$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa File: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (raw, json) Hash identifier: ZFJ0k0+mxVvnIzTH3JGgiqce4jILSrByjImwkz3cEFw= Subject key identifier: 9D:9A:B8:42:99:C5:58:C1:DC:E4:17:FF:BE:A1:17:BA:EF:BC:E6:01 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D93E17026E1D3E18733080 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 207.211.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3e:17:02:6e:1d:3e:18:73:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=8aad30e5-ba6d-4e24-aae5-6c5bed7817ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:78:99:9f:14:f3:0b:f2:d1:4a:11:a2:3d: 73:37:72:63:ca:6b:db:f4:40:0f:e8:0e:c5:4b:ae: c0:65:75:ef:80:63:5b:d7:57:74:f6:0e:29:3e:23: 63:cb:b5:ba:bd:9a:3a:ba:ad:2e:77:9a:40:2c:bf: ba:e0:8f:2a:25:3d:84:e6:b2:17:12:ad:58:9d:9d: 46:8a:9e:8b:51:25:47:4e:ef:f0:ba:d8:b5:ab:a7: 54:3f:12:8e:e4:dc:80:13:15:a4:2d:01:53:7e:71: be:5b:09:9f:cd:6d:41:c4:79:d6:c3:56:eb:73:5a: 9e:b5:75:d2:dc:b1:f1:08:4d:74:e7:d6:94:3e:e0: 50:87:9c:c3:a1:9c:00:f0:99:02:b1:64:72:7f:a6: b3:88:e0:c4:95:2c:2c:12:30:e7:6f:5b:f0:55:65: d7:75:51:85:18:db:e7:6b:be:e1:e2:63:83:d8:1c: d2:17:e1:19:12:07:74:69:ff:38:74:1b:30:66:0f: e6:f1:da:0d:83:1d:af:02:29:95:db:4a:a7:f4:3d: 9c:c0:20:e6:4b:fa:4d:09:9e:21:ab:5b:41:f2:43: 18:d5:d0:09:74:ce:3c:43:02:1d:5c:48:b8:23:83: 46:e1:b5:e3:9f:ae:b8:f2:f7:ba:db:28:79:4d:22: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:B8:42:99:C5:58:C1:DC:E4:17:FF:BE:A1:17:BA:EF:BC:E6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/502da292-08a8-3b75-bc4b-8d390e5fe580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4a:ca:99:d9:95:42:55:ba:e9:e9:04:af:60:2e:45:31:ff: e5:f7:0e:80:55:bf:8e:1a:14:8b:79:20:63:04:8b:0b:b3:9a: 46:83:1c:a4:ff:e0:52:e2:1b:b4:dc:4b:d4:2f:64:ea:df:b9: 23:09:40:64:27:5c:25:49:77:89:17:69:7e:2a:5c:dd:53:94: 4f:13:71:f1:ff:5f:a8:51:cb:8c:72:99:6e:5c:da:28:a4:fe: 69:c4:9e:b0:2a:0b:ce:96:73:a6:4e:f5:00:ae:d2:e6:ae:f3: 28:5b:38:21:ff:16:41:93:73:88:ad:42:ca:4d:c0:37:f4:a4: 16:42:4c:6f:07:ec:c0:41:34:da:93:e9:9b:cc:ff:9c:73:de: b9:66:7c:fb:7e:50:ff:89:ce:01:b9:bd:23:e6:f2:f0:ed:8e: 05:0d:12:d8:2f:8f:b1:2a:22:30:63:59:5c:33:df:6b:77:51: e8:b7:74:6d:0c:97:72:f1:7b:7d:cb:be:e6:eb:b0:2a:fc:d6: 5c:34:a8:16:db:e8:0e:15:2e:1f:97:a9:87:2d:05:c4:81:03: 6b:7a:82:67:58:7f:c4:41:b6:44:70:8c:3f:40:73:58:21:15: bf:d0:04:f1:14:a8:f1:4e:dd:80:18:56:f1:44:88:06:eb:04: 05:bb:b4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32T4XAm4dPhhzMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk OGFhZDMwZTUtYmE2ZC00ZTI0LWFhZTUtNmM1YmVkNzgxN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjad4mZ8U8wvy0UoRoj1zN3Jjymvb9EAP6A7F S67AZXXvgGNb11d09g4pPiNjy7W6vZo6uq0ud5pALL+64I8qJT2E5rIXEq1YnZ1G ip6LUSVHTu/wuti1q6dUPxKO5NyAExWkLQFTfnG+WwmfzW1BxHnWw1brc1qetXXS 3LHxCE1059aUPuBQh5zDoZwA8JkCsWRyf6aziODElSwsEjDnb1vwVWXXdVGFGNvn a77h4mOD2BzSF+EZEgd0af84dBswZg/m8doNgx2vAimV20qn9D2cwCDmS/pNCZ4h q1tB8kMY1dAJdM48QwIdXEi4I4NG4bXjn6648ve62yh5TSKoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2auEKZxVjB3OQX/76hF7rvvOYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNTAyZGEyOTItMDhhOC0z Yjc1LWJjNGItOGQzOTBlNWZlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1KypnZlUJVuunpBK9gLkUx/+X3DoBVv44aFIt5IGMEiwuzmkaDHKT/ 4FLiG7TcS9QvZOrfuSMJQGQnXCVJd4kXaX4qXN1TlE8TcfH/X6hRy4xymW5c2iik /mnEnrAqC86Wc6ZO9QCu0uau8yhbOCH/FkGTc4itQspNwDf0pBZCTG8H7MBBNNqT 6ZvM/5xz3rlmfPt+UP+JzgG5vSPm8vDtjgUNEtgvj7EqIjBjWVwz32t3Uei3dG0M l3Lxe33LvubrsCr81lw0qBbb6A4VLh+XqYctBcSBA2t6gmdYf8RBtkRwjD9Ac1gh Fb/QBPEUqPFO3YAYVvFEiAbrBAW7tJA= -----END CERTIFICATE-----Generated at Mon Apr 28 17:59:01 2025 by rpki-client