$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/49260f33-7d65-367b-b573-991af03e2eeb.roa File: 49260f33-7d65-367b-b573-991af03e2eeb.roa (raw, json) Hash identifier: hNeVFtZF8yaJIhsYYSx88C2PB6IVwIr8+wfmoi84NdA= Subject key identifier: CD:A0:53:E4:C3:86:51:9C:7F:4E:0E:AA:2B:F6:CA:77:88:53:A5:AE Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F432858497B5C6CAF5C522A7D845733C0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/49260f33-7d65-367b-b573-991af03e2eeb.roa Signing time: Thu 10 Apr 2025 17:24:29 +0000 ROA not before: Thu 10 Apr 2025 17:24:29 +0000 ROA not after: Wed 09 Jul 2025 17:24:29 +0000 asID: 398210 IP address blocks: 207.211.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7b:5c:6c:af:5c:52:2a:7d:84:57:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 10 17:24:29 2025 GMT Not After : Jul 9 17:24:29 2025 GMT Subject: CN=8c96e787-bf2a-46d7-8037-86a2ebde2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:71:20:a8:21:b7:45:b6:4a:13:c0:96:d0: 52:1c:6b:ac:49:66:10:22:49:4d:f8:8d:df:d8:d1: 0a:90:58:4a:3c:6e:e0:cf:44:d7:27:95:a2:b9:f3: 3e:be:14:dd:de:61:6a:f4:06:a3:a2:04:54:79:f1: d9:eb:4e:a0:e8:6e:e2:eb:90:13:86:17:c8:84:f6: bc:bb:9e:6a:8b:c5:f5:af:e4:2a:52:57:fd:11:07: 1f:5a:45:5e:5f:63:20:1e:89:fa:a2:02:d6:87:bc: 46:49:a9:37:8f:e0:5e:20:e4:54:46:43:2d:8e:12: bf:12:64:f3:92:b3:82:38:a4:91:8d:83:46:5d:fa: b9:ec:4e:c5:e4:d3:c7:67:e8:e8:af:39:95:00:96: b2:4d:0a:75:60:51:27:2d:a3:c9:30:42:71:2b:7d: dd:49:2e:b7:f0:4d:e6:ef:9d:9f:95:9b:d1:cc:c5: 89:9d:28:a2:73:b4:95:05:d8:7a:93:3c:45:ef:71: b0:83:97:3a:33:79:0a:56:a9:56:f4:5e:69:19:df: 83:06:18:c2:d5:09:28:cb:ca:10:fe:7d:1e:44:7c: e6:12:8b:47:ba:aa:55:1d:7e:a4:ee:e7:8f:b5:c5: 81:1b:b9:99:8f:b1:b2:01:8e:a4:63:b8:15:48:49: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A0:53:E4:C3:86:51:9C:7F:4E:0E:AA:2B:F6:CA:77:88:53:A5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/49260f33-7d65-367b-b573-991af03e2eeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:61:31:2e:1b:4e:39:6d:ca:56:80:73:49:97:17:56:4d:16: 37:df:eb:53:ec:da:2c:6b:68:26:24:7a:1e:cf:7c:9f:f1:1e: 3e:6e:e5:5d:54:1e:f1:66:ab:f2:8c:5d:f6:45:15:5b:5b:a7: c3:5b:a0:57:de:41:a5:09:c0:b9:c3:38:ef:53:d8:59:bb:3e: ec:a8:a2:8b:8a:71:3c:71:8e:9d:f5:df:bb:a6:42:99:6a:0c: ad:23:bc:af:03:50:b9:3a:46:78:fc:5f:0b:25:78:39:fb:f4: 7d:ee:ee:82:9a:7b:1d:89:9d:5a:a5:a0:54:1a:9e:cd:c3:99: 55:e2:a6:49:94:20:9b:f6:f6:ab:d6:b4:f6:66:73:04:41:7f: 7e:cd:fc:3c:e7:3d:2f:88:dd:d2:f1:60:d4:53:bc:b0:1e:45: 32:4a:13:37:56:fc:ad:77:68:dd:a1:57:a5:e4:56:f4:d8:65: 84:b3:40:eb:a4:d9:86:07:4a:39:d5:f6:6f:b9:0a:ca:c1:f0: 2a:4d:1f:42:35:50:cf:81:56:a4:fa:0b:fb:54:70:f3:71:c0: ec:54:65:fe:ac:7b:48:57:db:1b:d5:72:09:1b:cb:12:ac:18: e9:4d:1c:93:55:5d:5e:18:3c:d4:ac:6c:b7:25:d4:62:78:b8: d2:cf:56:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl7XGyvXFIqfYRXM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDQxMDE3MjQyOVoXDTI1MDcwOTE3MjQyOVowLzEtMCsGA1UEAxMk OGM5NmU3ODctYmYyYS00NmQ3LTgwMzctODZhMmViZGUyMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYhxIKght0W2ShPAltBSHGusSWYQIklN+I3f 2NEKkFhKPG7gz0TXJ5WiufM+vhTd3mFq9AajogRUefHZ606g6G7i65AThhfIhPa8 u55qi8X1r+QqUlf9EQcfWkVeX2MgHon6ogLWh7xGSak3j+BeIORURkMtjhK/EmTz krOCOKSRjYNGXfq57E7F5NPHZ+jorzmVAJayTQp1YFEnLaPJMEJxK33dSS638E3m 752flZvRzMWJnSiic7SVBdh6kzxF73Gwg5c6M3kKVqlW9F5pGd+DBhjC1Qkoy8oQ /n0eRHzmEotHuqpVHX6k7uePtcWBG7mZj7GyAY6kY7gVSEmc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2gU+TDhlGcf04Oqiv2yneIU6WuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNDkyNjBmMzMtN2Q2NS0z NjdiLWI1NzMtOTkxYWYwM2UyZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdhMS4bTjltylaAc0mXF1ZNFjff61Ps2ixraCYkeh7PfJ/xHj5u5V1U HvFmq/KMXfZFFVtbp8NboFfeQaUJwLnDOO9T2Fm7PuyooouKcTxxjp3137umQplq DK0jvK8DULk6Rnj8XwsleDn79H3u7oKaex2JnVqloFQans3DmVXipkmUIJv29qvW tPZmcwRBf37N/DznPS+I3dLxYNRTvLAeRTJKEzdW/K13aN2hV6XkVvTYZYSzQOuk 2YYHSjnV9m+5CsrB8CpNH0I1UM+BVqT6C/tUcPNxwOxUZf6se0hX2xvVcgkbyxKs GOlNHJNVXV4YPNSsbLcl1GJ4uNLPVik= -----END CERTIFICATE-----Generated at Fri Apr 18 23:34:19 2025 by rpki-client