$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa File: bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa (raw, json) Hash identifier: 7wySNOw0rCzHJj4rYgWkbPyZpY3Jc5x3YnS013lDGj0= Subject key identifier: 25:05:E6:C8:7C:37:6B:D4:F0:0B:73:4D:CE:0E:F5:D1:0C:0D:56:6D Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A5B95A9FBFB6730A33420BA0E Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 398210 IP address blocks: 207.211.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:a9:fb:fb:67:30:a3:34:20:ba:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=9f6222c5-418c-4fba-8715-a0f4ced32d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:1c:78:e2:78:10:35:09:0d:9b:82:6e:0c: 4a:21:9b:57:f6:54:c0:5e:8c:2f:2f:02:d5:16:4f: 33:0a:ba:07:7a:bc:81:ab:db:f9:b0:02:79:45:4c: ec:95:49:49:b8:de:a0:06:95:e4:99:08:87:92:a8: 9e:85:9c:31:2b:bb:68:eb:f6:0c:7f:c2:29:ad:40: 82:d1:c4:f5:0f:0f:07:64:e4:70:b1:06:d9:c0:c4: 87:4b:20:b7:eb:bc:d1:fd:e8:ed:78:1a:dd:72:6c: c3:76:92:58:48:f2:3d:ab:32:89:7e:97:85:a5:4e: ab:57:cc:f5:02:29:51:89:93:e7:8a:7d:f5:67:df: e4:2c:0c:f6:c9:43:99:df:71:2c:92:b4:42:e1:75: 79:39:4a:a8:f4:a5:50:49:09:08:c8:6f:76:be:19: 70:3d:15:c9:43:70:ec:bb:b6:2c:64:59:c8:f8:31: 12:6c:86:7f:ee:c9:af:54:58:7e:68:86:a1:ac:2f: 4c:7f:d6:d6:24:d2:1c:21:04:9b:75:93:5f:ff:3c: 98:4b:d6:78:52:bb:b4:ec:57:2b:3f:50:b5:b1:94: 2b:b4:e0:32:e1:37:c1:cd:24:a3:ba:91:d7:70:3f: f7:96:b4:be:3b:64:d0:df:65:05:4e:ff:0c:73:2e: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:05:E6:C8:7C:37:6B:D4:F0:0B:73:4D:CE:0E:F5:D1:0C:0D:56:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1d:01:c3:6c:ae:4c:89:f1:60:51:02:61:1a:31:ed:8d:0f: 2e:7d:28:c0:7b:e3:11:23:4c:ef:2f:fc:80:3b:fd:32:d4:6e: e1:75:84:72:fc:cc:33:e4:10:76:02:2b:43:77:28:19:27:ae: 21:58:57:6b:80:59:13:4b:9d:77:87:7d:82:4a:74:a2:63:fc: c6:27:67:49:a6:c7:78:56:10:f9:56:0e:1c:60:ee:36:73:6e: dd:09:d2:7c:04:b9:c2:10:34:f0:09:df:fd:cd:b1:35:db:67: cf:07:54:64:3d:6c:12:2f:39:99:c9:33:9b:a0:c7:67:dc:e6: 39:fd:7f:21:63:1a:7f:17:3d:ac:ac:68:1c:b0:2b:9a:64:82: 30:54:83:87:9a:da:db:d3:37:32:19:b0:65:1f:bf:19:cd:e5: 0b:ef:db:aa:fc:ef:99:05:19:db:6b:b6:a2:1e:43:17:10:38: ec:3c:8f:5f:85:a7:ff:db:9a:e8:f2:15:39:55:bb:5c:4d:b0: c1:18:e3:41:33:9e:56:95:46:d9:88:02:c3:da:f4:a4:e4:be: 78:f8:ee:dc:28:ab:37:68:9e:ee:1f:71:ea:a2:51:fb:91:a7: fa:e1:f2:ae:68:f0:c3:f7:c9:b3:30:af:61:84:f9:b2:d7:81: 99:13:aa:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblan7+2cwozQgug4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk OWY2MjIyYzUtNDE4Yy00ZmJhLTg3MTUtYTBmNGNlZDMyZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcAceOJ4EDUJDZuCbgxKIZtX9lTAXowvLwLV Fk8zCroHeryBq9v5sAJ5RUzslUlJuN6gBpXkmQiHkqiehZwxK7to6/YMf8IprUCC 0cT1Dw8HZORwsQbZwMSHSyC367zR/ejteBrdcmzDdpJYSPI9qzKJfpeFpU6rV8z1 AilRiZPnin31Z9/kLAz2yUOZ33EskrRC4XV5OUqo9KVQSQkIyG92vhlwPRXJQ3Ds u7YsZFnI+DESbIZ/7smvVFh+aIahrC9Mf9bWJNIcIQSbdZNf/zyYS9Z4Uru07Fcr P1C1sZQrtOAy4TfBzSSjupHXcD/3lrS+O2TQ32UFTv8Mcy7MKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUF5sh8N2vU8AtzTc4O9dEMDVZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYmRkMDhlNTMtOGZlNC0z ZWQ1LWI3ZTEtNTViMGFlNTI3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYdAcNsrkyJ8WBRAmEaMe2NDy59KMB74xEjTO8v/IA7/TLUbuF1hHL8 zDPkEHYCK0N3KBknriFYV2uAWRNLnXeHfYJKdKJj/MYnZ0mmx3hWEPlWDhxg7jZz bt0J0nwEucIQNPAJ3/3NsTXbZ88HVGQ9bBIvOZnJM5ugx2fc5jn9fyFjGn8XPays aBywK5pkgjBUg4ea2tvTNzIZsGUfvxnN5Qvv26r875kFGdtrtqIeQxcQOOw8j1+F p//bmujyFTlVu1xNsMEY40EznlaVRtmIAsPa9KTkvnj47twoqzdonu4fceqiUfuR p/rh8q5o8MP3ybMwr2GE+bLXgZkTqlA= -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:35 2025 by rpki-client