$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa File: d1206389-b9de-36cd-8068-be081e3c00dd.roa (raw, json) Hash identifier: Af8y/pjoIHy7wvf/8LnL2iSDcKIuZXNvNgpMSvAaspg= Subject key identifier: 3F:1D:17:40:BD:01:CC:57:EF:28:B0:A2:CB:29:41:D8:41:1D:69:D8 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD8D0726EA1F338AA2480 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d8:d0:72:6e:a1:f3:38:aa:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=191b8032-dfff-4b32-aef4-f6998e34a570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:29:d3:ec:29:6d:98:d9:b7:52:91:71:df: a0:5d:66:97:f7:2d:bb:d2:c6:a3:95:97:38:61:fb: 05:fb:db:e5:19:55:55:1c:d6:c7:3c:43:7a:09:06: 27:de:17:68:e9:60:43:b6:f8:e3:f5:27:5f:b6:e5: fe:ae:8c:42:a0:c4:78:89:91:c1:c6:ef:23:bb:60: 4d:cf:e7:87:2c:db:55:a5:40:f8:32:ca:ad:d5:0f: 98:01:33:7f:3e:32:ad:b2:6a:2d:98:13:7b:96:b0: b7:f5:44:58:5b:f2:ca:95:ff:10:ed:02:25:78:ec: 0a:68:ab:d2:40:a5:c1:8d:0e:8b:2b:16:20:a3:31: 08:e4:cc:64:56:59:7b:f3:56:d4:46:38:fa:fb:ec: 2b:21:ed:32:af:a1:e6:e9:41:a7:7e:cb:e8:34:d6: eb:92:35:5f:d6:32:90:a5:16:6d:b3:72:44:19:2d: ed:61:50:09:b3:87:0d:ba:e1:78:36:ce:5d:48:76: 88:d6:8e:67:65:1e:47:3c:df:8a:dd:09:b6:9a:32: cc:5f:6a:ab:cb:20:ed:2a:de:7e:6d:de:48:5d:f8: 72:7d:c0:f3:cd:2f:6b:60:55:cf:0a:65:db:90:f4: 28:08:37:f6:88:93:a1:3f:32:9e:30:76:7d:d2:ae: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1D:17:40:BD:01:CC:57:EF:28:B0:A2:CB:29:41:D8:41:1D:69:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d4:ab:14:5a:77:7c:48:7d:a3:8b:b8:5c:80:c9:59:10:53: b3:0f:d3:6b:56:c3:0d:17:ef:f7:e6:63:24:da:1e:74:a8:6a: 21:5b:ae:33:7e:5b:e5:68:b3:0b:eb:0d:5f:65:0d:c3:90:3e: e5:05:01:05:e8:b3:23:f4:f3:71:b7:68:7c:12:71:00:49:72: bd:91:12:ac:c0:9b:6d:dc:42:d8:33:a4:a9:6b:d6:16:20:68: 3a:33:fb:f6:69:88:90:b1:9c:db:f1:b1:ed:93:6b:2b:91:f7: 61:b6:d9:c9:95:cc:e4:d5:b2:42:fe:49:c7:eb:7d:5d:34:a0: 69:25:c3:a4:83:02:56:3a:be:05:50:83:45:13:08:19:25:8a: b5:d7:28:4c:bc:ea:7d:6b:9c:3d:23:91:16:3d:91:89:86:55: ea:f3:0d:c7:64:a6:68:f2:63:2e:ff:81:02:86:1e:a7:d8:79: 4c:9f:a6:90:40:86:2a:6d:09:4c:a4:c0:51:ce:a1:b5:d1:8b: 87:15:c5:ad:83:db:4a:7e:53:3d:6c:fb:e2:81:80:b2:60:35: a2:b9:39:a1:2a:42:0d:30:3d:e6:7a:2b:06:60:f7:e2:52:7e: c0:98:c3:b5:5f:f2:75:a5:f6:f7:cb:65:88:3f:6b:57:b1:d3: dd:2d:c3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369jQcm6h8ziqJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MTkxYjgwMzItZGZmZi00YjMyLWFlZjQtZjY5OThlMzRhNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbop0+wpbZjZt1KRcd+gXWaX9y270sajlZc4 YfsF+9vlGVVVHNbHPEN6CQYn3hdo6WBDtvjj9SdftuX+roxCoMR4iZHBxu8ju2BN z+eHLNtVpUD4Msqt1Q+YATN/PjKtsmotmBN7lrC39URYW/LKlf8Q7QIleOwKaKvS QKXBjQ6LKxYgozEI5MxkVll781bURjj6++wrIe0yr6Hm6UGnfsvoNNbrkjVf1jKQ pRZts3JEGS3tYVAJs4cNuuF4Ns5dSHaI1o5nZR5HPN+K3Qm2mjLMX2qryyDtKt5+ bd5IXfhyfcDzzS9rYFXPCmXbkPQoCDf2iJOhPzKeMHZ90q7+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8dF0C9AcxX7yiwosspQdhBHWnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDEyMDYzODktYjlkZS0z NmNkLTgwNjgtYmUwODFlM2MwMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXUqxRad3xIfaOLuFyAyVkQU7MP02tWww0X7/fmYyTaHnSoaiFbrjN+ W+VoswvrDV9lDcOQPuUFAQXosyP083G3aHwScQBJcr2REqzAm23cQtgzpKlr1hYg aDoz+/ZpiJCxnNvxse2TayuR92G22cmVzOTVskL+ScfrfV00oGklw6SDAlY6vgVQ g0UTCBklirXXKEy86n1rnD0jkRY9kYmGVerzDcdkpmjyYy7/gQKGHqfYeUyfppBA hiptCUykwFHOobXRi4cVxa2D20p+Uz1s++KBgLJgNaK5OaEqQg0wPeZ6KwZg9+JS fsCYw7Vf8nWl9vfLZYg/a1ex090tw24= -----END CERTIFICATE-----Generated at Wed Nov 5 18:37:29 2025 by rpki-client