$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: CjMYKSPz8zzjDpc9usT4/h7rwn8dDLoulj4gG2VLq+U= Subject key identifier: 18:0A:D1:6B:E7:56:C7:5E:54:44:F0:82:0A:7E:63:BE:6D:14:2C:69 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300A2091AE91946E809800 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0a:20:91:ae:91:94:6e:80:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=96860823-b8a1-4b2a-b4bb-c7d1cafa8fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:9e:fa:88:39:74:55:02:7e:4d:ec:42:72:4a: 73:7f:5e:b4:bc:54:f7:75:36:33:a0:8f:a4:e9:85: 05:fe:38:a6:ae:da:bd:02:1b:5c:23:78:4b:f4:3a: a7:4f:8e:c7:85:81:23:6a:63:19:8b:f8:b1:fa:97: 2f:99:22:48:2e:2a:24:f9:fd:3f:d6:a1:4f:31:74: b6:4c:fc:ba:c5:1f:ea:74:06:3f:3d:3e:db:fa:35: 8c:7e:28:b8:e0:3b:23:37:c1:9a:16:d6:ba:05:fc: 5e:56:0f:ca:14:37:ee:35:c0:4e:5a:4c:23:70:20: 77:7e:f6:71:03:1b:e0:a7:02:ea:31:11:2e:67:39: 1d:bd:1e:1a:a5:25:ff:89:9b:00:07:d7:28:3c:4f: 14:7f:ac:1a:10:67:0c:d5:b0:df:f9:0c:98:68:f9: d5:d1:d1:7f:26:16:a1:df:4f:14:c7:39:17:91:e9: a7:88:e6:ad:7e:7a:cf:a2:4f:d2:f8:1f:d0:25:bd: 32:25:1d:a2:5a:f1:60:91:e0:48:95:84:fc:02:43: 93:a9:43:74:18:da:c4:bf:bf:84:04:4c:53:17:4c: 74:ad:f8:77:88:10:a8:32:cd:b7:3d:5c:c3:ae:52: ff:52:f7:69:76:b9:02:60:eb:5c:be:15:e4:98:34: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0A:D1:6B:E7:56:C7:5E:54:44:F0:82:0A:7E:63:BE:6D:14:2C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2d:45:f3:48:8f:d4:6e:b5:13:d7:49:ce:c6:e3:07:ca:f6: 7f:51:60:a6:00:18:b1:7d:e1:a8:5f:ac:27:a9:d0:49:90:52: 79:52:50:b4:ad:d8:a7:17:75:d3:48:cd:64:82:1b:c5:6c:eb: fa:ce:51:af:6f:53:32:5b:91:0a:5b:21:94:b8:25:75:4f:ab: cc:ba:2e:36:f9:8d:92:2a:68:8b:55:7e:3f:54:fb:cc:86:18: 65:ab:69:15:98:d6:7c:8a:8f:f3:fc:3d:db:0b:b2:91:8c:3c: 1d:0e:33:d4:a4:20:cc:45:e5:c7:a9:f2:d0:43:c4:7b:4a:97: c0:a0:fa:06:38:d9:cc:0a:67:9f:0c:8b:c2:1f:84:95:1f:a2: b0:ff:3f:ca:3f:cd:7f:a2:f5:8a:3e:2d:3a:74:5b:7f:0c:8b: e6:76:ac:c4:f7:6b:13:bb:c0:d1:9a:d6:8c:f4:26:80:c8:58: 4c:f7:1d:b7:50:29:4b:4d:bc:4b:a1:89:89:54:5a:9d:6c:64: 47:6e:e5:d3:e7:6f:85:55:e5:90:fe:7c:fd:16:c6:ad:0b:77: f0:d3:31:e3:6c:6b:1b:0a:12:6c:e3:5e:54:1d:b6:bd:0c:9b: 34:12:71:8a:d2:67:db:c1:b5:7d:c9:2d:fe:8a:0f:50:a9:57: 8b:7e:52:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAogka6RlG6AmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk OTY4NjA4MjMtYjhhMS00YjJhLWI0YmItYzdkMWNhZmE4ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/J76iDl0VQJ+TexCckpzf160vFT3dTYzoI+k 6YUF/jimrtq9AhtcI3hL9DqnT47HhYEjamMZi/ix+pcvmSJILiok+f0/1qFPMXS2 TPy6xR/qdAY/PT7b+jWMfii44DsjN8GaFta6BfxeVg/KFDfuNcBOWkwjcCB3fvZx AxvgpwLqMREuZzkdvR4apSX/iZsAB9coPE8Uf6waEGcM1bDf+QyYaPnV0dF/Jhah 308UxzkXkemniOatfnrPok/S+B/QJb0yJR2iWvFgkeBIlYT8AkOTqUN0GNrEv7+E BExTF0x0rfh3iBCoMs23PVzDrlL/UvdpdrkCYOtcvhXkmDQtWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgK0WvnVsdeVETwggp+Y75tFCxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAtRfNIj9RutRPXSc7G4wfK9n9RYKYAGLF94ahfrCep0EmQUnlSULSt 2KcXddNIzWSCG8Vs6/rOUa9vUzJbkQpbIZS4JXVPq8y6Ljb5jZIqaItVfj9U+8yG GGWraRWY1nyKj/P8PdsLspGMPB0OM9SkIMxF5cep8tBDxHtKl8Cg+gY42cwKZ58M i8IfhJUforD/P8o/zX+i9Yo+LTp0W38Mi+Z2rMT3axO7wNGa1oz0JoDIWEz3HbdQ KUtNvEuhiYlUWp1sZEdu5dPnb4VV5ZD+fP0Wxq0Ld/DTMeNsaxsKEmzjXlQdtr0M mzQScYrSZ9vBtX3JLf6KD1CpV4t+Uqk= -----END CERTIFICATE-----Generated at Tue Jun 17 02:18:28 2025 by rpki-client