$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa File: 661fc493-e5f2-3843-b87f-cec243b8a026.roa (raw, json) Hash identifier: iUZKxjfBYhMmG+mJVhX44PCpnP4Oo5gd9aHaXB2aMRI= Subject key identifier: 6F:21:BD:27:21:FE:58:56:EB:86:FE:BF:2F:0B:9D:BD:03:6B:6B:8C Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD96E2E8667FBF69BA940 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:6e:2e:86:67:fb:f6:9b:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=17972d52-77cf-4049-9f9a-c061d2d8f189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:72:10:59:be:a9:bc:55:f3:c3:07:c7:30: fd:81:41:e8:38:a2:ba:e3:b8:fc:c7:01:0f:7a:1b: 1b:0a:20:af:f3:df:4b:b1:a9:e6:37:85:67:83:e6: 34:7e:bc:ae:af:18:f9:24:a7:1f:43:e6:5e:8f:34: 43:9f:12:c8:0a:70:d1:d3:2d:22:0b:cf:91:85:96: 90:7e:fc:a2:ce:02:25:77:23:de:43:5f:dc:4f:15: e9:11:81:66:de:af:e3:20:c0:c0:05:13:c3:ac:f7: 0b:ff:3f:78:c5:86:2d:61:92:b3:91:72:2b:bf:5d: 2f:f3:c6:d5:f9:67:b5:76:79:c8:14:00:35:45:38: 2e:f8:c7:a0:79:4c:62:d8:58:7e:f5:89:10:b8:fb: ec:d8:77:bb:cc:f7:f4:14:23:ac:2c:4c:ae:84:e2: e0:4e:b8:1f:24:d0:52:79:d6:d0:68:8b:35:d3:3a: a6:0a:e1:5b:fa:b9:b9:91:fd:04:17:30:b0:03:8c: a0:88:e8:9d:84:6c:ce:d0:1c:1e:82:b9:74:69:49: 74:3f:c1:ea:1f:69:fa:b2:13:3d:6f:70:09:d1:35: 9a:5b:10:1d:26:0f:3d:d5:00:1c:3f:f3:8a:8f:8a: 88:96:fa:9a:b3:35:6e:3f:57:e0:ce:2e:a8:ff:af: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:21:BD:27:21:FE:58:56:EB:86:FE:BF:2F:0B:9D:BD:03:6B:6B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/661fc493-e5f2-3843-b87f-cec243b8a026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:17:78:d8:6b:12:c6:19:97:0e:39:d9:45:bd:a0:bb:c5:3c: c8:36:2a:51:3d:e4:ef:4d:40:60:71:27:1d:1a:57:65:56:db: db:b2:f7:18:cc:73:a5:85:ab:b5:0f:59:2a:c6:60:c3:02:1a: 71:5d:03:08:4e:2a:24:1e:9a:45:e6:c7:01:7e:6f:6e:c7:42: 6d:cd:5a:ab:57:27:d3:10:40:eb:bb:b9:2f:0f:c2:76:c0:17: 12:d2:db:a7:18:c7:de:bb:72:9c:42:7d:88:6e:bc:75:f6:18: cb:d9:49:9f:9d:d7:46:c7:e6:1a:d9:00:fe:7e:f5:39:a4:f4: 14:cd:8b:58:76:d2:78:55:37:76:49:03:76:5d:db:ac:54:f1: e1:52:2a:c2:1d:19:16:1d:48:b2:d4:aa:40:6f:24:7a:3f:d0: 25:ff:e6:5f:b6:24:b0:0f:55:87:d4:6e:fb:ac:c7:da:76:c4: c5:59:ee:68:97:3d:a5:c5:f7:5a:07:29:34:ed:3e:5f:13:52: f4:01:25:f7:17:eb:21:36:f9:a9:f2:b0:77:92:ba:c7:d8:8e: cc:54:e4:3d:8b:06:b5:14:82:66:42:a9:99:5b:61:4d:08:0a: e9:5b:cf:42:79:96:2b:ed:24:cf:a1:c6:b6:6d:2f:f6:43:f4: 7a:1a:64:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369luLoZn+/abqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MTc5NzJkNTItNzdjZi00MDQ5LTlmOWEtYzA2MWQyZDhmMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPlyEFm+qbxV88MHxzD9gUHoOKK647j8xwEP ehsbCiCv899LsanmN4Vng+Y0fryurxj5JKcfQ+ZejzRDnxLICnDR0y0iC8+RhZaQ fvyizgIldyPeQ1/cTxXpEYFm3q/jIMDABRPDrPcL/z94xYYtYZKzkXIrv10v88bV +We1dnnIFAA1RTgu+MegeUxi2Fh+9YkQuPvs2He7zPf0FCOsLEyuhOLgTrgfJNBS edbQaIs10zqmCuFb+rm5kf0EFzCwA4ygiOidhGzO0Bwegrl0aUl0P8HqH2n6shM9 b3AJ0TWaWxAdJg891QAcP/OKj4qIlvqaszVuP1fgzi6o/69fuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8hvSch/lhW64b+vy8Lnb0Da2uMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNjYxZmM0OTMtZTVmMi0z ODQzLWI4N2YtY2VjMjQzYjhhMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIXeNhrEsYZlw452UW9oLvFPMg2KlE95O9NQGBxJx0aV2VW29uy9xjM c6WFq7UPWSrGYMMCGnFdAwhOKiQemkXmxwF+b27HQm3NWqtXJ9MQQOu7uS8PwnbA FxLS26cYx967cpxCfYhuvHX2GMvZSZ+d10bH5hrZAP5+9Tmk9BTNi1h20nhVN3ZJ A3Zd26xU8eFSKsIdGRYdSLLUqkBvJHo/0CX/5l+2JLAPVYfUbvusx9p2xMVZ7miX PaXF91oHKTTtPl8TUvQBJfcX6yE2+anysHeSusfYjsxU5D2LBrUUgmZCqZlbYU0I Culbz0J5livtJM+hxrZtL/ZD9HoaZBU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:08 2025 by rpki-client