$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/04227fd4-25a0-375e-932b-a237b125a340.roa File: 04227fd4-25a0-375e-932b-a237b125a340.roa (raw, json) Hash identifier: YUZCSKV7Mj9Igfk7wtCMs4ieG8zTo+MFW6pytt/Yu3Y= Subject key identifier: BC:68:75:FD:C0:EE:CC:10:C4:6B:AF:F5:99:AF:B8:54:B2:08:D6:FC Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584A454041B6FC58F3F267F37FC0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/04227fd4-25a0-375e-932b-a237b125a340.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 46450 IP address blocks: 208.64.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:41:b6:fc:58:f3:f2:67:f3:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=ca7d7b46-bc4f-4704-8288-cb65d97ea5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:e5:b3:67:1a:6b:1f:15:62:60:2c:6f:3c: e7:07:35:4d:a0:0a:fc:b8:95:9f:30:28:c4:d5:96: d8:a6:b7:7e:b9:de:d9:b5:4c:c6:55:77:8c:ea:c5: 13:1b:9b:71:3b:1e:1f:35:fe:b4:b8:4e:f8:4f:c9: be:b0:4e:b4:10:67:ce:13:95:ac:9e:1e:9c:ae:72: 3c:c5:4d:58:0a:17:4d:91:cb:86:c3:f1:7b:d2:03: 63:0e:d4:91:5b:32:67:fa:74:44:a3:dd:92:d9:2b: 17:bb:9a:77:b2:79:60:2b:06:42:86:32:b0:4f:9e: 62:2b:22:a0:13:1c:6a:7a:76:3f:50:39:2f:b5:55: 56:3f:fe:df:89:81:92:b3:79:2d:89:39:67:15:5a: b7:37:35:a9:40:da:ef:46:6c:7d:1a:c6:2d:44:c8: db:e4:8d:ba:7e:cb:28:86:1e:bd:f1:c3:2e:7e:d5: f9:e8:f2:16:b9:28:48:5b:47:b4:b3:f5:66:87:f6: 28:48:62:47:ca:48:fe:89:04:b6:5c:1f:d9:c5:83: 15:e8:8b:84:ce:47:6f:ad:e0:31:78:7d:1b:6e:d5: c4:55:45:69:40:60:40:45:80:ea:be:b7:d5:9d:77: 0d:20:53:19:18:63:c7:79:05:ba:97:61:88:c3:74: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:68:75:FD:C0:EE:CC:10:C4:6B:AF:F5:99:AF:B8:54:B2:08:D6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/04227fd4-25a0-375e-932b-a237b125a340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 208.64.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:f8:25:a6:ad:2e:aa:93:b5:6c:c1:8f:66:73:39:e3:8a: e1:4e:a3:d3:8b:d9:71:f8:66:f9:1c:b7:1b:bb:36:6e:20:de: a9:b0:e0:70:16:8d:82:41:29:b4:ee:a1:72:d0:61:18:b9:ed: d8:0c:c1:73:3c:84:54:5a:43:14:45:c5:b3:29:2c:c5:43:e5: fb:a9:af:0a:0d:de:58:4a:ba:ba:80:ae:97:25:96:74:b7:5e: 04:6f:0d:49:63:3b:a8:6e:80:af:10:a3:2f:63:df:8a:32:95: 4b:13:7d:2d:d0:f2:97:b2:91:04:14:12:65:fd:b5:35:73:52: 6a:00:d2:72:78:9d:f6:81:7c:64:bd:20:93:ce:78:f2:b3:da: 8e:9a:59:cf:70:25:f7:a2:79:2a:fd:d5:68:90:6b:d8:f9:d8: b8:ab:13:31:79:ae:b5:bf:0f:1b:95:74:69:d0:45:12:c7:04: 88:a9:f4:f5:4b:d2:3b:f0:bc:4e:94:50:83:e2:e3:0e:10:d2: 13:f2:74:03:a9:e5:00:7e:1a:fb:86:13:95:65:68:6d:93:b7: 9f:97:bf:8c:aa:6e:eb:a5:81:18:2f:15:29:ca:74:5c:62:ce: 2d:61:3c:04:de:aa:4b:e3:78:40:0d:a0:eb:fc:3f:60:75:3e: d8:8e:7f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEG2/Fjz8mfzf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk Y2E3ZDdiNDYtYmM0Zi00NzA0LTgyODgtY2I2NWQ5N2VhNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H7ls2caax8VYmAsbzznBzVNoAr8uJWfMCjE 1ZbYprd+ud7ZtUzGVXeM6sUTG5txOx4fNf60uE74T8m+sE60EGfOE5Wsnh6crnI8 xU1YChdNkcuGw/F70gNjDtSRWzJn+nREo92S2SsXu5p3snlgKwZChjKwT55iKyKg ExxqenY/UDkvtVVWP/7fiYGSs3ktiTlnFVq3NzWpQNrvRmx9GsYtRMjb5I26fsso hh698cMuftX56PIWuShIW0e0s/Vmh/YoSGJHykj+iQS2XB/ZxYMV6IuEzkdvreAx eH0bbtXEVUVpQGBARYDqvrfVnXcNIFMZGGPHeQW6l2GIw3QhhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxodf3A7swQxGuv9ZmvuFSyCNb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDQyMjdmZDQtMjVhMC0z NzVlLTkzMmItYTIzN2IxMjVhMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgO+CWmrS6qk7VswY9mcznjiuFOo9OL2XH4Zvkctxu7Nm4g3qmw4HAW jYJBKbTuoXLQYRi57dgMwXM8hFRaQxRFxbMpLMVD5fuprwoN3lhKurqArpcllnS3 XgRvDUljO6hugK8Qoy9j34oylUsTfS3Q8peykQQUEmX9tTVzUmoA0nJ4nfaBfGS9 IJPOePKz2o6aWc9wJfeieSr91WiQa9j52LirEzF5rrW/DxuVdGnQRRLHBIip9PVL 0jvwvE6UUIPi4w4Q0hPydAOp5QB+GvuGE5VlaG2Tt5+Xv4yqbuulgRgvFSnKdFxi zi1hPATeqkvjeEANoOv8P2B1PtiOfx8= -----END CERTIFICATE-----Generated at Sun Jun 29 23:06:36 2025 by rpki-client