$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json) Hash identifier: /tYTUhkMLURiOX5+hEwZtqSd8tfj+670ZAoJmoAhhlA= Subject key identifier: 59:71:2C:59:99:AC:35:F6:4B:F7:3A:C9:E0:28:BF:8F:A0:1A:84:33 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300E7B21E4E5D2408DE200 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 207.211.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0e:7b:21:e4:e5:d2:40:8d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=c0ae454b-60c0-430a-aad9-92bb0358e692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:ec:a5:b6:fe:32:52:10:20:99:d5:99:8a: 3d:f2:bf:01:a1:97:ca:63:88:1e:b3:4c:19:1f:4a: ab:8f:4a:95:46:5f:d3:60:a8:74:c1:dd:be:34:ac: 61:08:bb:f1:83:86:48:e6:38:3b:97:4a:2b:87:a0: 7c:27:17:e8:96:a5:89:d2:ac:34:a4:66:42:db:58: 8e:ef:c6:36:7a:bf:3b:e0:a5:70:25:f7:23:87:d5: 00:39:89:ee:0c:49:f4:99:53:40:e8:ab:ad:0b:3f: fe:99:e1:21:9e:27:00:58:79:64:94:c9:d7:99:cc: 7f:90:c7:42:37:27:6a:56:ec:66:44:55:bc:4e:1d: dc:8c:c2:20:e4:2a:7c:54:0a:74:4c:74:d8:e3:3c: 68:3c:e8:75:87:40:52:61:4f:16:91:96:f4:35:1e: 57:72:4a:5d:cd:61:d4:f0:8a:16:47:fb:7f:a6:f8: ba:3f:fa:d1:e0:58:81:91:b7:66:b7:6c:ea:e9:55: fe:b0:92:7b:39:cd:43:9e:22:31:e5:f5:e2:80:27: 37:3a:43:81:b6:a3:89:84:ee:e1:1f:e3:6c:ce:16: fc:3f:f5:2e:9b:01:f7:ef:6f:11:f3:c5:73:e3:eb: ff:e6:b9:b4:39:c0:c2:9c:f7:d6:eb:bc:8e:8c:69: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:71:2C:59:99:AC:35:F6:4B:F7:3A:C9:E0:28:BF:8F:A0:1A:84:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:61:32:90:93:2d:7c:f5:7d:92:47:d5:02:e1:15:85:d7:78: a7:16:50:1e:2c:dd:8e:aa:4e:2b:d0:2a:1a:c5:a2:6b:34:99: cf:5e:82:0a:74:49:a6:ad:42:f9:b7:9a:09:f8:9a:ce:87:d5: 80:6d:f8:38:79:e5:e8:a9:52:35:66:93:f5:69:0b:7d:b9:4c: 8d:91:cc:55:59:6e:a9:b1:54:bf:3a:51:bf:6a:ff:c4:51:9f: 11:3d:d4:f7:00:6a:ac:9d:53:cf:ea:91:75:d0:7b:5a:8a:4d: 9d:42:6c:0a:f0:6d:de:82:1e:89:9f:de:cd:4a:24:25:2c:6d: 48:9c:a3:51:d2:21:ec:07:7f:94:99:6a:29:b1:5e:c1:a0:f2: 9f:09:00:b5:ff:07:ab:94:7a:6a:98:18:e4:72:1a:ee:4b:61: e4:51:31:7d:eb:fb:81:b7:a8:6c:0d:8e:b1:7c:d0:40:48:a7: 2e:de:7a:34:7d:40:44:92:9c:8d:05:71:5c:e7:ca:d2:11:a9: 8c:cf:bc:a5:b8:01:49:68:91:57:e2:2f:9e:ca:1a:89:e3:42: 9c:ec:a4:a0:b2:c2:fd:92:87:f2:ed:37:35:9f:16:3b:46:56: 0e:93:9d:54:20:71:ff:6d:da:b5:8f:db:c6:18:24:40:43:59: 90:b2:ea:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMA57IeTl0kCN4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk YzBhZTQ1NGItNjBjMC00MzBhLWFhZDktOTJiYjAzNThlNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBXspbb+MlIQIJnVmYo98r8BoZfKY4ges0wZ H0qrj0qVRl/TYKh0wd2+NKxhCLvxg4ZI5jg7l0orh6B8JxfolqWJ0qw0pGZC21iO 78Y2er874KVwJfcjh9UAOYnuDEn0mVNA6KutCz/+meEhnicAWHlklMnXmcx/kMdC NydqVuxmRFW8Th3cjMIg5Cp8VAp0THTY4zxoPOh1h0BSYU8WkZb0NR5XckpdzWHU 8IoWR/t/pvi6P/rR4FiBkbdmt2zq6VX+sJJ7Oc1DniIx5fXigCc3OkOBtqOJhO7h H+Nszhb8P/UumwH3728R88Vz4+v/5rm0OcDCnPfW67yOjGlB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlxLFmZrDX2S/c6yeAov4+gGoQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTAyZGEyOTItMDhhOC0z Yjc1LWJjNGItOGQzOTBlNWZlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFhMpCTLXz1fZJH1QLhFYXXeKcWUB4s3Y6qTivQKhrFoms0mc9eggp0 SaatQvm3mgn4ms6H1YBt+Dh55eipUjVmk/VpC325TI2RzFVZbqmxVL86Ub9q/8RR nxE91PcAaqydU8/qkXXQe1qKTZ1CbArwbd6CHomf3s1KJCUsbUico1HSIewHf5SZ aimxXsGg8p8JALX/B6uUemqYGORyGu5LYeRRMX3r+4G3qGwNjrF80EBIpy7eejR9 QESSnI0FcVznytIRqYzPvKW4AUlokVfiL57KGonjQpzspKCywv2Sh/LtNzWfFjtG Vg6TnVQgcf9t2rWP28YYJEBDWZCy6jA= -----END CERTIFICATE-----Generated at Wed Jun 18 05:35:44 2025 by rpki-client