$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: 74yiDrxL5vtGbYrasy18c0rT0C/O9XxRoWneTDQinMg= Subject key identifier: 28:AE:7E:1F:9D:E7:3E:9F:6D:DE:F5:43:FD:9A:B3:C7:FD:DE:EC:31 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD9D985F39CD90EF57B40 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:d9:85:f3:9c:d9:0e:f5:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=04e87316-4d1a-4dfa-a228-841f645ec507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:d7:02:8a:9d:51:d3:bd:92:1e:f0:58:cd: 7c:c6:e7:52:4c:57:38:e1:2a:ca:4d:d0:b7:88:e3: 66:d1:c0:24:88:6a:27:34:12:40:f2:9c:fa:a7:41: c3:a2:19:98:39:43:de:76:26:c1:c7:b8:09:f5:91: 4c:94:95:78:96:4a:28:91:63:7d:2c:fb:0c:8b:7b: 2b:af:4a:df:bd:67:1b:a3:b5:f8:88:a2:fa:9b:34: fc:cc:f2:7e:4e:7b:e7:fa:01:2d:f4:66:72:8e:b2: 3c:00:77:69:11:9f:49:62:d0:82:ce:1a:0d:2f:2e: fd:07:e2:c1:8c:6d:13:c0:8a:43:ae:bc:96:8c:c1: 5d:d6:b7:99:87:e7:ed:29:02:79:9b:e1:98:e6:e1: 6c:6f:74:3c:4f:09:58:c9:eb:b3:c9:91:be:e6:67: ee:a8:c9:de:7b:fa:66:e5:af:2c:f9:73:5d:39:38: 89:0d:0e:0e:12:22:9b:bc:9b:2a:bc:6e:7b:77:06: 27:be:cd:8a:f7:d9:14:e2:ee:9b:14:91:42:dd:16: 86:f5:2a:dc:22:35:c8:4a:70:f7:9d:90:81:a7:8c: 52:ad:44:c8:cb:d7:cd:de:f4:98:02:d2:8a:71:6f: e1:8e:8c:d3:6f:24:d1:44:9d:ff:fb:1a:cc:4f:38: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AE:7E:1F:9D:E7:3E:9F:6D:DE:F5:43:FD:9A:B3:C7:FD:DE:EC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4e:f3:ee:ed:0f:e9:98:85:94:76:78:5d:d4:3d:ae:f0:a6: 56:84:81:b5:c3:ac:e9:54:c0:e9:b0:ea:6b:0f:48:75:c3:a5: ad:5c:39:f2:70:7d:df:71:21:06:30:cf:3c:bb:cb:b8:87:92: 5d:e5:2b:d2:39:b8:b0:8c:7e:d0:dd:14:eb:56:d0:92:a8:b7: 58:69:f3:e8:7c:92:e3:68:7b:ff:5b:d7:54:e3:6c:26:b5:e7: c5:6e:7e:f3:48:fd:ac:e4:07:c6:42:5f:7a:5a:0f:06:29:06: 7e:4b:fa:65:10:6c:ae:08:64:c6:8a:e1:c4:50:ba:5c:e1:90: 19:72:15:25:ee:c5:e5:06:b3:c2:dd:d8:2a:95:3b:84:e4:84: f0:49:84:8b:ff:82:e2:cd:b2:bf:ec:10:e7:21:58:73:8d:a2: c4:ca:22:1a:5f:01:73:4f:e2:33:c6:55:82:8d:e0:4c:58:5a: 02:88:61:0f:b7:8b:cc:6a:0c:57:4f:92:c4:04:6c:9a:48:0d: 06:29:d3:f6:22:41:65:8d:4d:4f:b3:7e:b3:b9:22:14:eb:fd: cd:53:05:46:2d:6d:ab:c5:4e:b4:88:4f:06:a3:e7:18:5a:07: 84:a1:45:3e:49:16:6a:e9:e9:50:fb:29:9d:c0:a5:f5:4b:39: 2c:4a:0f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369nZhfOc2Q71e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MDRlODczMTYtNGQxYS00ZGZhLWEyMjgtODQxZjY0NWVjNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR/XAoqdUdO9kh7wWM18xudSTFc44SrKTdC3 iONm0cAkiGonNBJA8pz6p0HDohmYOUPedibBx7gJ9ZFMlJV4lkookWN9LPsMi3sr r0rfvWcbo7X4iKL6mzT8zPJ+Tnvn+gEt9GZyjrI8AHdpEZ9JYtCCzhoNLy79B+LB jG0TwIpDrryWjMFd1reZh+ftKQJ5m+GY5uFsb3Q8TwlYyeuzyZG+5mfuqMnee/pm 5a8s+XNdOTiJDQ4OEiKbvJsqvG57dwYnvs2K99kU4u6bFJFC3RaG9SrcIjXISnD3 nZCBp4xSrUTIy9fN3vSYAtKKcW/hjozTbyTRRJ3/+xrMTzgsiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiufh+d5z6fbd71Q/2as8f93uwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdO8+7tD+mYhZR2eF3UPa7wplaEgbXDrOlUwOmw6msPSHXDpa1cOfJw fd9xIQYwzzy7y7iHkl3lK9I5uLCMftDdFOtW0JKot1hp8+h8kuNoe/9b11TjbCa1 58VufvNI/azkB8ZCX3paDwYpBn5L+mUQbK4IZMaK4cRQulzhkBlyFSXuxeUGs8Ld 2CqVO4TkhPBJhIv/guLNsr/sEOchWHONosTKIhpfAXNP4jPGVYKN4ExYWgKIYQ+3 i8xqDFdPksQEbJpIDQYp0/YiQWWNTU+zfrO5IhTr/c1TBUYtbavFTrSITwaj5xha B4ShRT5JFmrp6VD7KZ3ApfVLOSxKD/E= -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:33 2025 by rpki-client