$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa File: 9061acde-1566-3f28-a9b6-14f165759f16.roa (raw, json) Hash identifier: l2ubpH5CfedzMw73Jd0jgUdvxsi6+4EWPCg8jP/aKOA= Subject key identifier: 49:30:49:B1:C4:B4:54:C6:7D:03:F1:EE:B6:F7:5D:DE:41:B5:63:A5 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD9AFC6F170323DD77880 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:af:c6:f1:70:32:3d:d7:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=058b6601-85aa-47e7-bcbb-51411150a902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:81:c0:96:0a:7b:d7:df:d5:89:3d:94:8e: f1:f8:eb:8a:4f:23:99:41:45:b4:3c:45:6e:41:6c: d5:95:02:5e:57:3e:93:2d:6a:fc:d8:6f:3d:52:87: 5a:ad:96:12:8f:6d:47:6c:6d:8f:d6:95:af:03:a3: 79:13:ce:c9:49:c7:c8:28:39:a7:d2:cd:e2:ee:60: b0:cf:2a:59:ba:f0:3e:3b:d6:3f:c2:0d:0a:98:ab: 02:c4:65:c5:3b:4c:ee:03:3a:02:d7:1a:7f:9a:33: 2f:d9:ab:76:89:1e:16:57:28:e6:ce:54:31:ef:6b: a3:85:56:7a:f4:47:35:49:d6:6e:03:bd:ff:e0:88: 59:4b:84:bf:8e:fd:9e:5d:de:93:49:71:e4:a8:b9: 11:ac:0a:b8:f1:eb:4c:e1:43:12:fc:52:bc:a4:5e: 96:a1:4b:fa:6e:3a:25:9a:5b:b8:d2:bf:27:61:51: 3c:9c:98:f8:3f:c5:9a:0c:b1:39:81:01:b9:cc:33: 1d:c8:7e:80:14:5e:a7:50:5b:da:c4:6d:a3:55:4c: e9:66:2b:2d:36:8f:40:34:d5:83:60:67:72:3a:f5: fc:43:48:26:a4:9c:5a:72:40:be:76:c9:ae:df:c0: 63:79:8d:06:ff:51:66:28:fd:d7:7d:c5:88:6c:33: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:49:B1:C4:B4:54:C6:7D:03:F1:EE:B6:F7:5D:DE:41:B5:63:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2d:9e:13:53:08:c0:ff:09:7a:23:7a:62:b5:4a:50:f3:2d: 93:e3:06:0a:2e:42:78:c6:60:3e:86:8d:45:c5:35:7b:6d:49: 54:d6:e9:ee:0a:0c:68:5a:75:b7:4f:01:05:e6:1b:2e:7f:c5: 50:f0:0e:c2:bd:11:36:83:5d:e3:92:c7:89:4c:5f:dd:eb:ce: 59:ae:c5:6d:f2:f6:0c:49:34:54:bb:64:94:20:3e:8e:0a:06: e5:b0:9b:3e:78:82:1a:6b:29:31:34:30:87:7c:35:da:1c:85: 11:18:89:9a:c9:c9:77:40:1a:a0:8b:7d:85:02:e8:fb:75:05: 68:42:01:f2:61:5d:a8:56:ea:23:73:22:74:41:b7:43:36:f4: d1:5b:3f:6a:8e:b9:1c:67:e3:96:71:af:8e:c8:43:0a:7e:1d: 50:f7:e9:2c:44:3b:38:dd:d2:e0:0d:7a:9c:a3:a3:d7:73:11: cf:dc:0a:ff:84:bf:42:71:68:52:79:c4:85:61:dd:38:9e:b6: 62:f9:86:f6:72:17:af:50:60:a8:49:1b:37:ce:86:82:88:0f: 19:76:71:78:2a:82:a5:36:8e:b9:2b:ae:42:38:73:9f:0d:5e: ef:db:1e:a9:fa:f1:13:7d:f7:50:0a:d5:99:71:61:90:8d:8d: 10:70:65:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369mvxvFwMj3XeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MDU4YjY2MDEtODVhYS00N2U3LWJjYmItNTE0MTExNTBhOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv52BwJYKe9ff1Yk9lI7x+OuKTyOZQUW0PEVu QWzVlQJeVz6TLWr82G89UodarZYSj21HbG2P1pWvA6N5E87JScfIKDmn0s3i7mCw zypZuvA+O9Y/wg0KmKsCxGXFO0zuAzoC1xp/mjMv2at2iR4WVyjmzlQx72ujhVZ6 9Ec1SdZuA73/4IhZS4S/jv2eXd6TSXHkqLkRrAq48etM4UMS/FK8pF6WoUv6bjol mlu40r8nYVE8nJj4P8WaDLE5gQG5zDMdyH6AFF6nUFvaxG2jVUzpZistNo9ANNWD YGdyOvX8Q0gmpJxackC+dsmu38BjeY0G/1FmKP3XfcWIbDPpKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkwSbHEtFTGfQPx7rb3Xd5BtWOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvOTA2MWFjZGUtMTU2Ni0z ZjI4LWE5YjYtMTRmMTY1NzU5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQtnhNTCMD/CXojemK1SlDzLZPjBgouQnjGYD6GjUXFNXttSVTW6e4K DGhadbdPAQXmGy5/xVDwDsK9ETaDXeOSx4lMX93rzlmuxW3y9gxJNFS7ZJQgPo4K BuWwmz54ghprKTE0MId8NdochREYiZrJyXdAGqCLfYUC6Pt1BWhCAfJhXahW6iNz InRBt0M29NFbP2qOuRxn45Zxr47IQwp+HVD36SxEOzjd0uANepyjo9dzEc/cCv+E v0JxaFJ5xIVh3TietmL5hvZyF69QYKhJGzfOhoKIDxl2cXgqgqU2jrkrrkI4c58N Xu/bHqn68RN991AK1ZlxYZCNjRBwZZE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:06 2025 by rpki-client