$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa File: bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa (raw, json) Hash identifier: s1wWm4xcRai5W0ICCej+6wMpszkvfFqbBKxhhiygAus= Subject key identifier: DC:27:C5:51:71:25:53:14:2B:91:2D:8C:2D:7A:7F:91:3E:BC:B2:E5 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F432858497B5BAEBC56EDCC32E9DDD300 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa Signing time: Thu 10 Apr 2025 17:22:59 +0000 ROA not before: Thu 10 Apr 2025 17:22:59 +0000 ROA not after: Wed 09 Jul 2025 17:22:59 +0000 asID: 398210 IP address blocks: 207.211.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7b:5b:ae:bc:56:ed:cc:32:e9:dd:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Apr 10 17:22:59 2025 GMT Not After : Jul 9 17:22:59 2025 GMT Subject: CN=048fdf05-6091-43b2-bb59-74e24708713b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:2b:98:af:e0:cf:db:e6:55:e2:be:0a:ad: 0d:38:44:78:95:65:97:4f:cd:49:32:8f:ef:04:f9: 3b:f6:1c:f3:76:35:de:4a:9c:00:f0:84:4b:53:1b: c2:61:d5:59:48:8b:3f:81:29:d9:d8:ca:2f:4c:7f: e6:c8:92:b1:b1:d8:59:3c:90:e0:41:c1:c3:d0:22: 55:0b:4d:2d:ef:9a:57:b6:58:48:4d:9f:ee:11:d9: dc:f3:ae:80:42:50:86:f2:43:bc:b9:d2:14:3e:02: de:54:9c:d0:c8:4e:55:b4:33:99:7b:28:0b:57:39: 7a:5f:64:e8:b5:a1:5a:70:eb:13:db:20:8d:02:02: d4:48:08:d1:41:09:25:bc:4e:dc:d1:d8:58:c4:06: b1:c6:04:24:09:0a:af:d3:ba:51:75:02:30:49:76: 85:84:d9:bf:3e:18:b2:d0:07:81:bb:34:68:a0:07: cb:ff:53:f9:4a:d9:e2:10:25:ec:88:01:21:41:4d: b6:02:96:0f:ce:f7:c6:9a:31:97:4f:40:c9:ea:81: f9:23:c3:d5:51:99:d2:9c:75:51:61:71:49:b5:cb: 95:c0:d0:99:fd:51:0a:a2:75:bf:8f:cf:10:2a:59: 1a:80:d8:7a:c4:65:66:57:bc:b6:b7:bf:76:b4:ac: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:C5:51:71:25:53:14:2B:91:2D:8C:2D:7A:7F:91:3E:BC:B2:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:87:3f:f3:0a:bb:13:21:b1:95:f6:0a:71:29:4a:ac:56:20: d6:82:2c:53:15:39:ec:fe:2e:0a:6a:e3:21:04:78:2e:14:97: 4d:ac:7a:c2:eb:9b:83:9c:ad:76:ae:4d:91:88:64:ce:eb:47: 6b:98:3a:a9:fc:60:3b:f1:53:6c:97:91:49:a9:37:c2:21:2d: 08:f1:92:a7:37:75:2d:07:b1:9a:1a:39:3a:5e:ef:a5:16:2a: 83:b7:4e:b5:dd:a5:f4:6c:74:8a:24:93:6c:de:54:03:48:3a: 3d:d0:c3:6c:00:63:e5:72:ef:57:17:4c:04:d6:b4:7d:1b:94: 25:70:44:0d:9b:d3:ea:cf:fa:37:36:f2:86:49:3d:0f:7e:b7: 26:fc:35:62:43:3a:ed:a8:e7:29:f8:0c:d5:34:37:c2:0c:6d: a2:4f:c9:82:6e:b8:cf:52:01:66:fa:b4:10:1b:0a:98:4c:ee: 3f:ed:d6:49:4e:03:a8:ed:b0:33:f2:42:38:71:77:91:3e:56: 9a:87:fc:aa:04:d5:8b:e6:e7:47:38:84:03:9a:07:60:81:67: 3d:0b:17:78:4d:f3:bd:80:8e:52:5f:09:28:55:dc:a5:64:c1: f1:9f:71:6f:a5:dc:5d:46:10:8a:d9:96:ac:fb:18:00:b5:f3: ed:9f:c6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl7W668Vu3MMund0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDQxMDE3MjI1OVoXDTI1MDcwOTE3MjI1OVowLzEtMCsGA1UEAxMk MDQ4ZmRmMDUtNjA5MS00M2IyLWJiNTktNzRlMjQ3MDg3MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrormK/gz9vmVeK+Cq0NOER4lWWXT81JMo/v BPk79hzzdjXeSpwA8IRLUxvCYdVZSIs/gSnZ2MovTH/myJKxsdhZPJDgQcHD0CJV C00t75pXtlhITZ/uEdnc866AQlCG8kO8udIUPgLeVJzQyE5VtDOZeygLVzl6X2To taFacOsT2yCNAgLUSAjRQQklvE7c0dhYxAaxxgQkCQqv07pRdQIwSXaFhNm/Phiy 0AeBuzRooAfL/1P5StniECXsiAEhQU22ApYPzvfGmjGXT0DJ6oH5I8PVUZnSnHVR YXFJtcuVwNCZ/VEKonW/j88QKlkagNh6xGVmV7y2t792tKxS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwnxVFxJVMUK5EtjC16f5E+vLLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRkMDhlNTMtOGZlNC0z ZWQ1LWI3ZTEtNTViMGFlNTI3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeHP/MKuxMhsZX2CnEpSqxWINaCLFMVOez+Lgpq4yEEeC4Ul02sesLr m4OcrXauTZGIZM7rR2uYOqn8YDvxU2yXkUmpN8IhLQjxkqc3dS0HsZoaOTpe76UW KoO3TrXdpfRsdIokk2zeVANIOj3Qw2wAY+Vy71cXTATWtH0blCVwRA2b0+rP+jc2 8oZJPQ9+tyb8NWJDOu2o5yn4DNU0N8IMbaJPyYJuuM9SAWb6tBAbCphM7j/t1klO A6jtsDPyQjhxd5E+VpqH/KoE1Yvm50c4hAOaB2CBZz0LF3hN872AjlJfCShV3KVk wfGfcW+l3F1GEIrZlqz7GAC18+2fxl8= -----END CERTIFICATE-----Generated at Fri Apr 18 23:30:47 2025 by rpki-client