$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa File: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (raw, json) Hash identifier: KGJvUuWEuCrXCOqS41myErObXLsFQ8fKd8r8G6El5Bo= Subject key identifier: 7A:06:25:21:9C:3C:37:13:34:3A:EF:AC:CC:D6:B5:96:DF:33:1E:0F Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD9C3DABDA9867CE77C80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d9:c3:da:bd:a9:86:7c:e7:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=eb3f5197-73bf-4931-b78d-79829be36da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:ab:8f:59:cf:51:fe:82:69:9b:9a:5f:6d: a4:c1:a1:4e:f9:8a:8b:9a:16:fb:59:2b:40:d0:ee: 5d:d7:4e:15:73:d8:5c:a5:e1:6c:ea:76:21:4c:d1: 42:60:d9:54:54:c7:ef:03:86:2d:3e:54:e0:00:27: 09:1b:e4:e9:d8:09:78:84:bb:6b:03:62:0c:32:85: 99:61:00:46:8a:40:c8:71:d8:cb:c4:3f:98:1e:de: e1:2b:91:74:d7:63:59:93:69:a0:51:c0:f7:8d:04: df:f9:6d:51:64:e8:c1:c6:19:3e:5c:8a:d5:90:ce: a5:77:2a:12:8d:82:b0:f2:92:16:38:80:f3:9f:bf: 5c:e9:fe:a8:9f:b7:09:9f:f2:bf:10:d7:1e:cc:e1: 1e:3e:05:03:33:64:87:b9:30:89:9d:3b:60:5e:e2: 77:ee:4f:6f:c4:71:de:0b:70:08:6b:ab:86:0e:d6: da:ad:2c:5d:d2:c2:a6:7a:74:50:fe:00:c4:46:5e: f3:72:7e:d1:e4:b5:40:e9:fc:27:66:51:a6:53:4f: 1b:43:73:c5:e2:b3:e4:cd:e2:bd:d4:c4:86:f5:44: 26:6c:b2:84:44:62:59:91:4b:d3:59:06:0c:be:cd: 3f:dc:50:8e:0d:87:10:6a:12:fb:3a:2b:10:89:0b: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:25:21:9C:3C:37:13:34:3A:EF:AC:CC:D6:B5:96:DF:33:1E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:09:1f:40:4a:10:8a:db:a1:bb:c7:f9:9f:ae:a6:5c:18:2b: 7b:fd:4c:0c:44:c3:c2:35:4d:53:e8:fa:df:61:94:bd:43:6b: 30:bd:11:8a:05:a5:be:62:b2:cc:c1:b8:f5:9d:39:67:12:48: 2b:c2:9c:69:80:3c:2f:45:6b:57:8c:e1:3b:6e:a3:9b:ab:4e: 40:a8:55:5b:ae:80:3e:a1:3d:ed:a5:92:d9:b0:3a:b8:44:09: e5:9c:2f:be:42:4e:7b:2d:f9:06:6e:11:2e:4c:23:eb:5e:2e: f1:b1:f1:4d:b8:46:6f:69:7b:52:c4:b9:ea:1a:45:5c:c2:e9: ce:1e:5d:25:61:6b:ae:c2:13:d6:46:92:12:ed:50:80:a9:a3: 3c:94:09:9f:da:3a:1c:0c:8f:66:d1:31:81:4b:49:8d:5f:4b: 8a:3a:54:0a:b0:4d:e3:9f:8e:cf:0f:a1:39:9d:13:15:d5:32: 4b:f9:99:0a:d9:5e:77:2f:73:d0:ff:99:7e:84:e7:1f:f2:da: 44:bb:17:df:53:08:5a:b2:96:2e:af:7d:2f:32:c7:3a:61:b1: 4b:98:d2:b8:82:45:36:7c:43:2b:54:39:5c:64:c8:8a:47:75: 5a:70:c3:b2:50:11:ba:5a:17:da:67:9a:42:9c:7b:64:93:c6: 7a:e1:75:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369nD2r2phnznfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZWIzZjUxOTctNzNiZi00OTMxLWI3OGQtNzk4MjliZTM2ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVGrj1nPUf6CaZuaX22kwaFO+YqLmhb7WStA 0O5d104Vc9hcpeFs6nYhTNFCYNlUVMfvA4YtPlTgACcJG+Tp2Al4hLtrA2IMMoWZ YQBGikDIcdjLxD+YHt7hK5F012NZk2mgUcD3jQTf+W1RZOjBxhk+XIrVkM6ldyoS jYKw8pIWOIDzn79c6f6on7cJn/K/ENcezOEePgUDM2SHuTCJnTtgXuJ37k9vxHHe C3AIa6uGDtbarSxd0sKmenRQ/gDERl7zcn7R5LVA6fwnZlGmU08bQ3PF4rPkzeK9 1MSG9UQmbLKERGJZkUvTWQYMvs0/3FCODYcQahL7OisQiQsj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoGJSGcPDcTNDrvrMzWtZbfMx4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYTZlOTBhN2EtYWQ2Yy0z MTVjLWI2YzctYjg0NzUyOTdkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgJH0BKEIrbobvH+Z+uplwYK3v9TAxEw8I1TVPo+t9hlL1DazC9EYoF pb5isszBuPWdOWcSSCvCnGmAPC9Fa1eM4Ttuo5urTkCoVVuugD6hPe2lktmwOrhE CeWcL75CTnst+QZuES5MI+teLvGx8U24Rm9pe1LEueoaRVzC6c4eXSVha67CE9ZG khLtUICpozyUCZ/aOhwMj2bRMYFLSY1fS4o6VAqwTeOfjs8PoTmdExXVMkv5mQrZ Xncvc9D/mX6E5x/y2kS7F99TCFqyli6vfS8yxzphsUuY0riCRTZ8QytUOVxkyIpH dVpww7JQEbpaF9pnmkKce2STxnrhdSg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:53 2025 by rpki-client