$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa File: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (raw, json) Hash identifier: CzdRLAdbvnh2nhib2TDXqgM88db/yvczs93L4pTMHI8= Subject key identifier: 1C:A0:97:C8:60:6F:B5:E7:C6:23:2E:7E:48:60:F7:48:0C:FA:B2:D4 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A17300E8A525058E446761980 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 398210 IP address blocks: 207.211.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:0e:8a:52:50:58:e4:46:76:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=c889ec99-3994-4da4-a2d8-26c99a510cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:fb:50:81:bb:8f:09:be:61:6e:59:7d:57: af:1d:08:90:9c:6b:08:03:77:f7:a2:fd:bb:b9:66: 39:8f:29:a6:b5:e3:5a:59:78:bb:98:f9:11:56:f2: 8c:d7:fc:14:56:81:f8:39:87:c4:c8:94:e9:c7:00: 5b:20:fd:52:4b:df:df:aa:4a:f6:06:f3:4f:7e:09: 6b:47:70:38:54:2a:dc:1c:60:3a:20:21:21:c5:9a: d1:83:24:33:08:20:1e:55:31:9d:c5:70:73:6f:57: f1:9a:86:a2:6b:e1:24:9d:9e:c4:dc:00:0d:99:22: f8:63:53:80:53:4e:6e:34:92:e4:0f:cf:22:90:9c: 0b:a6:b5:11:ca:6b:33:c6:60:d9:6e:eb:80:ee:ce: e9:f9:dd:d6:3b:bb:cb:86:74:18:0b:26:bb:0c:27: 31:42:23:40:96:52:67:88:c3:b3:1b:22:56:35:04: f7:32:74:10:3e:a0:ce:60:45:d6:11:7a:b7:34:5f: f3:8c:86:c2:50:f8:db:dc:65:ac:23:3f:c9:bd:cc: 15:e3:07:d2:c7:fb:09:02:86:78:08:91:98:b2:2c: 03:1d:6f:03:fe:e1:8a:b0:c6:8d:8b:f4:91:97:48: f9:bc:b6:9e:a3:27:67:d3:fc:2a:7d:18:0c:2e:c8: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A0:97:C8:60:6F:B5:E7:C6:23:2E:7E:48:60:F7:48:0C:FA:B2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bd:8e:5b:87:4b:b7:ab:9d:e1:f0:12:f5:81:aa:dc:bf:00: e8:fa:32:e0:0b:03:40:a6:65:2c:d4:29:32:46:88:c1:6a:ac: 6b:0e:4e:51:8a:53:3e:4a:ae:9f:cb:ee:a4:ee:cc:c3:36:9a: c4:7f:59:8c:63:e7:21:4f:43:ca:6a:2d:81:4c:8e:43:18:a1: f5:e0:40:b6:a0:a0:35:83:a7:44:d4:7a:e0:95:2b:7c:09:aa: 8e:97:dd:bf:a1:4f:40:a6:93:2d:46:52:88:06:a8:4a:1b:07: cc:04:38:33:f6:2b:1a:5a:7f:c6:48:46:c5:f5:34:c0:05:66: 41:87:ea:fa:44:be:be:a2:76:a3:28:9e:1d:90:2d:12:87:cb: f9:46:ce:d2:d2:28:15:47:1f:7c:e5:88:53:2e:40:2c:d8:0e: b4:12:5a:18:b4:be:a5:56:3e:6c:7e:72:80:b4:80:c2:e8:37: 73:aa:e1:9c:6a:a4:c4:9b:16:8f:a5:41:ab:d3:27:99:e2:ef: 4d:f7:c4:32:37:ab:70:de:22:33:b4:27:c1:5b:26:51:05:b9: 45:36:ed:a5:10:aa:9c:4b:7c:a8:bd:1b:29:61:09:a9:4b:e6: b2:da:89:6a:4b:9b:1e:3c:99:33:8e:b7:85:b4:d9:de:bb:7d: fa:61:5a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMA6KUlBY5EZ2GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk Yzg4OWVjOTktMzk5NC00ZGE0LWEyZDgtMjZjOTlhNTEwY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswP7UIG7jwm+YW5ZfVevHQiQnGsIA3f3ov27 uWY5jymmteNaWXi7mPkRVvKM1/wUVoH4OYfEyJTpxwBbIP1SS9/fqkr2BvNPfglr R3A4VCrcHGA6ICEhxZrRgyQzCCAeVTGdxXBzb1fxmoaia+EknZ7E3AANmSL4Y1OA U05uNJLkD88ikJwLprURymszxmDZbuuA7s7p+d3WO7vLhnQYCya7DCcxQiNAllJn iMOzGyJWNQT3MnQQPqDOYEXWEXq3NF/zjIbCUPjb3GWsIz/JvcwV4wfSx/sJAoZ4 CJGYsiwDHW8D/uGKsMaNi/SRl0j5vLaeoydn0/wqfRgMLsiZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBygl8hgb7XnxiMufkhg90gM+rLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYjliNDFlYmQtODQwOC0z NzNjLTlmOGEtNzExNWZlYmJkMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy9jluHS7erneHwEvWBqty/AOj6MuALA0CmZSzUKTJGiMFqrGsOTlGK Uz5Krp/L7qTuzMM2msR/WYxj5yFPQ8pqLYFMjkMYofXgQLagoDWDp0TUeuCVK3wJ qo6X3b+hT0Cmky1GUogGqEobB8wEODP2Kxpaf8ZIRsX1NMAFZkGH6vpEvr6idqMo nh2QLRKHy/lGztLSKBVHH3zliFMuQCzYDrQSWhi0vqVWPmx+coC0gMLoN3Oq4Zxq pMSbFo+lQavTJ5ni7033xDI3q3DeIjO0J8FbJlEFuUU27aUQqpxLfKi9GylhCalL 5rLaiWpLmx48mTOOt4W02d67ffphWsg= -----END CERTIFICATE-----Generated at Mon Jun 16 19:15:49 2025 by rpki-client