$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa File: f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa (raw, json) Hash identifier: g4LBnyTXOjH1gQZsi41wUuhpRlivE4IrjgHHi2GMRcc= Subject key identifier: 5A:BC:AC:57:6F:CD:D8:8A:8D:DC:DD:8E:B6:F0:26:7C:2A:F9:76:6B Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584A5B95AA57120FA44AA354A000 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 398210 IP address blocks: 207.211.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:aa:57:12:0f:a4:4a:a3:54:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=d3660bbe-0006-4c5a-85ce-1db6949c8d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:12:3d:1a:d2:45:1a:ff:8c:b1:23:e2:61: a0:d0:2b:9e:1e:a1:1c:18:a5:2f:3e:02:ef:e0:91: f4:9c:13:b5:87:d9:71:dc:59:77:b7:d2:23:14:90: 98:6c:74:96:a6:e0:5a:28:36:d5:2d:8b:af:d8:2e: 9f:06:92:bf:d5:aa:dd:38:7d:3e:30:09:70:64:29: ed:5d:0d:1f:35:88:b9:4a:a0:0e:23:c1:43:09:d3: 8d:a7:01:30:a4:0e:1b:42:86:ff:1c:da:9a:64:73: 62:3a:df:47:3e:fd:b9:37:5e:bb:4e:81:6e:12:cc: 82:58:0b:90:34:50:df:e1:ff:7d:d1:f0:c5:3a:dc: 39:48:0b:12:0a:8e:99:f3:da:64:22:59:40:b5:34: 24:ca:52:fd:e0:5e:4f:25:0d:c9:7a:23:2e:1d:80: 24:47:e6:81:06:e1:6c:09:a9:8f:83:e7:9f:c9:63: f7:b5:0e:74:26:a6:6f:35:98:aa:ed:a3:63:a9:8f: 58:96:60:bd:ba:84:95:88:e0:24:db:5e:97:a9:ef: f0:b6:1d:5d:cf:7e:c9:38:14:c6:88:98:40:80:11: 3c:a6:32:63:f0:a1:a6:d4:8b:5c:ff:31:48:f5:bc: 4d:bf:8c:11:af:5a:59:a1:48:49:d8:e5:cc:c5:b5: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BC:AC:57:6F:CD:D8:8A:8D:DC:DD:8E:B6:F0:26:7C:2A:F9:76:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:80:c8:ea:77:46:8f:c3:a3:2d:d7:b0:cb:32:fc:89:e5:40: c0:16:00:59:36:65:9b:81:9b:1f:4f:d6:3b:6c:07:a4:6c:36: 76:0e:91:ae:01:62:f4:ca:8e:59:ab:07:9a:45:ce:93:67:f5: f4:9b:f9:0a:2e:b5:fb:a8:dd:a5:21:aa:17:27:54:da:d6:15: 08:44:2c:34:f6:fd:5e:c8:4c:8f:18:80:df:bb:81:80:61:2a: 23:ec:95:f0:da:6c:79:cf:73:e4:41:b2:37:e3:1d:9e:11:6f: 03:49:42:81:19:38:2e:28:eb:d6:84:66:0b:90:c2:be:85:e8: e7:7c:96:c6:9f:fe:79:11:66:a7:f4:f2:a7:6c:26:6a:36:30: bf:34:fa:2a:5c:18:83:37:2b:cc:85:48:91:8c:a4:4e:0a:e8: 73:81:af:90:64:c9:fa:84:e7:46:38:4b:ae:41:e1:d5:35:64: ad:28:6e:57:f0:21:30:b2:62:b8:93:1f:98:70:b8:9a:38:69: 63:7d:24:12:a3:4a:fd:73:a1:be:a9:6c:fc:2a:5f:a3:b8:ad: 88:4f:e9:af:1c:aa:1d:1f:70:b7:ea:9c:5e:c4:47:1d:56:53: 95:6b:39:37:eb:05:02:a4:89:12:2e:f1:99:8e:4f:93:fd:78: bc:67:9c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblapXEg+kSqNUoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ZDM2NjBiYmUtMDAwNi00YzVhLTg1Y2UtMWRiNjk0OWM4ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWYSPRrSRRr/jLEj4mGg0CueHqEcGKUvPgLv 4JH0nBO1h9lx3Fl3t9IjFJCYbHSWpuBaKDbVLYuv2C6fBpK/1ardOH0+MAlwZCnt XQ0fNYi5SqAOI8FDCdONpwEwpA4bQob/HNqaZHNiOt9HPv25N167ToFuEsyCWAuQ NFDf4f990fDFOtw5SAsSCo6Z89pkIllAtTQkylL94F5PJQ3JeiMuHYAkR+aBBuFs CamPg+efyWP3tQ50JqZvNZiq7aNjqY9YlmC9uoSViOAk216Xqe/wth1dz37JOBTG iJhAgBE8pjJj8KGm1Itc/zFI9bxNv4wRr1pZoUhJ2OXMxbXqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq8rFdvzdiKjdzdjrbwJnwq+XZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZjA1Yjk2ZDctY2ViZS0z MmYzLWIxZTItYzM5ZDVkZTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+AyOp3Ro/Doy3XsMsy/InlQMAWAFk2ZZuBmx9P1jtsB6RsNnYOka4B YvTKjlmrB5pFzpNn9fSb+Qoutfuo3aUhqhcnVNrWFQhELDT2/V7ITI8YgN+7gYBh KiPslfDabHnPc+RBsjfjHZ4RbwNJQoEZOC4o69aEZguQwr6F6Od8lsaf/nkRZqf0 8qdsJmo2ML80+ipcGIM3K8yFSJGMpE4K6HOBr5BkyfqE50Y4S65B4dU1ZK0oblfw ITCyYriTH5hwuJo4aWN9JBKjSv1zob6pbPwqX6O4rYhP6a8cqh0fcLfqnF7ERx1W U5VrOTfrBQKkiRIu8ZmOT5P9eLxnnKM= -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:34 2025 by rpki-client