$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa File: d231e946-74bf-3765-97f0-efb9933dc249.roa (raw, json) Hash identifier: dUHm0PEPB4KoZS4zfPbXPO1HXqA3avg+CxZZJeiqtfg= Subject key identifier: 34:F1:0E:C8:B8:F4:2B:CE:18:6B:36:DF:58:92:18:AE:0E:D3:3A:92 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584AF7EBD8AA7F83FEA8C030DB00 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 398210 IP address blocks: 168.220.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d8:aa:7f:83:fe:a8:c0:30:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=62b8a586-82c7-40d9-86ff-f251a9afc72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:ce:34:1e:f4:bc:3b:63:0d:7b:64:aa:ae: c2:a3:92:0c:c1:93:d0:a1:d3:0f:fb:46:62:9a:df: da:41:b3:21:f7:74:39:c1:82:0d:1e:92:df:90:34: 21:16:a5:a3:bb:d0:ab:34:60:54:25:6d:81:06:bd: 78:34:c0:a7:19:39:e4:42:19:ae:99:01:e3:5c:a4: 16:e8:a3:67:a5:e7:d7:70:3a:ae:99:09:49:64:93: 58:7e:22:a7:75:20:fd:83:dc:b1:c2:50:d8:b7:a5: c6:3e:23:08:37:5e:20:f6:1c:fd:4b:c8:ae:f3:0b: 09:d9:b0:bb:da:5f:0f:94:a5:50:2c:38:18:31:c0: 3b:f4:13:4e:33:f5:14:04:d0:e7:90:e8:a5:72:e4: 2a:39:9f:50:2a:80:ce:8f:e6:be:6a:e8:19:3b:51: c0:50:89:ca:45:c7:fb:50:ad:a3:44:76:aa:9c:98: 2b:35:de:ba:c9:6e:60:26:25:9a:0d:4f:54:59:be: c8:e9:63:c9:5d:eb:4c:3a:42:e7:94:a8:92:0f:b1: 70:91:00:3a:f3:ab:2b:da:9c:e5:c5:24:49:a3:0b: dd:ec:55:48:cd:24:87:12:ac:29:0d:25:f0:58:9d: 62:c3:a3:b4:bd:63:de:a6:ee:61:12:08:02:5d:26: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F1:0E:C8:B8:F4:2B:CE:18:6B:36:DF:58:92:18:AE:0E:D3:3A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d231e946-74bf-3765-97f0-efb9933dc249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:48:fc:76:14:14:6d:18:fb:60:7a:5f:6f:f0:fd:88:97:ac: c7:68:30:69:9c:85:7c:fc:5a:bd:56:ff:2d:4a:db:45:97:44: c0:05:0b:5e:e5:29:bd:a2:90:1e:65:ab:92:de:7a:1a:aa:d0: b0:92:ae:00:ea:63:b9:22:64:2b:8a:a5:a2:08:ea:36:1e:de: d4:d2:e3:63:24:92:7e:9e:52:e7:a0:28:f2:28:9a:7a:48:79: fb:9b:6e:ef:db:25:ca:c8:58:ae:12:62:6e:4e:2c:6f:b6:67: 1d:22:27:33:38:25:0c:61:03:64:a8:44:67:d2:c0:23:80:b0: 46:0f:44:e3:96:24:a6:94:70:4c:72:5d:0a:51:bd:81:aa:1f: d7:1c:78:b2:68:c1:6a:9b:16:9e:df:b0:e7:6b:9d:25:c8:be: 41:2b:1b:13:c1:9e:d8:53:5e:39:5c:fb:c1:3b:93:15:62:e6: c0:de:6e:67:a5:0c:ac:cd:e5:1b:b6:3b:82:e4:8a:ac:cf:19: d8:ff:e9:dd:b5:16:40:e5:b0:f9:90:d1:8a:b8:44:65:30:45: c6:1b:5f:38:76:9f:61:0c:cc:e0:5d:0f:d8:be:6d:0e:7e:bc: 79:f1:e4:de:36:a0:2c:da:4f:a6:58:1b:a7:dc:be:f5:a7:1f: 5c:ef:8e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369iqf4P+qMAw2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NjJiOGE1ODYtODJjNy00MGQ5LTg2ZmYtZjI1MWE5YWZjNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz7ONB70vDtjDXtkqq7Co5IMwZPQodMP+0Zi mt/aQbMh93Q5wYINHpLfkDQhFqWju9CrNGBUJW2BBr14NMCnGTnkQhmumQHjXKQW 6KNnpefXcDqumQlJZJNYfiKndSD9g9yxwlDYt6XGPiMIN14g9hz9S8iu8wsJ2bC7 2l8PlKVQLDgYMcA79BNOM/UUBNDnkOilcuQqOZ9QKoDOj+a+augZO1HAUInKRcf7 UK2jRHaqnJgrNd66yW5gJiWaDU9UWb7I6WPJXetMOkLnlKiSD7FwkQA686sr2pzl xSRJowvd7FVIzSSHEqwpDSXwWJ1iw6O0vWPepu5hEggCXSbiaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTxDsi49CvOGGs231iSGK4O0zqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDIzMWU5NDYtNzRiZi0z NzY1LTk3ZjAtZWZiOTkzM2RjMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxI/HYUFG0Y+2B6X2/w/YiXrMdoMGmchXz8Wr1W/y1K20WXRMAFC17l Kb2ikB5lq5Leehqq0LCSrgDqY7kiZCuKpaII6jYe3tTS42Mkkn6eUuegKPIomnpI efubbu/bJcrIWK4SYm5OLG+2Zx0iJzM4JQxhA2SoRGfSwCOAsEYPROOWJKaUcExy XQpRvYGqH9cceLJowWqbFp7fsOdrnSXIvkErGxPBnthTXjlc+8E7kxVi5sDebmel DKzN5Ru2O4LkiqzPGdj/6d21FkDlsPmQ0Yq4RGUwRcYbXzh2n2EMzOBdD9i+bQ5+ vHnx5N42oCzaT6ZYG6fcvvWnH1zvjsE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:39 2025 by rpki-client