$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa File: ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json) Hash identifier: fseMjAQupNDseijC/47b4H6Jhj7O/xRzzIegSmaOPT0= Subject key identifier: 5D:B1:CC:C2:57:B4:30:B5:08:C2:13:0F:C5:E4:B1:A9:9A:01:D8:7B Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A173009AAE8C606C5CAB46B80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:aa:e8:c6:06:c5:ca:b4:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=66e94d64-1c6f-4b80-a57f-7087bd507031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:ee:cd:4b:18:03:30:1d:28:c3:cf:33:89: 94:24:f5:94:37:37:de:79:c4:c5:d6:98:3d:dd:45: 0d:92:40:db:51:7a:d4:75:0f:14:4f:2f:15:2a:ca: e9:37:65:9d:16:30:a4:01:bb:ca:78:89:7f:7e:57: 56:22:04:1a:f7:70:8b:fc:44:3b:20:82:8b:1e:65: 4b:d4:c6:ee:bb:37:77:55:db:c6:26:e1:53:04:24: 7b:3f:d3:46:da:5c:3d:87:e1:68:e8:dc:5b:64:18: 16:ad:f8:72:f5:0d:69:ed:99:7b:4a:25:36:a6:82: 60:6b:e4:ba:5e:94:47:c4:fc:8d:9a:16:b8:4e:8d: 84:25:9b:db:3c:66:8e:4b:92:9c:04:ec:b4:7c:d7: 56:1f:6b:20:03:ac:13:d8:c4:d9:45:d0:1a:22:31: 4c:5b:a8:9e:c4:15:26:eb:f7:bb:8f:12:2e:29:98: a2:6f:69:23:22:27:a2:36:bb:d4:33:83:3e:2f:22: 35:fc:4c:12:64:18:99:6c:b2:7f:05:1f:30:5b:11: 32:15:60:c6:57:c8:3a:3c:69:be:ea:fb:41:01:12: 40:8b:19:a2:92:f0:76:f1:a9:c1:c7:44:47:3c:9a: dd:66:73:46:5f:6c:81:08:21:b3:7f:32:c1:5c:e6: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B1:CC:C2:57:B4:30:B5:08:C2:13:0F:C5:E4:B1:A9:9A:01:D8:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:71:b7:fd:1d:ec:e7:7d:41:e0:65:e9:02:d2:f5:57:82:ad: ee:ad:dc:d0:19:16:5e:d7:6b:0a:c1:55:d9:5c:d0:ce:58:24: de:4a:18:cb:12:57:ed:78:4f:a3:9c:2f:be:a7:7e:0b:2c:cf: eb:ad:19:3a:d4:e0:d4:b2:04:40:d4:8d:9f:8a:a3:5a:b1:01: e4:f6:74:6b:1a:04:d3:0e:77:a5:52:13:94:91:01:7e:9a:1f: 98:11:94:b7:44:66:54:a9:61:1e:f0:03:63:34:51:52:61:51: 24:a3:ee:9b:7c:18:f2:3b:b4:d9:45:77:9d:d2:d8:37:9c:b1: ed:ae:e4:9e:18:df:8c:7f:a5:d8:cc:8d:7e:a1:ce:ea:0c:95: 21:4b:52:16:51:a7:be:a6:79:55:17:fd:12:d7:3c:20:9e:a2: 2f:2b:9b:58:56:35:c2:c1:20:9e:68:ad:fa:dd:3c:59:29:51: 9f:5a:1b:d5:88:07:6d:69:c7:bc:31:2e:cd:79:04:52:22:4f: e9:ce:3a:bc:bd:30:7b:88:9d:08:ef:44:f4:e9:c8:1e:cb:8f: 9a:35:ed:dc:56:52:4c:64:78:80:2d:96:f5:55:91:9c:0b:b2: ff:60:b9:0a:07:79:19:db:1c:19:6a:06:4a:18:63:1c:89:6f: e1:13:61:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAmq6MYGxcq0a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk NjZlOTRkNjQtMWM2Zi00YjgwLWE1N2YtNzA4N2JkNTA3MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurTuzUsYAzAdKMPPM4mUJPWUNzfeecTF1pg9 3UUNkkDbUXrUdQ8UTy8VKsrpN2WdFjCkAbvKeIl/fldWIgQa93CL/EQ7IIKLHmVL 1Mbuuzd3VdvGJuFTBCR7P9NG2lw9h+Fo6NxbZBgWrfhy9Q1p7Zl7SiU2poJga+S6 XpRHxPyNmha4To2EJZvbPGaOS5KcBOy0fNdWH2sgA6wT2MTZRdAaIjFMW6iexBUm 6/e7jxIuKZiib2kjIieiNrvUM4M+LyI1/EwSZBiZbLJ/BR8wWxEyFWDGV8g6PGm+ 6vtBARJAixmikvB28anBx0RHPJrdZnNGX2yBCCGzfzLBXObfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2xzMJXtDC1CMITD8XksamaAdh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYWQzNTQ3N2EtN2IzMy0z YWJmLWE5N2YtNzViNWE4OTI3NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBxt/0d7Od9QeBl6QLS9VeCre6t3NAZFl7XawrBVdlc0M5YJN5KGMsS V+14T6OcL76nfgssz+utGTrU4NSyBEDUjZ+Ko1qxAeT2dGsaBNMOd6VSE5SRAX6a H5gRlLdEZlSpYR7wA2M0UVJhUSSj7pt8GPI7tNlFd53S2Decse2u5J4Y34x/pdjM jX6hzuoMlSFLUhZRp76meVUX/RLXPCCeoi8rm1hWNcLBIJ5orfrdPFkpUZ9aG9WI B21px7wxLs15BFIiT+nOOry9MHuInQjvRPTpyB7Lj5o17dxWUkxkeIAtlvVVkZwL sv9guQoHeRnbHBlqBkoYYxyJb+ETYaA= -----END CERTIFICATE-----Generated at Mon Jun 16 22:51:14 2025 by rpki-client