$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: amCAql1G9wt0SOVnu38HxDEHG7fT09wUM1cmRBeRQGk= Subject key identifier: 48:93:9A:8C:7D:98:4D:BB:62:C7:AC:FB:63:BE:41:69:BA:29:B8:F6 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300950669CEEEF894A7D00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:50:66:9c:ee:ef:89:4a:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=30e92ad3-cb48-4000-b54d-39dd65b366cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:12:c7:d1:f8:3c:51:e3:7d:1a:03:ce:4c: 2c:67:7d:1f:6b:92:7d:8e:24:49:56:95:31:df:2f: 15:1c:86:ea:83:48:0d:3b:5a:b1:cd:95:3a:53:3d: 11:84:6a:c5:f7:ba:4b:5c:c3:10:0c:32:98:43:2b: 3e:00:92:cd:82:33:79:6f:21:13:55:4c:90:77:92: 3f:f1:51:49:a5:53:e9:92:76:f2:ea:f1:68:f6:b9: ec:3b:ea:8e:a3:51:09:76:b7:f2:3d:f2:dd:61:84: b7:8b:3c:01:cd:88:ba:16:11:45:a4:af:00:24:3b: 12:27:4c:e6:04:c7:68:05:a6:9d:74:4f:f3:1c:09: fd:f5:76:51:a3:5a:6a:9a:87:fc:03:a6:69:3c:3b: 5d:18:cf:f2:23:0a:85:ee:98:fc:dc:76:94:f4:d9: 27:f3:7e:56:1d:df:c1:02:3b:8e:91:50:88:e4:19: f3:bc:36:27:e0:2c:d7:8c:89:fa:3e:f7:98:16:d2: 16:e5:bc:db:63:66:f9:0b:a1:c0:c7:2f:51:51:28: 60:d7:3c:ac:8e:17:6d:13:3c:8d:ba:29:df:1c:c5: 3b:12:a7:d5:8a:2c:76:ed:f0:15:6f:b2:0e:fc:44: 82:83:18:2f:13:4d:1d:44:a7:1e:84:29:7a:86:fc: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:9A:8C:7D:98:4D:BB:62:C7:AC:FB:63:BE:41:69:BA:29:B8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:84:50:0e:28:e6:a2:25:bf:3a:23:09:70:b6:09:ae:67:63: 33:e5:17:98:4f:f9:88:cf:6d:35:82:24:b0:32:95:71:ad:46: ea:ee:2b:68:79:5b:8c:c3:d0:da:54:85:a6:26:5e:3c:0e:72: 99:c3:6b:c7:8e:d0:dd:dd:03:04:39:06:a4:ca:09:2d:25:66: 6e:75:14:29:c2:23:3e:78:eb:70:5b:52:25:18:0f:76:34:64: 73:bb:93:c8:7f:82:ca:74:e7:d5:de:53:a9:a9:68:30:04:83: b2:cc:31:e5:23:47:8e:c1:f0:f6:21:22:37:5f:04:cf:ad:96: 4b:58:e5:49:08:22:f7:62:7c:c6:51:a4:a1:9e:43:c4:78:8b: b3:dc:be:f7:82:5e:c5:94:ad:2f:de:37:3a:9d:58:ba:11:e1: 4c:05:4f:3c:67:63:da:dc:eb:e4:b0:e7:fa:46:a9:0d:d4:71: d6:c9:1a:e6:46:12:a1:02:ab:f1:7b:9d:e0:bb:10:1f:ef:36: db:55:cf:33:19:27:b1:6a:6e:90:df:df:f6:75:42:94:9e:c7: f0:ba:97:60:98:8a:c9:52:e8:33:57:09:f9:bb:96:c8:f3:2e: a0:05:d4:cb:c0:eb:5a:38:5d:3a:1f:0c:a7:88:c0:78:3c:85: c0:a1:d5:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAlQZpzu74lKfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MzBlOTJhZDMtY2I0OC00MDAwLWI1NGQtMzlkZDY1YjM2NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuQSx9H4PFHjfRoDzkwsZ30fa5J9jiRJVpUx 3y8VHIbqg0gNO1qxzZU6Uz0RhGrF97pLXMMQDDKYQys+AJLNgjN5byETVUyQd5I/ 8VFJpVPpknby6vFo9rnsO+qOo1EJdrfyPfLdYYS3izwBzYi6FhFFpK8AJDsSJ0zm BMdoBaaddE/zHAn99XZRo1pqmof8A6ZpPDtdGM/yIwqF7pj83HaU9Nkn835WHd/B AjuOkVCI5BnzvDYn4CzXjIn6PveYFtIW5bzbY2b5C6HAxy9RUShg1zysjhdtEzyN uinfHMU7EqfViix27fAVb7IO/ESCgxgvE00dRKcehCl6hvyO3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiTmox9mE27Yses+2O+QWm6Kbj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuEUA4o5qIlvzojCXC2Ca5nYzPlF5hP+YjPbTWCJLAylXGtRuruK2h5 W4zD0NpUhaYmXjwOcpnDa8eO0N3dAwQ5BqTKCS0lZm51FCnCIz5463BbUiUYD3Y0 ZHO7k8h/gsp059XeU6mpaDAEg7LMMeUjR47B8PYhIjdfBM+tlktY5UkIIvdifMZR pKGeQ8R4i7PcvveCXsWUrS/eNzqdWLoR4UwFTzxnY9rc6+Sw5/pGqQ3UcdbJGuZG EqECq/F7neC7EB/vNttVzzMZJ7FqbpDf3/Z1QpSex/C6l2CYislS6DNXCfm7lsjz LqAF1MvA61o4XTofDKeIwHg8hcCh1ck= -----END CERTIFICATE-----Generated at Mon Jun 16 23:05:35 2025 by rpki-client