$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa File: 039241b2-b599-30f0-bcc6-07b9fed5d863.roa (raw, json) Hash identifier: Y1aEr9L3rfRvnETocLmRjUmS2AWKJacs1NjCcNvEO08= Subject key identifier: D0:C5:BE:D4:80:EC:45:B8:49:DE:5A:26:0C:EE:94:0C:31:1F:EA:D7 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD919A455CF6EFC75ED00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:19:a4:55:cf:6e:fc:75:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=c669f135-b12e-4355-961b-959fc820cefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:7f:f8:7b:05:be:63:b7:3e:da:c9:cc:da: d1:12:d2:3e:70:b8:7d:43:0e:9c:0c:67:8a:81:bc: c1:c6:86:61:2e:42:74:1a:36:3e:91:8d:a5:68:15: e1:96:5d:d7:19:26:bf:7d:f8:c2:21:96:ea:a3:59: cf:77:82:87:65:23:be:e2:53:7f:03:46:bb:1c:a0: 46:94:0a:22:b9:90:e2:8b:08:99:c1:93:53:cc:d3: 13:fd:a3:59:d8:5d:d5:26:6c:88:21:a0:7f:13:75: 6b:cf:dd:7d:bf:bb:60:11:e3:ee:e9:72:54:fe:2f: 06:5a:c2:47:0b:3b:e7:d2:0e:e8:ef:ac:44:93:84: b5:1b:5d:a4:0f:04:bb:de:30:c8:5c:4a:9f:5f:0d: af:3b:6a:94:c8:66:06:11:7d:c1:17:41:c8:a9:b2: 82:ea:2c:24:ee:f6:f0:cd:15:b5:b6:df:84:cf:09: 7d:bd:14:06:32:27:fa:da:eb:e8:45:01:32:37:4f: 33:c8:1a:14:eb:2e:7e:06:a0:cc:ff:56:fd:8a:8d: f3:60:49:63:a4:b3:55:15:89:92:1a:87:d0:85:17: b9:c5:01:ac:29:25:8d:bd:f7:c7:0e:08:26:eb:0c: e8:22:44:53:d9:fb:a1:e9:43:db:cc:7a:2e:ce:d0: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:BE:D4:80:EC:45:B8:49:DE:5A:26:0C:EE:94:0C:31:1F:EA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:66:12:db:7f:8a:ce:d2:bc:9d:58:95:ce:e5:c5:7c:38:cc: db:92:63:c5:12:67:b5:76:bc:6b:5d:e8:d3:fb:9a:d2:ac:f6: 47:2b:ad:5b:c1:8c:fa:7b:0f:5d:ce:19:9c:62:5d:d7:1e:c1: 2b:2f:16:78:e8:0c:b8:07:8e:55:6f:fa:95:aa:2f:f6:50:63: 68:1b:65:68:7b:f3:43:5b:36:5e:d0:3b:b5:b5:0e:9c:25:01: 55:6a:2e:b0:f9:82:f9:ce:32:94:21:ef:38:1a:af:39:1f:48: b6:74:b2:bf:0c:7f:43:60:c8:99:cf:92:b4:5f:09:9b:31:9b: 3b:2b:66:2b:c5:68:ab:af:9f:18:b8:52:7c:47:b7:86:d5:ad: 2b:bf:00:11:e6:78:e8:5b:a0:7f:8f:09:ca:0b:cc:5b:c1:04: 96:10:69:44:cb:8d:ab:9e:fa:43:e7:b7:d0:e9:12:1e:f0:58: 3f:33:19:33:9e:dc:99:ad:bd:12:64:ba:e6:5a:a8:38:8f:79: 64:7e:a0:d8:d9:dc:08:7a:8f:16:bd:e3:22:84:e8:58:1c:05: fa:59:c7:ba:c3:16:61:15:fb:1c:09:d7:44:f6:ea:a0:96:cd: 8f:16:79:08:d3:ac:f5:41:e6:22:0b:1c:1c:5d:f5:99:d3:bc: 9d:51:f0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369kZpFXPbvx17QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YzY2OWYxMzUtYjEyZS00MzU1LTk2MWItOTU5ZmM4MjBjZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8F/+HsFvmO3PtrJzNrREtI+cLh9Qw6cDGeK gbzBxoZhLkJ0GjY+kY2laBXhll3XGSa/ffjCIZbqo1nPd4KHZSO+4lN/A0a7HKBG lAoiuZDiiwiZwZNTzNMT/aNZ2F3VJmyIIaB/E3Vrz919v7tgEePu6XJU/i8GWsJH Czvn0g7o76xEk4S1G12kDwS73jDIXEqfXw2vO2qUyGYGEX3BF0HIqbKC6iwk7vbw zRW1tt+Ezwl9vRQGMif62uvoRQEyN08zyBoU6y5+BqDM/1b9io3zYEljpLNVFYmS GofQhRe5xQGsKSWNvffHDggm6wzoIkRT2fuh6UPbzHouztCf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDFvtSA7EW4Sd5aJgzulAwxH+rXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDM5MjQxYjItYjU5OS0z MGYwLWJjYzYtMDdiOWZlZDVkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNmEtt/is7SvJ1Ylc7lxXw4zNuSY8USZ7V2vGtd6NP7mtKs9kcrrVvB jPp7D13OGZxiXdcewSsvFnjoDLgHjlVv+pWqL/ZQY2gbZWh780NbNl7QO7W1Dpwl AVVqLrD5gvnOMpQh7zgarzkfSLZ0sr8Mf0NgyJnPkrRfCZsxmzsrZivFaKuvnxi4 UnxHt4bVrSu/ABHmeOhboH+PCcoLzFvBBJYQaUTLjaue+kPnt9DpEh7wWD8zGTOe 3JmtvRJkuuZaqDiPeWR+oNjZ3Ah6jxa94yKE6FgcBfpZx7rDFmEV+xwJ10T26qCW zY8WeQjTrPVB5iILHBxd9ZnTvJ1R8KU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:45 2025 by rpki-client