$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa File: d1206389-b9de-36cd-8068-be081e3c00dd.roa (raw, json) Hash identifier: nS7I1/ll5zDABsFy2pIjL2+HSOENNKUz4R7oPGdK5/E= Subject key identifier: FA:85:24:BB:4F:E8:B2:34:97:65:DD:C9:CF:5F:8B:7D:AB:73:56:82 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A1730093D6B48B28E03F07B80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:09:3d:6b:48:b2:8e:03:f0:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=992368a7-2fc3-4fe8-bb09-9fbfde295676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:b1:10:1b:97:a9:75:eb:59:ad:04:ef:1f: f2:72:87:ed:5d:0d:6a:19:6e:87:77:b6:72:1f:0c: 53:df:69:d3:f6:8a:a6:2d:f2:7b:04:0e:3c:6a:7f: 77:e0:43:b2:28:10:dd:3e:16:d8:c1:16:85:1f:63: 70:c6:11:70:df:74:2c:42:12:2d:b3:70:ed:fc:3f: 38:e7:12:1d:25:2f:27:fc:f9:92:4c:36:42:5a:bb: ff:02:29:73:84:5d:db:16:ed:9b:1e:ad:d2:ea:95: c7:12:86:ec:9a:cb:be:5f:af:e9:62:fd:42:37:aa: f7:de:6a:e9:2b:76:4e:13:7b:db:35:7d:d2:dc:6b: ec:3e:22:f0:6a:a3:58:97:d0:33:90:84:44:49:cd: 08:47:d4:1d:b2:db:51:46:16:99:cc:5c:fd:43:6d: ed:02:6f:85:e9:e4:54:69:2f:bf:e3:01:aa:f6:37: 07:16:24:51:44:a3:c3:fb:37:19:2d:c6:a6:05:ba: 0d:20:c6:ea:99:d0:b2:c1:38:06:d1:8f:8d:4a:e5: 0e:60:b3:6e:19:71:36:39:63:0e:1f:01:dc:80:45: 3f:62:26:47:24:35:98:2e:6d:2b:08:68:2b:10:01: 9c:8f:0b:6e:76:a5:bd:17:5b:0f:17:20:c8:02:2f: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:24:BB:4F:E8:B2:34:97:65:DD:C9:CF:5F:8B:7D:AB:73:56:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:15:cc:e2:b8:1a:b0:73:1d:31:4a:c2:1f:41:66:57:7a:4f: a7:82:01:da:b5:e8:d2:ec:6b:a3:1b:f5:84:86:c4:dd:76:96: d5:61:85:d1:aa:3b:a2:f2:f1:e1:e4:f2:d5:83:c6:95:6a:24: 93:c8:ac:68:b0:f3:53:1c:79:2c:1c:83:40:16:59:35:bf:5a: bc:d4:51:42:8d:57:d0:7f:28:31:48:4a:aa:69:10:c8:c5:da: 16:fe:fe:7a:d7:76:70:66:7e:2b:a9:e1:cd:92:d4:07:19:ad: c9:8d:c6:d6:e8:23:ea:94:32:38:f4:2a:3a:2b:6c:e5:a6:31: 08:1c:40:e6:75:94:e5:1e:b5:71:e2:e6:de:57:96:7e:39:00: 8e:ec:fb:fe:11:50:cd:01:03:dd:35:5b:08:6f:50:0b:c6:c0: 12:2b:3a:02:d0:1f:83:06:39:64:37:16:77:fd:b9:0b:53:85: d8:30:69:32:ab:f8:ea:5b:01:95:07:ae:b3:98:05:2e:f6:2b: f2:41:aa:58:21:31:b1:c1:31:fa:44:6a:53:5d:f3:db:45:8e: 15:4c:31:41:5c:b8:21:1c:d0:f2:4b:ec:25:80:69:97:82:61: 53:45:1e:7d:4d:1b:7b:a5:31:cd:3e:82:12:cc:99:3d:b9:d4: da:3e:70:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAk9a0iyjgPwe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk OTkyMzY4YTctMmZjMy00ZmU4LWJiMDktOWZiZmRlMjk1Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPOxEBuXqXXrWa0E7x/ycoftXQ1qGW6Hd7Zy HwxT32nT9oqmLfJ7BA48an934EOyKBDdPhbYwRaFH2NwxhFw33QsQhIts3Dt/D84 5xIdJS8n/PmSTDZCWrv/AilzhF3bFu2bHq3S6pXHEobsmsu+X6/pYv1CN6r33mrp K3ZOE3vbNX3S3GvsPiLwaqNYl9AzkIRESc0IR9QdsttRRhaZzFz9Q23tAm+F6eRU aS+/4wGq9jcHFiRRRKPD+zcZLcamBboNIMbqmdCywTgG0Y+NSuUOYLNuGXE2OWMO HwHcgEU/YiZHJDWYLm0rCGgrEAGcjwtudqW9F1sPFyDIAi9rHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqFJLtP6LI0l2Xdyc9fi32rc1aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDEyMDYzODktYjlkZS0z NmNkLTgwNjgtYmUwODFlM2MwMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsVzOK4GrBzHTFKwh9BZld6T6eCAdq16NLsa6Mb9YSGxN12ltVhhdGq O6Ly8eHk8tWDxpVqJJPIrGiw81MceSwcg0AWWTW/WrzUUUKNV9B/KDFISqppEMjF 2hb+/nrXdnBmfiup4c2S1AcZrcmNxtboI+qUMjj0KjorbOWmMQgcQOZ1lOUetXHi 5t5Xln45AI7s+/4RUM0BA901WwhvUAvGwBIrOgLQH4MGOWQ3Fnf9uQtThdgwaTKr +OpbAZUHrrOYBS72K/JBqlghMbHBMfpEalNd89tFjhVMMUFcuCEc0PJL7CWAaZeC YVNFHn1NG3ulMc0+ghLMmT251No+cIM= -----END CERTIFICATE-----Generated at Tue Jun 17 00:49:53 2025 by rpki-client