2f:32: 5d:41:b1:f1:32:46:b1:7a:67:be:45:09:48:70:cd: 85:3e:55:e1:99:4e:d2:05:40:29:84:6a:0d:3f:fe: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:52:1D:72:DA:58:D0:55:3B:DE:BB:08:47:27:0A:4B:2B:BB:14:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:38:87:71:bd:eb:6f:e2:2b:c9:c9:96:99:66:cf:df:95:fc: 17:4c:61:86:d4:81:29:e3:53:c6:a6:92:62:4f:5e:62:df:39: a1:e1:c6:93:4a:0c:f1:c9:8e:f0:2d:74:00:08:f0:ae:94:5f: 76:bd:1c:31:3b:dc:9b:7f:a2:ef:a6:e7:2e:2c:cd:73:c6:ec: 85:de:bb:23:ae:28:91:9b:ee:f4:91:17:13:dc:25:57:87:eb: 3c:67:67:08:9e:44:22:24:7e:b0:87:36:7d:66:d6:24:6b:fe: e1:64:c2:ef:ed:4f:43:84:bf:d9:54:85:28:63:c5:9d:06:2b: 71:a7:bd:0c:6a:c1:61:61:0c:6d:e5:ab:89:bf:f4:53:c3:2d: 24:7e:2a:b1:d3:eb:bf:cb:60:da:bb:fa:a9:be:f6:1c:b9:62: e2:12:f5:af:4c:00:80:29:dc:37:99:f6:e7:a1:ad:cc:54:59: 0b:02:ba:3c:17:86:cd:73:3b:e7:94:f5:df:70:22:8f:de:bf: 8d:e3:9e:06:6b:80:54:a9:f8:75:7c:29:9d:a2:40:a8:09:81: 6f:c9:1f:1b:e9:26:81:d2:02:cb:af:3f:8d:83:48:41:63:9e: 7e:bb:05:11:3e:cc:a7:54:69:dd:0a:af:5e:2b:75:f2:9b:cc: 58:e0:bd:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAm808ABoM2CrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MGUwN2E2YTUtMzc0OS00NDBkLTg4MTctYWUwYzlhNGE1MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriU+IKOyA/X6HXZhuW+2ZfaWzex1jYl65ekI 9yavq1jDAlwuyjJawpZVO//YSsLVsvplTVZ/UlS2IvW/hUTjXwFuT6M6mrG3kRSG 4lYFOX2ZIQr4eVHS68BT+HRDy6W49+vfbvKSK3UQGGvtN3RDZ3jE8rgve1NYUvGO VIizD72tk19UP5ZNoA6rlPUDQu9hIc7i36nKqZrUDIYs0CtdpOeF1hotQW2r2fzF 6KWsC5ySFSF/xcuGxy3+QwvbkqjRGPsBaEn42xOKhNdOmvTgS9LspiQhyVkKZj0W zmhPLzJdQbHxMkaxeme+RQlIcM2FPlXhmU7SBUAphGoNP/5FcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1SHXLaWNBVO967CEcnCksruxR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNjYxZmM0OTMtZTVmMi0z ODQzLWI4N2YtY2VjMjQzYjhhMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw4h3G962/iK8nJlplmz9+V/BdMYYbUgSnjU8amkmJPXmLfOaHhxpNK DPHJjvAtdAAI8K6UX3a9HDE73Jt/ou+m5y4szXPG7IXeuyOuKJGb7vSRFxPcJVeH 6zxnZwieRCIkfrCHNn1m1iRr/uFkwu/tT0OEv9lUhShjxZ0GK3GnvQxqwWFhDG3l q4m/9FPDLSR+KrHT67/LYNq7+qm+9hy5YuIS9a9MAIAp3DeZ9uehrcxUWQsCujwX hs1zO+eU9d9wIo/ev43jngZrgFSp+HV8KZ2iQKgJgW/JHxvpJoHSAsuvP42DSEFj nn67BRE+zKdUad0Kr14rdfKbzFjgveI= -----END CERTIFICATE-----Generated at Mon Jun 16 22:02:56 2025 by rpki-client