$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa File: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (raw, json) Hash identifier: Te7X2+e7zYp7ZO19x/UP0JmNMM+RiDkIUmy6FhbZf6Q= Subject key identifier: EB:D5:5C:D5:84:A0:F7:81:7D:B8:E2:89:B8:72:1A:FC:63:5D:43:A0 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD99AA94C6993897D2D80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:9a:a9:4c:69:93:89:7d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=3b170907-3cf2-4512-aaac-119e87aae05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:f0:8b:ff:b6:d0:d1:a7:27:10:58:5a:19: 40:67:b8:37:8d:ac:d5:80:3b:ce:8b:6f:28:2c:f5: ea:5e:49:51:08:29:69:db:07:a4:e4:60:df:7b:7f: ba:d6:90:ab:08:4e:62:57:b9:09:15:62:80:46:86: 22:be:e5:39:54:59:77:52:83:88:d7:be:82:23:b0: 67:cb:a1:d9:a8:8b:db:7a:7b:59:8c:fa:7e:7e:66: 89:7b:90:9b:3b:71:81:ff:d3:c0:34:9a:2d:44:6b: 13:2e:80:83:05:31:83:2f:1d:4d:65:13:50:9c:f3: fb:79:1a:35:8d:15:6c:9d:68:d0:20:6b:6c:93:ce: b2:a6:82:02:a9:bb:27:82:6a:e9:1b:7d:b3:e4:3e: 31:62:ce:01:08:c6:bd:4f:5d:a7:c6:cd:2f:02:b1: 9e:10:70:6e:1f:2e:be:d7:2d:f1:39:b8:c8:ce:ab: 15:07:71:22:96:3c:c9:4f:2a:6d:ec:48:66:de:e2: 04:06:dc:45:ab:d2:fb:23:89:90:b9:55:ec:a8:8e: 39:5c:e2:da:c1:6b:5f:2b:06:b7:41:10:32:e4:78: 36:07:37:e8:d4:34:03:00:fb:3e:c1:51:c1:3d:e7: 4e:48:1e:0d:1f:ff:b0:51:f5:33:64:1c:c7:11:a1: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D5:5C:D5:84:A0:F7:81:7D:B8:E2:89:B8:72:1A:FC:63:5D:43:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:84:0c:14:e7:68:1c:21:40:30:70:00:64:6f:43:72:05:ee: 2f:4f:b8:2c:98:5b:43:08:fc:f3:15:54:a5:ae:25:b7:b4:e2: 45:35:39:b9:24:9f:29:5d:de:f2:4e:62:9e:9d:12:69:6e:1a: 2f:25:e0:1f:5f:53:42:c0:88:fd:7d:2a:f0:fa:b9:5e:69:44: ee:56:4c:21:93:53:7e:d4:7f:d9:0b:89:44:42:0f:d0:fb:54: 39:20:49:2a:4e:a9:13:a0:a6:0f:3c:d9:a6:7d:28:3f:4d:39: 4b:6a:08:d6:9b:97:01:97:3d:08:5d:90:44:f2:6b:75:57:9b: 73:ad:10:0c:a4:3d:b8:31:5e:9b:66:2e:3b:3f:c4:56:d0:71: da:fd:22:a1:04:f8:ce:83:2c:a9:60:81:39:b2:9b:29:63:7b: 4e:20:b0:d2:85:21:27:2b:0c:aa:73:86:db:ea:46:f0:ac:af: 6a:30:a1:1e:c0:60:8c:50:8c:93:69:de:1f:22:7e:34:47:1e: 4c:85:92:75:11:e6:1e:e0:f7:3b:f9:ca:41:58:5b:c6:1e:b4: 99:58:f6:ae:76:a6:17:f5:de:d2:11:6e:89:38:23:90:83:be: 87:1a:54:28:09:e2:2a:a0:ab:60:cb:11:88:8b:1e:67:bf:33: 45:d3:52:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369maqUxpk4l9LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk M2IxNzA5MDctM2NmMi00NTEyLWFhYWMtMTE5ZTg3YWFlMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV7wi/+20NGnJxBYWhlAZ7g3jazVgDvOi28o LPXqXklRCClp2wek5GDfe3+61pCrCE5iV7kJFWKARoYivuU5VFl3UoOI176CI7Bn y6HZqIvbentZjPp+fmaJe5CbO3GB/9PANJotRGsTLoCDBTGDLx1NZRNQnPP7eRo1 jRVsnWjQIGtsk86ypoICqbsngmrpG32z5D4xYs4BCMa9T12nxs0vArGeEHBuHy6+ 1y3xObjIzqsVB3EiljzJTypt7Ehm3uIEBtxFq9L7I4mQuVXsqI45XOLawWtfKwa3 QRAy5Hg2Bzfo1DQDAPs+wVHBPedOSB4NH/+wUfUzZBzHEaEOFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvVXNWEoPeBfbjiibhyGvxjXUOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMWJlODQ2OGEtZThlZC0z ZmRlLWE1MmItZGExY2UxMWY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKEDBTnaBwhQDBwAGRvQ3IF7i9PuCyYW0MI/PMVVKWuJbe04kU1Obkk nyld3vJOYp6dEmluGi8l4B9fU0LAiP19KvD6uV5pRO5WTCGTU37Uf9kLiURCD9D7 VDkgSSpOqROgpg882aZ9KD9NOUtqCNablwGXPQhdkETya3VXm3OtEAykPbgxXptm Ljs/xFbQcdr9IqEE+M6DLKlggTmymylje04gsNKFIScrDKpzhtvqRvCsr2owoR7A YIxQjJNp3h8ifjRHHkyFknUR5h7g9zv5ykFYW8YetJlY9q52phf13tIRbok4I5CD vocaVCgJ4iqgq2DLEYiLHme/M0XTUs0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:33 2025 by rpki-client