$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa File: 43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa (raw, json) Hash identifier: jA4m9VPa81oUQO4+GM5OsVXlWqrVEk1ijajDmHIBV/I= Subject key identifier: FC:73:3D:81:94:C2:B2:4B:A0:29:D8:41:D1:98:70:86:1B:49:66:5E Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD860C03AB2794B6C90C0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d8:60:c0:3a:b2:79:4b:6c:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=9d820bd4-2078-41ac-95ec-184e2721210c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:eb:07:ce:19:b7:5f:14:57:49:40:aa:ac: 3f:0e:d9:06:50:3f:5b:87:b3:94:86:a3:8e:4d:90: 9a:69:ab:14:2d:02:f0:2c:33:47:24:84:34:b4:47: fe:af:dc:ed:9c:fa:29:8e:41:09:30:42:ea:99:f8: e2:74:10:95:93:7e:e9:3e:31:fe:e1:9f:50:b9:5f: e0:5e:b6:02:3e:31:3d:22:a4:bf:c0:cf:7c:7a:c2: ea:09:eb:5a:43:fb:e7:f7:f9:30:74:2b:0a:ed:86: 58:24:98:37:4e:ba:61:a0:c8:f9:5a:9c:86:3c:14: 38:f9:ea:7a:b7:b8:ae:cd:e0:05:e3:ce:6d:ab:00: 5e:1f:84:06:cd:4e:7d:5b:ec:f0:91:3e:07:63:02: 7d:3d:d8:11:73:44:0a:6d:64:05:cf:28:71:6b:5f: b2:c2:99:e0:98:a6:44:40:17:72:b1:ee:c7:36:a1: 7b:62:1e:37:59:57:5b:2a:a7:8e:d4:1c:9c:7a:37: 89:fc:65:4e:bd:8c:9e:0c:6d:7b:8f:ea:01:4f:16: 89:51:57:37:47:19:d7:18:14:5c:18:49:88:2b:15: ca:31:5d:a8:1b:5c:5e:e0:a8:90:70:af:43:a0:b3: ff:a6:a4:2b:db:bb:c6:56:0d:9c:a2:5d:1b:ad:2d: 47:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:73:3D:81:94:C2:B2:4B:A0:29:D8:41:D1:98:70:86:1B:49:66:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4d:6c:42:b9:1f:f3:48:11:56:cf:ad:94:ff:8c:b8:3c:16: 8c:b5:46:36:b9:df:1e:64:2a:25:9b:42:79:2b:6c:90:d3:04: 4e:44:39:91:c1:a6:25:a6:2e:13:1e:95:20:0e:25:d6:11:81: a3:eb:98:d5:db:d8:df:04:cd:dc:b4:0b:fd:ab:e8:1d:f1:4b: 2a:12:84:84:db:fc:70:59:72:1b:f2:0f:7f:6c:bd:86:f3:2b: fa:e5:8f:77:75:09:4a:79:c0:dd:13:c3:f2:b9:31:6f:1e:aa: 50:38:d3:2b:f3:95:0f:52:e1:36:e2:06:a5:21:2b:67:5f:7a: 9e:32:98:e3:2c:d4:41:79:17:1f:4e:d3:d9:71:6f:c6:e4:be: 03:f2:08:be:3b:3f:31:58:e1:25:da:6e:60:10:de:cd:6d:40: 42:e8:de:c6:0c:fe:60:bc:a1:cf:14:6d:c1:0b:e4:79:0d:2f: 67:4a:7d:bb:2a:a2:6f:3b:c2:b1:3b:d0:ea:b4:9f:2c:de:82: 05:81:24:c9:68:9f:1d:50:85:e0:97:9b:fd:5e:9a:0a:c1:fc: 6f:63:06:a8:6c:97:68:61:b5:1e:c1:f7:3f:4b:0e:9d:a4:c4: 96:7e:76:d0:ad:75:8f:f9:55:c7:84:06:5b:5a:ad:de:32:37: 2b:99:98:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369hgwDqyeUtskMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk OWQ4MjBiZDQtMjA3OC00MWFjLTk1ZWMtMTg0ZTI3MjEyMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusLrB84Zt18UV0lAqqw/DtkGUD9bh7OUhqOO TZCaaasULQLwLDNHJIQ0tEf+r9ztnPopjkEJMELqmfjidBCVk37pPjH+4Z9QuV/g XrYCPjE9IqS/wM98esLqCetaQ/vn9/kwdCsK7YZYJJg3TrphoMj5WpyGPBQ4+ep6 t7iuzeAF485tqwBeH4QGzU59W+zwkT4HYwJ9PdgRc0QKbWQFzyhxa1+ywpngmKZE QBdyse7HNqF7Yh43WVdbKqeO1BycejeJ/GVOvYyeDG17j+oBTxaJUVc3RxnXGBRc GEmIKxXKMV2oG1xe4KiQcK9DoLP/pqQr27vGVg2col0brS1H9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxzPYGUwrJLoCnYQdGYcIYbSWZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNDNmZWExYjgtMGM5Yy0z NzZjLWFmNWMtODNmNWIzYjY4NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVNbEK5H/NIEVbPrZT/jLg8Foy1Rja53x5kKiWbQnkrbJDTBE5EOZHB piWmLhMelSAOJdYRgaPrmNXb2N8Ezdy0C/2r6B3xSyoShITb/HBZchvyD39svYbz K/rlj3d1CUp5wN0Tw/K5MW8eqlA40yvzlQ9S4TbiBqUhK2dfep4ymOMs1EF5Fx9O 09lxb8bkvgPyCL47PzFY4SXabmAQ3s1tQELo3sYM/mC8oc8UbcEL5HkNL2dKfbsq om87wrE70Oq0nyzeggWBJMlonx1QheCXm/1emgrB/G9jBqhsl2hhtR7B9z9LDp2k xJZ+dtCtdY/5VceEBltard4yNyuZmGE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:42 2025 by rpki-client