$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa File: 28e01cf7-f5be-34ef-9dfc-3719434f963a.roa (raw, json) Hash identifier: SLmGdJHwMgUAbwqO741Yp6bbRS33Xm/foOPypK/2b34= Subject key identifier: 8F:EA:54:57:D4:26:5C:66:81:01:F3:F7:B1:57:E3:44:83:86:0C:D4 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300E98ECA779391B049560 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 207.211.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0e:98:ec:a7:79:39:1b:04:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=b2be982f-65b4-4143-a65c-6eab21d3062b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:47:3e:5a:83:cb:ee:42:ad:04:2b:ae:f7: 9c:61:fc:ad:fa:4a:49:c6:77:7f:c7:49:37:e1:bc: 62:e4:a8:1a:47:6c:d7:15:52:cf:90:5a:63:6f:75: 3d:bd:05:10:dd:a8:3a:89:2c:5b:23:ee:25:11:46: dd:0d:ab:f1:b8:69:67:34:c1:72:a4:48:66:46:3c: b4:f9:65:be:c7:33:6b:37:e2:fd:db:5c:58:98:46: a6:a5:48:29:5d:8b:b9:a5:ca:12:37:75:dc:87:9a: fb:1c:6b:15:4d:ff:ee:60:db:b2:cb:3f:25:00:20: 5d:62:6e:2b:13:68:ff:d2:a6:6a:b1:09:1b:15:7a: 1b:3c:e6:b0:60:9b:e9:de:63:c1:19:88:94:e4:c3: 1c:ad:f2:13:af:71:34:2a:8e:9c:df:bb:9a:91:94: 1d:2d:68:91:8b:83:9c:5b:27:3f:70:51:aa:f3:70: 90:5f:97:7b:cc:fe:f3:8f:06:f0:f7:bc:2e:82:7b: 12:99:41:fa:15:d0:90:d0:a1:c8:5b:14:5d:fc:2d: 9d:ac:04:84:95:6b:31:d2:d7:1c:88:f7:9f:20:05: 2f:99:36:f2:aa:b3:a7:db:82:14:fa:21:fd:78:20: 9a:c3:28:1a:57:76:9b:87:a9:d0:8f:5e:17:6e:37: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EA:54:57:D4:26:5C:66:81:01:F3:F7:B1:57:E3:44:83:86:0C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:85:fd:55:26:59:b4:c9:6d:0a:38:63:4f:cd:23:65:4d:14: 4b:b5:ad:7d:17:96:99:ac:66:20:ea:27:b8:22:10:19:93:6e: dc:8b:b9:2d:78:66:b5:eb:4d:b2:ea:4b:5a:48:e6:fb:31:13: fa:79:69:59:89:48:41:7c:b5:3a:a9:da:0f:ec:58:04:be:a0: 84:2d:b9:fd:2f:c7:c1:62:2c:82:72:fe:2c:91:07:b7:b5:df: d5:0e:c0:33:52:a8:37:44:31:a3:a8:dc:a5:f6:6e:f9:d7:da: a5:4a:cd:99:17:79:12:5c:4d:c8:bb:29:c4:86:83:d3:c1:d1: 3b:b7:b1:ee:80:94:35:f0:d1:58:28:e0:75:95:1b:7a:2c:d2: 07:e7:a9:a8:b4:63:a8:65:ee:8e:b5:9f:1f:83:28:d6:5b:61: 26:93:f9:ad:05:e5:e3:c9:88:7d:ba:af:de:19:84:8e:d0:04: 3c:63:39:b9:f1:78:fa:de:33:a4:dc:11:77:87:78:ce:b0:7d: 0b:44:23:31:a8:22:23:20:c2:93:bd:26:6e:fb:ea:ae:d5:d2: de:d0:fe:48:a1:85:a8:9f:dd:45:96:83:47:be:cb:3e:2a:b1: ce:cb:79:33:10:c5:20:4e:e5:41:3e:af:99:b6:2d:3e:82:97: 54:a8:4e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMA6Y7Kd5ORsElWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk YjJiZTk4MmYtNjViNC00MTQzLWE2NWMtNmVhYjIxZDMwNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJhHPlqDy+5CrQQrrvecYfyt+kpJxnd/x0k3 4bxi5KgaR2zXFVLPkFpjb3U9vQUQ3ag6iSxbI+4lEUbdDavxuGlnNMFypEhmRjy0 +WW+xzNrN+L921xYmEampUgpXYu5pcoSN3Xch5r7HGsVTf/uYNuyyz8lACBdYm4r E2j/0qZqsQkbFXobPOawYJvp3mPBGYiU5MMcrfITr3E0Ko6c37uakZQdLWiRi4Oc Wyc/cFGq83CQX5d7zP7zjwbw97wugnsSmUH6FdCQ0KHIWxRd/C2drASElWsx0tcc iPefIAUvmTbyqrOn24IU+iH9eCCawygaV3abh6nQj14XbjfNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/qVFfUJlxmgQHz97FX40SDhgzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjhlMDFjZjctZjViZS0z NGVmLTlkZmMtMzcxOTQzNGY5NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqF/VUmWbTJbQo4Y0/NI2VNFEu1rX0XlpmsZiDqJ7giEBmTbtyLuS14 ZrXrTbLqS1pI5vsxE/p5aVmJSEF8tTqp2g/sWAS+oIQtuf0vx8FiLIJy/iyRB7e1 39UOwDNSqDdEMaOo3KX2bvnX2qVKzZkXeRJcTci7KcSGg9PB0Tu3se6AlDXw0Vgo 4HWVG3os0gfnqai0Y6hl7o61nx+DKNZbYSaT+a0F5ePJiH26r94ZhI7QBDxjObnx ePreM6TcEXeHeM6wfQtEIzGoIiMgwpO9Jm776q7V0t7Q/kihhaif3UWWg0e+yz4q sc7LeTMQxSBO5UE+r5m2LT6Cl1SoTmU= -----END CERTIFICATE-----Generated at Tue Jun 17 22:26:17 2025 by rpki-client