$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa File: 9061acde-1566-3f28-a9b6-14f165759f16.roa (raw, json) Hash identifier: BZFAqrpB9ckOmpL6VkzGTAphH73OoW6uoz25K0clQks= Subject key identifier: 39:2A:8B:7E:4A:0A:FD:65:82:CB:0E:92:C8:0D:97:4F:F6:5A:EE:90 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173009FCCF23FC2AD43C4580 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:fc:cf:23:fc:2a:d4:3c:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=edd83534-c785-43f6-8a65-e52de28bf415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6b:25:3b:f3:1e:c8:53:15:87:f3:3f:e3:40: 7f:75:dd:6b:e0:c9:d6:b4:9f:98:dc:54:4b:c1:60: 45:0a:99:47:90:2f:fc:6c:45:d3:59:c9:55:82:54: 44:90:bf:42:42:a7:66:dc:c6:f8:03:bd:a3:30:d8: 19:9c:8f:16:ae:e3:f2:bb:99:0b:b5:97:31:8a:c4: a5:fb:90:e7:da:61:4b:fe:57:2b:72:a1:07:c8:06: 90:d3:39:54:23:e0:63:a1:32:4b:cc:f6:4d:af:eb: c0:f9:ad:70:86:cc:53:de:22:5b:62:85:eb:d5:b5: 31:78:37:0e:39:93:d1:f1:2c:2b:7c:aa:ff:3c:e8: ef:66:04:60:a6:78:fb:b7:31:47:96:a0:b7:03:bb: a1:11:82:fa:07:52:ae:3f:86:da:33:95:ee:4c:2e: bb:5c:3f:84:63:01:07:75:58:ab:c6:97:79:72:3e: cc:02:14:81:08:7b:5d:c8:6b:c2:3b:2c:5f:55:ce: e2:7d:1e:1a:58:ba:96:eb:1b:0c:e6:07:c5:ad:f0: 7f:f0:c5:1c:c8:ed:3d:90:21:9b:9f:96:03:97:56: 1b:1d:f2:43:d4:83:ea:47:31:9b:2c:da:aa:76:76: b7:73:2a:1d:7e:e5:f2:a9:75:5c:1f:83:f4:e6:4e: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2A:8B:7E:4A:0A:FD:65:82:CB:0E:92:C8:0D:97:4F:F6:5A:EE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/9061acde-1566-3f28-a9b6-14f165759f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f7:7f:2a:fb:fb:ec:8c:36:41:62:7f:d1:cc:ae:00:5d:1c: 94:ea:61:ba:e3:99:71:4d:26:fd:ab:b1:18:7c:9f:e4:17:eb: c7:38:b0:cf:20:4d:42:56:3e:ef:4e:d2:a9:94:eb:7f:53:01: b7:57:68:a6:c2:ee:df:d8:5d:d0:e5:6a:01:82:68:3d:a8:b1: 8a:76:54:1a:d1:e4:0a:cd:f8:a4:1c:9c:0d:cb:63:c8:85:fc: 74:b3:b4:23:51:20:d3:a7:b0:e7:9d:26:af:fe:2a:c8:b5:09: 1f:3f:e6:c0:1a:31:86:f1:2c:40:92:c0:ad:15:bb:62:66:cb: c4:c5:db:cb:7a:63:e4:46:40:31:e3:a5:9d:08:e1:50:28:19: 26:7e:2d:ae:cf:c4:6e:be:88:42:92:d3:82:b2:48:76:9a:41: ed:d3:c9:44:e2:06:c8:dd:c4:4b:58:db:5f:54:14:ce:ba:60: 2b:fb:4e:c1:e8:54:6d:de:42:d2:34:c6:c2:e4:e0:43:45:42: 8a:d9:b2:75:7a:5c:e8:56:8f:18:5b:db:9f:44:d7:65:7f:cb: 9e:6f:a2:9e:2e:e3:5f:98:88:c7:09:59:7f:a0:82:63:f3:52: d2:80:5e:37:63:8a:07:d9:25:a1:bc:9e:59:49:a9:7b:c3:d4: f8:9d:aa:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAn8zyP8KtQ8RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk ZWRkODM1MzQtYzc4NS00M2Y2LThhNjUtZTUyZGUyOGJmNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2slO/MeyFMVh/M/40B/dd1r4MnWtJ+Y3FRL wWBFCplHkC/8bEXTWclVglREkL9CQqdm3Mb4A72jMNgZnI8WruPyu5kLtZcxisSl +5Dn2mFL/lcrcqEHyAaQ0zlUI+BjoTJLzPZNr+vA+a1whsxT3iJbYoXr1bUxeDcO OZPR8SwrfKr/POjvZgRgpnj7tzFHlqC3A7uhEYL6B1KuP4baM5XuTC67XD+EYwEH dVirxpd5cj7MAhSBCHtdyGvCOyxfVc7ifR4aWLqW6xsM5gfFrfB/8MUcyO09kCGb n5YDl1YbHfJD1IPqRzGbLNqqdna3cyodfuXyqXVcH4P05k6M1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkqi35KCv1lgssOksgNl0/2Wu6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvOTA2MWFjZGUtMTU2Ni0z ZjI4LWE5YjYtMTRmMTY1NzU5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX3fyr7++yMNkFif9HMrgBdHJTqYbrjmXFNJv2rsRh8n+QX68c4sM8g TUJWPu9O0qmU639TAbdXaKbC7t/YXdDlagGCaD2osYp2VBrR5ArN+KQcnA3LY8iF /HSztCNRINOnsOedJq/+Ksi1CR8/5sAaMYbxLECSwK0Vu2Jmy8TF28t6Y+RGQDHj pZ0I4VAoGSZ+La7PxG6+iEKS04KySHaaQe3TyUTiBsjdxEtY219UFM66YCv7TsHo VG3eQtI0xsLk4ENFQorZsnV6XOhWjxhb259E12V/y55vop4u41+YiMcJWX+ggmPz UtKAXjdjigfZJaG8nllJqXvD1Pidqo4= -----END CERTIFICATE-----Generated at Tue Jun 17 02:31:40 2025 by rpki-client