$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa File: 27938e9c-3192-3793-af30-042a052457c7.roa (raw, json) Hash identifier: FrC1O2vjV68+ylvGFdo/D92pn2KqHzQY4leGYx8wk0A= Subject key identifier: 7D:B6:CD:A3:6E:53:3B:04:94:7A:8A:F4:40:74:69:00:A0:EA:AA:C4 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD875E9AC9A626E0D4F80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d8:75:e9:ac:9a:62:6e:0d:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=793aea66-e6bf-474b-92b0-fba5e3fb8bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:91:ca:f7:54:7e:79:46:5d:c0:9d:c9:5d: c8:b4:2e:48:25:41:2e:39:f8:68:30:f1:02:9a:67: fe:39:20:92:65:05:5d:9a:f6:e6:e5:80:56:7a:5f: 67:a7:41:3e:06:fe:6d:d7:dc:08:cf:6f:3a:ce:f9: d0:4d:bb:78:e3:75:6f:16:4e:a7:74:57:95:08:74: dd:35:37:28:66:e2:a3:f8:64:f0:a0:ed:14:cf:28: 5d:39:e6:d9:50:d5:8c:24:eb:8a:e8:ab:a3:ee:c0: aa:4f:39:05:2c:45:b3:69:8a:5c:16:ea:da:5f:30: bc:9b:f6:98:1a:ec:8c:6e:56:d8:38:0e:f8:6d:17: b3:be:fa:fd:02:2a:ed:de:60:a9:71:b1:43:47:72: 09:57:7d:9e:cb:2b:fd:4d:ae:8b:be:89:6b:e6:bc: e9:e1:10:87:a9:07:8a:ea:3e:f0:9b:4b:2c:f9:72: e8:b7:ee:7b:0c:02:c4:67:3c:54:8f:07:2f:c0:5e: 7e:9b:04:26:a1:64:47:ab:af:e3:bc:89:9e:5b:6c: 03:6d:50:97:8f:1b:a6:6a:02:f2:bd:29:41:5b:a7: 7d:10:ff:27:f4:b2:c2:7c:e8:2b:a8:ca:fe:6a:cf: fe:08:ef:c6:48:ee:b2:05:db:a2:9a:5e:07:d6:d8: 66:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:CD:A3:6E:53:3B:04:94:7A:8A:F4:40:74:69:00:A0:EA:AA:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/27938e9c-3192-3793-af30-042a052457c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5b:f7:50:06:d5:03:2d:44:3c:ba:82:bf:cb:a1:d5:1b:13: 5c:34:69:04:f5:3e:68:05:b5:49:d4:e1:4a:37:11:ae:32:8d: 97:a4:df:11:86:0f:d5:e4:3f:fc:64:da:73:09:a5:0a:1a:df: 5a:47:d8:5a:d4:73:fd:97:1a:77:f7:f1:3e:3a:d5:67:76:0d: de:ce:90:d7:84:10:60:f4:5c:30:66:11:f9:5b:d7:50:b5:f0: ae:fd:4b:bf:55:d3:24:78:16:7b:ce:69:ad:7b:e5:8d:b5:18: 69:21:77:76:65:c2:09:a1:ca:2e:4a:46:ef:4b:de:f9:01:70: 35:2b:9a:f9:f8:90:22:99:53:f7:67:ae:92:bb:7e:eb:f7:f3: 10:48:53:64:2c:1a:c8:06:00:b3:eb:8f:21:24:65:66:5b:ea: 92:f9:fc:c9:94:f4:6b:1a:8c:88:e8:e7:d1:88:4d:e2:2e:f0: 74:21:5e:08:e7:e6:e2:b7:96:5e:c4:bc:6b:dc:69:0c:7c:f2: 91:97:50:10:ec:27:1f:16:4b:d4:ab:dd:ef:3e:43:1f:b8:b4: d4:20:e2:e1:c5:d7:74:e6:b9:10:d9:8a:b4:6e:a1:89:21:7b: 54:3f:b1:ec:6d:2b:8e:c0:24:85:43:f0:38:e6:6c:bf:d9:21: 9d:ed:c4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369h16ayaYm4NT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NzkzYWVhNjYtZTZiZi00NzRiLTkyYjAtZmJhNWUzZmI4YmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDeRyvdUfnlGXcCdyV3ItC5IJUEuOfhoMPEC mmf+OSCSZQVdmvbm5YBWel9np0E+Bv5t19wIz286zvnQTbt443VvFk6ndFeVCHTd NTcoZuKj+GTwoO0UzyhdOebZUNWMJOuK6Kuj7sCqTzkFLEWzaYpcFuraXzC8m/aY GuyMblbYOA74bRezvvr9Airt3mCpcbFDR3IJV32eyyv9Ta6Lvolr5rzp4RCHqQeK 6j7wm0ss+XLot+57DALEZzxUjwcvwF5+mwQmoWRHq6/jvImeW2wDbVCXjxumagLy vSlBW6d9EP8n9LLCfOgrqMr+as/+CO/GSO6yBduiml4H1thmgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH22zaNuUzsElHqK9EB0aQCg6qrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjc5MzhlOWMtMzE5Mi0z NzkzLWFmMzAtMDQyYTA1MjQ1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZb91AG1QMtRDy6gr/LodUbE1w0aQT1PmgFtUnU4Uo3Ea4yjZek3xGG D9XkP/xk2nMJpQoa31pH2FrUc/2XGnf38T461Wd2Dd7OkNeEEGD0XDBmEflb11C1 8K79S79V0yR4FnvOaa175Y21GGkhd3Zlwgmhyi5KRu9L3vkBcDUrmvn4kCKZU/dn rpK7fuv38xBIU2QsGsgGALPrjyEkZWZb6pL5/MmU9GsajIjo59GITeIu8HQhXgjn 5uK3ll7EvGvcaQx88pGXUBDsJx8WS9Sr3e8+Qx+4tNQg4uHF13TmuRDZirRuoYkh e1Q/sextK47AJIVD8DjmbL/ZIZ3txOE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:06 2025 by rpki-client