$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa File: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (raw, json) Hash identifier: D7KCEnTg/SEtVjwT/5MJANBbWVa/xRQ+mrTWahO4vkQ= Subject key identifier: 54:CB:3F:7D:8C:9F:B8:B5:BA:D1:08:BA:0E:40:4B:F1:C3:47:51:6F Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D938D9D043FC4091FC7960 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:38:d9:d0:43:fc:40:91:fc:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=746016dc-1ae6-4419-8874-bd7cddc51915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:a1:53:3e:8b:e8:f4:56:7e:bf:9f:c8:1a: f7:7d:c6:88:2e:76:e1:04:12:cf:2e:ad:e2:b4:f6: 72:57:d9:86:d8:48:2c:16:7e:2e:45:38:74:c0:d8: 19:d1:62:ca:55:d7:e1:74:bc:13:81:e6:d7:ef:58: ae:e0:0d:41:49:00:9b:74:63:ad:32:0e:3d:21:aa: cf:05:4f:cd:b6:30:eb:b6:9f:d2:aa:e8:2c:9b:ff: ad:15:12:79:6c:b8:52:21:c4:96:e5:64:8b:09:39: 16:d4:39:a7:f6:59:fb:17:f2:5a:f1:d2:45:0e:b0: 2b:37:dd:c9:7e:67:29:c5:47:2b:51:11:f5:fd:b3: c4:23:5f:b5:57:b9:75:9e:fd:43:9d:eb:1c:e1:73: 46:15:d6:34:6c:31:50:1b:3e:32:bf:5b:32:01:23: 92:76:ef:7f:d5:b7:85:75:8e:c4:ef:11:6f:4e:79: 43:83:38:96:86:06:0d:a9:0a:f1:2b:13:7f:3b:86: 6e:d6:70:8e:35:1d:d0:0b:52:0e:cc:b6:11:59:cf: 03:40:a6:f4:07:44:69:1f:4a:9f:fa:fa:b6:e7:f6: cd:98:9d:89:a0:f6:f8:8f:bb:38:ea:83:24:46:04: 6d:59:52:ce:cf:a3:87:3c:05:cd:10:ab:68:b5:74: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CB:3F:7D:8C:9F:B8:B5:BA:D1:08:BA:0E:40:4B:F1:C3:47:51:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdaa1236-db49-323d-8634-b5c7b8224fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b3:78:9c:b0:91:30:de:d7:73:2d:eb:c3:b3:73:b5:43:b1: 29:80:8e:b4:3c:01:64:72:36:56:3b:91:c6:6e:4d:f0:5d:c9: 4e:00:73:7d:2f:10:b1:15:5d:81:a6:17:24:51:db:ae:3f:a3: d1:7c:a1:41:78:39:92:86:4a:7c:a2:14:b1:b3:18:58:c8:5e: 7f:37:02:07:06:aa:d2:fa:7d:51:a1:92:df:99:8e:a3:65:ca: 70:aa:e8:64:08:3e:b9:f4:2e:42:a2:46:f7:1f:d0:5f:2b:6d: 74:96:23:ab:29:8f:b0:84:9c:a9:9a:a4:bc:a4:4f:9a:46:40: a1:09:22:22:ee:6e:a2:00:e7:5b:72:98:4e:62:01:4c:6c:89: 5e:53:12:27:2a:5f:07:7c:41:e7:b6:81:42:6e:de:ba:73:18: 6e:dc:9b:27:b0:a7:7d:50:ca:99:13:0d:c5:36:60:e9:a5:c5: 13:6e:67:26:e9:82:af:aa:df:42:d2:e0:8b:47:5e:d6:cc:c8: f9:b3:b8:8b:18:2d:e8:14:95:8d:a2:0b:b9:6a:a7:c7:c3:62: 16:3d:6f:6c:1a:4d:9f:fb:f4:1c:49:f8:7d:d2:e3:ce:a8:46: 67:fd:6f:38:51:fd:31:5f:bd:78:95:17:1c:cd:64:73:d1:17: 6c:eb:1d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TjZ0EP8QJH8eWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk NzQ2MDE2ZGMtMWFlNi00NDE5LTg4NzQtYmQ3Y2RkYzUxOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEShUz6L6PRWfr+fyBr3fcaILnbhBBLPLq3i tPZyV9mG2EgsFn4uRTh0wNgZ0WLKVdfhdLwTgebX71iu4A1BSQCbdGOtMg49IarP BU/NtjDrtp/Squgsm/+tFRJ5bLhSIcSW5WSLCTkW1Dmn9ln7F/Ja8dJFDrArN93J fmcpxUcrURH1/bPEI1+1V7l1nv1Dnesc4XNGFdY0bDFQGz4yv1syASOSdu9/1beF dY7E7xFvTnlDgziWhgYNqQrxKxN/O4Zu1nCONR3QC1IOzLYRWc8DQKb0B0RpH0qf +vq25/bNmJ2JoPb4j7s46oMkRgRtWVLOz6OHPAXNEKtotXSJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTLP32Mn7i1utEIug5AS/HDR1FvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRhYTEyMzYtZGI0OS0z MjNkLTg2MzQtYjVjN2I4MjI0ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGzeJywkTDe13Mt68Ozc7VDsSmAjrQ8AWRyNlY7kcZuTfBdyU4Ac30v ELEVXYGmFyRR264/o9F8oUF4OZKGSnyiFLGzGFjIXn83AgcGqtL6fVGhkt+ZjqNl ynCq6GQIPrn0LkKiRvcf0F8rbXSWI6spj7CEnKmapLykT5pGQKEJIiLubqIA51ty mE5iAUxsiV5TEicqXwd8Qee2gUJu3rpzGG7cmyewp31QypkTDcU2YOmlxRNuZybp gq+q30LS4ItHXtbMyPmzuIsYLegUlY2iC7lqp8fDYhY9b2waTZ/79BxJ+H3S486o Rmf9bzhR/TFfvXiVFxzNZHPRF2zrHWU= -----END CERTIFICATE-----Generated at Sat Apr 12 14:02:39 2025 by rpki-client