$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa File: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (raw, json) Hash identifier: j+AmipPmUIktOaFYbLKNyOLgj8G4FQBIuoTS9uHixkU= Subject key identifier: 90:55:84:5E:CC:F8:E1:78:0D:54:16:C2:55:4E:4A:89:23:50:A9:D0 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300A0D0EAF8E3187480180 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 168.220.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0a:0d:0e:af:8e:31:87:48:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=20b3ecda-b9f0-435f-a2fb-2ad5274a16ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:73:05:20:de:2c:11:af:88:38:b8:b4:82: fe:cd:70:58:b7:36:f6:01:53:e9:6f:be:7a:e8:c5: 23:8e:99:76:34:e6:ca:6c:01:e3:5d:87:9f:9f:b0: 4a:f0:50:e2:77:b8:84:29:29:6b:ab:1a:84:7a:83: a2:7a:28:c6:ed:eb:79:50:ec:86:c5:48:4d:c2:1b: 47:4e:e1:d3:ff:46:c3:50:16:d9:fb:19:14:6d:3c: 30:5e:65:91:4c:05:f2:03:3b:d0:56:5a:4a:c4:0c: 9e:61:ec:f0:3c:64:79:0a:1a:ed:91:8e:b7:3e:f5: 74:cb:d6:7d:c8:43:7d:78:dc:b4:d1:71:21:b0:bc: 76:15:13:e7:6b:a7:21:2a:cf:8c:55:37:39:c8:8e: 48:af:2e:64:4f:0a:8c:72:50:10:e4:9f:e6:5b:44: 73:c6:36:f4:82:68:f1:36:5f:56:28:3d:68:83:ca: b6:bc:46:b2:60:c3:fa:e0:69:cb:5a:ef:29:30:7a: a6:ab:79:77:d3:d2:4b:b6:77:2e:51:fb:96:30:ae: 58:3a:a7:37:9b:33:dc:c4:2d:66:b8:98:c4:cc:9f: 74:7e:70:f2:f5:bd:8b:c0:67:56:c8:a1:18:55:22: e2:09:db:3a:e6:27:b7:aa:ab:23:90:43:01:11:33: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:84:5E:CC:F8:E1:78:0D:54:16:C2:55:4E:4A:89:23:50:A9:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b7:87:b7:f9:5f:46:61:76:e5:78:c9:5e:86:d1:09:b8:51: a3:7b:ec:6f:c4:7e:65:67:0f:d9:2b:52:91:4d:0e:21:7c:a3: 9d:12:56:d6:ea:74:d0:0a:32:3e:60:aa:dc:76:20:6e:3a:68: 89:b7:46:26:40:e5:c4:bd:5a:0a:b9:b0:2e:ca:27:a4:4c:3b: c0:79:05:d1:46:96:cb:57:3f:42:75:10:0c:27:d5:b4:ce:58: 3b:1e:ea:83:b6:0c:d2:91:bd:bc:a3:c1:88:68:e6:1f:d5:09: 71:e9:8c:c1:d9:45:6f:57:d2:db:b0:7c:1c:03:23:22:59:ff: b6:ba:f5:4f:e4:f0:62:13:7e:6d:44:44:88:80:b7:15:10:9d: 84:ae:8a:50:13:b5:8b:92:80:bb:bc:6b:c8:75:79:04:d7:e6: 7b:e1:2f:da:5d:b9:54:dc:76:1d:ee:3f:e4:f5:be:5e:dc:e5: c1:10:38:35:00:ed:49:66:47:fb:34:54:73:ca:6f:df:3d:ac: 5e:ac:ab:d8:82:a9:9e:a3:33:f6:68:d3:74:55:9c:61:37:76: 73:45:37:d3:6a:f6:d8:d0:c6:f8:5c:ab:17:8f:f2:e7:a5:86: a4:38:45:35:a9:7d:f4:22:05:c1:b4:a7:48:f1:b2:b8:f7:19: 7d:ba:b2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAoNDq+OMYdIAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MjBiM2VjZGEtYjlmMC00MzVmLWEyZmItMmFkNTI3NGExNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkRzBSDeLBGviDi4tIL+zXBYtzb2AVPpb756 6MUjjpl2NObKbAHjXYefn7BK8FDid7iEKSlrqxqEeoOieijG7et5UOyGxUhNwhtH TuHT/0bDUBbZ+xkUbTwwXmWRTAXyAzvQVlpKxAyeYezwPGR5ChrtkY63PvV0y9Z9 yEN9eNy00XEhsLx2FRPna6chKs+MVTc5yI5Iry5kTwqMclAQ5J/mW0Rzxjb0gmjx Nl9WKD1og8q2vEayYMP64GnLWu8pMHqmq3l309JLtncuUfuWMK5YOqc3mzPcxC1m uJjEzJ90fnDy9b2LwGdWyKEYVSLiCds65ie3qqsjkEMBETODfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBVhF7M+OF4DVQWwlVOSokjUKnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYTZlOTBhN2EtYWQ2Yy0z MTVjLWI2YzctYjg0NzUyOTdkZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe3h7f5X0ZhduV4yV6G0Qm4UaN77G/EfmVnD9krUpFNDiF8o50SVtbq dNAKMj5gqtx2IG46aIm3RiZA5cS9Wgq5sC7KJ6RMO8B5BdFGlstXP0J1EAwn1bTO WDse6oO2DNKRvbyjwYho5h/VCXHpjMHZRW9X0tuwfBwDIyJZ/7a69U/k8GITfm1E RIiAtxUQnYSuilATtYuSgLu8a8h1eQTX5nvhL9pduVTcdh3uP+T1vl7c5cEQODUA 7UlmR/s0VHPKb989rF6sq9iCqZ6jM/Zo03RVnGE3dnNFN9Nq9tjQxvhcqxeP8uel hqQ4RTWpffQiBcG0p0jxsrj3GX26smc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:44 2025 by rpki-client