$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa File: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (raw, json) Hash identifier: l9WHYKMdUd0q6BqZJLjP4P6ivngiFfRSk6aK8N72hLk= Subject key identifier: 66:1F:7D:B8:05:C6:99:8E:CB:F3:A0:35:F4:90:A5:B1:FA:5E:EC:4B Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D93E285257A88F9695B2A0 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 207.211.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3e:28:52:57:a8:8f:96:95:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=1e081ce3-0673-47ed-b010-951f17f25c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:08:49:ac:f2:ea:1c:0f:cf:89:21:75:75: b2:af:dc:72:65:e1:69:c5:78:53:33:7d:3b:31:18: 25:b0:d2:a5:2d:ff:e7:a8:4f:0d:7d:ca:05:bc:9d: 95:38:32:42:87:30:6b:11:02:09:b8:7b:5d:7f:a5: ff:7e:ee:48:da:b5:81:fb:ad:11:53:e2:cc:a1:43: bc:b3:8d:21:68:c6:e9:95:b2:c6:02:42:1e:ca:1d: c8:7d:7f:a9:60:7a:ba:1a:26:59:6c:99:04:81:f9: 77:90:f9:89:a6:ee:b1:25:d6:54:38:22:dd:01:04: ae:1e:99:db:c3:f1:d8:ef:7c:cd:a3:92:58:26:34: 2f:42:56:c1:62:b0:cf:d6:f6:86:d2:ba:a2:da:2c: 3a:ff:cd:2a:e0:2d:08:8c:20:b6:14:c1:e1:f3:00: eb:1a:51:bd:1b:ce:0c:99:4c:2a:fa:35:b5:d3:bf: 99:fb:9e:14:2d:5f:51:5a:22:3f:1f:19:46:e9:66: 6c:76:db:df:aa:a9:04:86:cf:17:33:2f:9b:b9:dc: 70:3b:2b:6f:e6:b2:61:1e:50:64:53:23:07:d8:ec: 32:5b:9f:cb:14:2c:1f:cf:b1:39:27:2a:97:11:8a: 05:45:62:76:f9:5c:31:07:7e:17:da:a6:2a:bc:39: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:7D:B8:05:C6:99:8E:CB:F3:A0:35:F4:90:A5:B1:FA:5E:EC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/b9b41ebd-8408-373c-9f8a-7115febbd080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:89:11:6e:c4:5a:60:39:a3:e0:49:b6:be:72:4f:1a:35:b7: b0:a1:be:17:13:33:e6:00:92:0d:80:f1:e3:a1:96:bd:5a:51: c3:b1:59:97:a4:4f:35:ef:9c:85:68:7c:12:62:1d:33:6e:49: ad:3a:f5:47:97:58:65:00:77:d9:b8:32:e5:d1:54:72:ef:60: 8a:b7:2e:b4:34:35:f7:19:ca:09:44:ac:83:53:07:3a:3c:98: c5:14:a6:5a:14:37:4b:8d:97:ad:17:21:22:2d:d8:72:73:15: 8f:20:7c:58:29:c9:d1:4f:82:55:08:a3:f7:f0:f2:56:78:dc: 9d:8a:dd:75:2a:dd:9d:f3:ed:cd:53:d6:6b:78:f6:52:10:b9: b0:b5:f0:0e:b6:09:60:3c:86:55:ec:be:37:b1:b0:f9:da:3f: 5e:10:ce:66:2b:21:9a:12:e7:69:2f:b9:d5:d9:05:da:4c:61: ae:a5:ba:70:1e:78:fc:d0:40:be:3f:9e:3b:5e:56:00:37:dc: 2a:99:aa:bd:b0:71:f0:6b:9a:95:cb:e2:de:05:ef:99:c7:01: ba:23:43:d0:18:c4:65:df:6e:ed:e6:7a:ed:7c:a6:2b:1d:bc: 84:85:82:2d:79:c9:a7:68:65:3e:cf:b2:4e:f7:a3:b4:93:0b: d6:f3:f1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32T4oUleoj5aVsqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk MWUwODFjZTMtMDY3My00N2VkLWIwMTAtOTUxZjE3ZjI1YzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKUISazy6hwPz4khdXWyr9xyZeFpxXhTM307 MRglsNKlLf/nqE8NfcoFvJ2VODJChzBrEQIJuHtdf6X/fu5I2rWB+60RU+LMoUO8 s40haMbplbLGAkIeyh3IfX+pYHq6GiZZbJkEgfl3kPmJpu6xJdZUOCLdAQSuHpnb w/HY73zNo5JYJjQvQlbBYrDP1vaG0rqi2iw6/80q4C0IjCC2FMHh8wDrGlG9G84M mUwq+jW107+Z+54ULV9RWiI/HxlG6WZsdtvfqqkEhs8XMy+budxwOytv5rJhHlBk UyMH2OwyW5/LFCwfz7E5JyqXEYoFRWJ2+VwxB34X2qYqvDmE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYffbgFxpmOy/OgNfSQpbH6XuxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYjliNDFlYmQtODQwOC0z NzNjLTlmOGEtNzExNWZlYmJkMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9PyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuJEW7EWmA5o+BJtr5yTxo1t7ChvhcTM+YAkg2A8eOhlr1aUcOxWZek TzXvnIVofBJiHTNuSa069UeXWGUAd9m4MuXRVHLvYIq3LrQ0NfcZyglErINTBzo8 mMUUploUN0uNl60XISIt2HJzFY8gfFgpydFPglUIo/fw8lZ43J2K3XUq3Z3z7c1T 1mt49lIQubC18A62CWA8hlXsvjexsPnaP14QzmYrIZoS52kvudXZBdpMYa6lunAe ePzQQL4/njteVgA33CqZqr2wcfBrmpXL4t4F75nHAbojQ9AYxGXfbu3meu18pisd vISFgi15yadoZT7Psk73o7STC9bz8SM= -----END CERTIFICATE-----Generated at Sat Apr 12 14:07:50 2025 by rpki-client