$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa File: bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa (raw, json) Hash identifier: /5QLdTdxu/G1c0MzKlGKeKuNSlMVLtoRq3MU6xVsB3M= Subject key identifier: 00:9A:D4:44:C4:53:44:01:4B:5A:62:EE:C9:B7:AE:26:2C:03:55:F7 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584986AB41547B64822223FDC910 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa Signing time: Mon 14 Apr 2025 18:37:12 +0000 ROA not before: Mon 14 Apr 2025 18:37:12 +0000 ROA not after: Sun 13 Jul 2025 18:37:12 +0000 asID: 6327 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:ab:41:54:7b:64:82:22:23:fd:c9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Apr 14 18:37:12 2025 GMT Not After : Jul 13 18:37:12 2025 GMT Subject: CN=4d61a14e-e96b-4b1b-a3b2-26e2dba64244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:6e:c6:b5:c3:cb:9b:f0:6f:be:22:86:39: 97:d0:dd:8a:c2:9c:78:4f:20:2c:9e:9d:b9:7d:46: c3:06:db:e5:c7:d5:d2:ba:8f:fc:d1:dd:7f:c2:e1: df:2d:f5:c9:fb:72:76:03:1d:e4:e0:73:2f:63:b0: 29:6f:85:88:b6:f0:01:b6:4c:ac:a2:20:50:5c:4f: d1:04:44:c5:79:7e:83:7d:52:99:f2:6e:af:57:56: 86:ed:ac:e1:79:a3:d7:67:a2:9b:48:37:55:b1:0b: cd:a3:85:74:86:36:6a:f1:8d:0c:31:ad:cd:43:76: c9:93:33:14:b3:e8:0e:e1:88:23:51:99:3b:9a:42: 3e:2c:13:f6:f2:fb:a9:af:72:24:09:ca:9f:13:fe: 17:dc:eb:b2:79:63:9a:18:1d:08:e5:40:05:cd:72: ad:5b:9a:33:42:0d:7d:31:ff:8f:70:3f:53:0a:7d: 7c:11:ff:31:a6:22:22:24:eb:0f:a7:be:eb:48:85: a5:14:a6:59:1e:68:29:ac:eb:cd:a4:1d:47:7b:ba: 67:b5:c3:2b:f1:03:c1:c1:88:2c:cd:4e:aa:9c:3a: d0:b5:4b:53:af:41:ae:c7:7d:fd:76:97:bf:cd:91: 2d:74:28:2b:9f:59:f7:71:a9:21:16:cd:bf:1f:0a: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:D4:44:C4:53:44:01:4B:5A:62:EE:C9:B7:AE:26:2C:03:55:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:72:20:d6:b2:d6:bc:00:2e:79:7e:ed:6f:5e:6d:0a:05:19: 79:b2:a5:97:52:b4:32:71:80:ef:c9:c1:8f:50:bd:89:cd:32: f2:26:f8:21:a5:9a:d6:c3:ca:58:26:69:6b:6a:7d:00:f6:7a: ee:a8:18:3d:3c:0e:56:b3:49:c0:90:0c:0d:12:25:e3:03:18: 55:83:32:a8:27:6a:f1:ba:25:94:bb:75:ab:73:62:fc:af:af: a0:5f:24:bc:56:bf:d2:78:14:8d:0f:db:0b:5d:64:44:79:b2: a5:e0:38:1d:85:39:81:c8:7b:32:61:99:84:d5:06:6c:a0:9a: 02:8c:de:93:fa:6c:7b:2a:28:d2:94:63:a1:49:f4:bb:0f:c8: 8b:7e:17:eb:85:ec:af:ca:f5:6c:a5:cb:12:17:18:07:a0:9f: d7:dd:fd:d4:dd:50:83:86:81:4d:f4:55:de:78:e1:75:89:80: fd:ae:23:0b:80:31:1b:1a:14:f9:eb:28:c1:f0:d2:4d:1b:40: 31:f5:32:d2:f7:a4:e6:7f:a2:41:0b:c5:4a:13:49:2c:cb:ac: 3d:6b:53:17:a3:d8:d2:9c:2e:c6:fd:e4:1f:ec:e2:c2:46:f9: 7e:14:95:27:d0:74:41:db:61:ed:b9:35:6b:95:73:2c:68:29: c3:70:cc:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGq0FUe2SCIiP9yRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI1MDQxNDE4MzcxMloXDTI1MDcxMzE4MzcxMlowLzEtMCsGA1UEAxMk NGQ2MWExNGUtZTk2Yi00YjFiLWEzYjItMjZlMmRiYTY0MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ZuxrXDy5vwb74ihjmX0N2Kwpx4TyAsnp25 fUbDBtvlx9XSuo/80d1/wuHfLfXJ+3J2Ax3k4HMvY7Apb4WItvABtkysoiBQXE/R BETFeX6DfVKZ8m6vV1aG7azheaPXZ6KbSDdVsQvNo4V0hjZq8Y0MMa3NQ3bJkzMU s+gO4YgjUZk7mkI+LBP28vupr3IkCcqfE/4X3OuyeWOaGB0I5UAFzXKtW5ozQg19 Mf+PcD9TCn18Ef8xpiIiJOsPp77rSIWlFKZZHmgprOvNpB1He7pntcMr8QPBwYgs zU6qnDrQtUtTr0Gux339dpe/zZEtdCgrn1n3cakhFs2/HwoFLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACa1ETEU0QBS1pi7sm3riYsA1X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvYmRiMmZjZGYtMWUwNC0z Y2IyLTkwODMtYjIxMWQ5YjU2NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRyINay1rwALnl+7W9ebQoFGXmypZdStDJxgO/JwY9QvYnNMvIm+CGl mtbDylgmaWtqfQD2eu6oGD08DlazScCQDA0SJeMDGFWDMqgnavG6JZS7datzYvyv r6BfJLxWv9J4FI0P2wtdZER5sqXgOB2FOYHIezJhmYTVBmygmgKM3pP6bHsqKNKU Y6FJ9LsPyIt+F+uF7K/K9WylyxIXGAegn9fd/dTdUIOGgU30Vd544XWJgP2uIwuA MRsaFPnrKMHw0k0bQDH1MtL3pOZ/okELxUoTSSzLrD1rUxej2NKcLsb95B/s4sJG +X4UlSfQdEHbYe25NWuVcyxoKcNwzM4= -----END CERTIFICATE-----Generated at Tue May 6 03:26:03 2025 by rpki-client