$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa File: ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json) Hash identifier: STR6O8B0rtPTEFPeA5Xgp3r5U32W5eJAvnpwVuI4duY= Subject key identifier: 3F:EB:89:B9:41:B2:70:FA:1A:4C:73:79:4B:E7:0B:0F:27:C7:E9:62 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD9587A533C38429F4C40 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:58:7a:53:3c:38:42:9f:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=f28188bb-a1ae-4445-bae8-7a389787caf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:f2:ec:93:77:7f:a0:7b:76:ad:0b:a4:81: e2:f5:a6:38:e0:a3:68:c7:49:7e:14:a0:db:33:38: d7:2c:c4:1c:0a:06:50:55:e8:11:dd:e5:90:a2:8b: 0e:b4:46:82:e5:f8:a7:4e:41:19:b0:19:ed:b9:93: 05:6e:2d:be:ef:bd:ed:37:c8:cb:4f:30:52:29:79: 0c:b2:68:f9:98:bb:94:ae:82:75:36:2d:10:97:3c: 72:d8:c5:4e:82:28:32:4d:0c:47:b2:be:22:44:bd: c5:ac:18:a2:2d:13:80:41:82:f6:54:ef:15:07:69: 68:ec:a0:a1:a6:41:ed:49:49:4c:07:61:64:11:d2: d2:b5:da:b5:c4:2d:b7:10:12:db:75:a0:e9:82:e0: b6:45:4d:5b:27:a0:41:40:ad:32:57:41:73:25:72: 43:60:fb:30:31:5c:65:82:1c:08:0c:6d:50:cf:b7: f5:23:da:a2:23:34:96:cc:25:1b:24:dc:7b:0c:f2: b8:e2:da:ad:13:5f:e7:95:21:c2:dc:02:60:aa:d6: a3:84:2e:72:0b:5f:ba:15:cd:7b:8b:17:12:a0:fd: 0a:d7:e7:04:30:70:46:a1:a2:68:23:92:4e:09:ec: 61:f7:52:80:0c:41:aa:21:2d:50:a1:cd:fd:d0:2b: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:89:B9:41:B2:70:FA:1A:4C:73:79:4B:E7:0B:0F:27:C7:E9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:51:15:22:f2:a2:d0:f0:fa:6f:49:79:d0:ae:fe:52:bb:69: b9:95:e5:c0:30:90:ec:17:65:93:bd:b9:75:3a:4c:01:39:41: 46:ca:c7:2e:b3:10:2c:63:43:91:96:ab:47:64:08:92:7a:63: 7b:fa:6e:f6:9b:e8:4c:02:a9:67:83:56:45:0b:a0:40:03:60: 61:74:15:e6:b8:78:d9:f0:2a:1e:b2:8e:50:fb:1b:44:cb:4a: 29:19:aa:b3:b6:7d:c7:d4:cd:c4:de:66:42:5b:d8:a5:e7:fe: 53:0b:0f:51:ee:28:ad:3e:ac:86:c6:74:e5:30:41:ce:05:12: d3:1d:67:12:a9:53:44:4c:72:1a:67:f5:2d:1a:d3:79:b3:a2: ca:cb:9d:69:06:64:a3:f6:57:3b:a4:11:b8:b0:c1:46:a0:87: 82:df:dd:ef:2d:49:9d:c4:ea:88:2b:a0:4e:74:19:be:a2:44: 96:3d:91:41:a0:c7:e1:b9:7b:19:d0:50:73:e0:d8:5e:e2:f9: 0c:9d:4c:f3:d4:3e:78:48:b4:ef:7c:9b:2b:67:30:9b:8d:2e: 41:c6:30:eb:9e:19:ed:ee:b6:fe:22:b3:eb:70:73:97:6f:89: ec:0e:a8:ba:8f:72:f0:2e:15:f8:43:59:de:f9:ed:9d:9b:74: b6:a4:bb:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369lYelM8OEKfTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjI4MTg4YmItYTFhZS00NDQ1LWJhZTgtN2EzODk3ODdjYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S3y7JN3f6B7dq0LpIHi9aY44KNox0l+FKDb MzjXLMQcCgZQVegR3eWQoosOtEaC5finTkEZsBntuZMFbi2+773tN8jLTzBSKXkM smj5mLuUroJ1Ni0Qlzxy2MVOgigyTQxHsr4iRL3FrBiiLROAQYL2VO8VB2lo7KCh pkHtSUlMB2FkEdLStdq1xC23EBLbdaDpguC2RU1bJ6BBQK0yV0FzJXJDYPswMVxl ghwIDG1Qz7f1I9qiIzSWzCUbJNx7DPK44tqtE1/nlSHC3AJgqtajhC5yC1+6Fc17 ixcSoP0K1+cEMHBGoaJoI5JOCexh91KADEGqIS1Qoc390CsH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/riblBsnD6GkxzeUvnCw8nx+liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYWQzNTQ3N2EtN2IzMy0z YWJmLWE5N2YtNzViNWE4OTI3NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVRFSLyotDw+m9JedCu/lK7abmV5cAwkOwXZZO9uXU6TAE5QUbKxy6z ECxjQ5GWq0dkCJJ6Y3v6bvab6EwCqWeDVkULoEADYGF0Fea4eNnwKh6yjlD7G0TL SikZqrO2fcfUzcTeZkJb2KXn/lMLD1HuKK0+rIbGdOUwQc4FEtMdZxKpU0RMchpn 9S0a03mzosrLnWkGZKP2VzukEbiwwUagh4Lf3e8tSZ3E6ogroE50Gb6iRJY9kUGg x+G5exnQUHPg2F7i+QydTPPUPnhItO98mytnMJuNLkHGMOueGe3utv4is+twc5dv iewOqLqPcvAuFfhDWd757Z2bdLakuxA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:14:58 2025 by rpki-client