$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa File: 0917c39d-467b-37b1-b692-3a38d4b29e0d.roa (raw, json) Hash identifier: ajMsBr8dw/+VHDHm19OT6aKCR9mWKsJWZSjuolGD+4U= Subject key identifier: 4A:33:5D:32:71:67:B8:79:2C:BF:C9:C0:A8:30:28:A6:AD:BF:71:24 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584A2ABAD40E3F17E0DD042B7FC0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 207.202.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:d4:0e:3f:17:e0:dd:04:2b:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=313f57f4-9a72-4a4c-9d64-c5f284b539a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:64:41:bf:9d:3a:a8:9b:ea:ae:69:d3:4f: 7f:3e:3c:98:ba:8e:72:45:d3:3b:90:23:c5:ee:31: 7f:c6:9a:40:ae:d6:80:50:92:21:b5:c2:f0:25:3b: e6:1f:cc:43:31:ce:d7:f9:b0:17:ba:1e:c7:56:06: 22:d4:a9:27:1a:0a:18:83:16:c6:22:ee:72:8c:78: 5a:5d:d1:b6:6b:cd:a9:43:1f:55:24:76:1d:c0:e2: 58:d6:aa:c4:5a:6b:01:9a:0d:11:49:71:3e:5d:25: 91:55:73:db:d6:18:ea:ff:bb:81:36:4d:ce:fd:5b: 3e:70:1b:ac:9a:9e:9d:3b:10:35:ac:1d:7d:4c:2b: 60:66:59:da:ba:98:e3:ed:3f:c6:6e:66:97:f8:41: 9f:dc:69:43:0d:4a:0a:79:b8:d8:6f:a0:9b:c5:6d: fa:a6:e4:e2:00:d5:ff:7b:fe:a5:14:9f:c4:95:a9: 0f:d0:d8:36:6d:70:f2:62:2d:c6:1d:f6:50:c2:3f: bd:61:ac:dc:51:77:f8:30:7d:9f:1c:80:10:60:b6: d1:33:2c:9b:34:b5:a8:a8:4f:8f:e5:11:29:8a:ef: 5d:59:ac:24:da:02:03:07:41:4f:41:05:fa:8e:4d: 83:11:f7:3a:72:30:79:50:31:26:f0:7e:c4:f9:ce: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:5D:32:71:67:B8:79:2C:BF:C9:C0:A8:30:28:A6:AD:BF:71:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:10:0f:05:cb:99:13:9f:c8:98:61:b6:30:44:6c:31:c6:e7: 95:90:15:51:33:5d:2f:67:f4:22:ec:fa:7e:07:6c:6e:b4:c5: c5:74:cc:5a:bb:f9:34:dc:fa:88:80:21:d8:80:b9:da:10:7b: 75:cf:36:40:dd:59:79:c3:c3:78:cd:61:2c:f7:a9:5b:8b:15: 08:f5:f0:6b:c0:70:ab:ca:50:c5:38:9a:5f:64:68:f9:c4:9e: 8a:9b:45:65:72:95:c8:ba:0e:1a:fa:89:fd:a4:fa:5c:20:2e: 26:ab:a7:8c:21:34:21:d5:d6:47:65:f2:e8:15:80:bc:88:ee: 88:9f:44:e4:a7:8b:67:50:8e:cf:29:f9:13:88:70:86:01:fd: 33:84:f4:88:3a:cc:12:47:35:49:49:e7:2f:99:67:5f:1b:e9: f6:ac:55:f3:d0:c2:7d:6c:86:69:62:8f:e7:39:88:2c:8f:c8: ca:54:c4:7b:f3:31:37:0d:23:0e:1c:1a:7b:e2:2d:86:18:60: c9:5a:4e:90:4f:63:0d:cc:1c:d3:ef:a0:81:f5:2a:37:70:b4: e0:e2:3f:89:de:8d:d0:c9:e5:fa:d1:58:f5:dc:ab:9d:e3:91: cc:88:cf:40:64:82:e1:fc:19:5b:d8:93:28:25:39:a3:53:35: 27:59:39:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutQOPxfg3QQrf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MzEzZjU3ZjQtOWE3Mi00YTRjLTlkNjQtYzVmMjg0YjUzOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb9kQb+dOqib6q5p009/PjyYuo5yRdM7kCPF 7jF/xppArtaAUJIhtcLwJTvmH8xDMc7X+bAXuh7HVgYi1KknGgoYgxbGIu5yjHha XdG2a82pQx9VJHYdwOJY1qrEWmsBmg0RSXE+XSWRVXPb1hjq/7uBNk3O/Vs+cBus mp6dOxA1rB19TCtgZlnaupjj7T/GbmaX+EGf3GlDDUoKebjYb6CbxW36puTiANX/ e/6lFJ/ElakP0Ng2bXDyYi3GHfZQwj+9YazcUXf4MH2fHIAQYLbRMyybNLWoqE+P 5REpiu9dWawk2gIDB0FPQQX6jk2DEfc6cjB5UDEm8H7E+c4krwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEozXTJxZ7h5LL/JwKgwKKatv3EkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMDkxN2MzOWQtNDY3Yi0z N2IxLWI2OTItM2EzOGQ0YjI5ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0QDwXLmROfyJhhtjBEbDHG55WQFVEzXS9n9CLs+n4HbG60xcV0zFq7 +TTc+oiAIdiAudoQe3XPNkDdWXnDw3jNYSz3qVuLFQj18GvAcKvKUMU4ml9kaPnE noqbRWVylci6Dhr6if2k+lwgLiarp4whNCHV1kdl8ugVgLyI7oifROSni2dQjs8p +ROIcIYB/TOE9Ig6zBJHNUlJ5y+ZZ18b6fasVfPQwn1shmlij+c5iCyPyMpUxHvz MTcNIw4cGnviLYYYYMlaTpBPYw3MHNPvoIH1KjdwtODiP4nejdDJ5frRWPXcq53j kcyIz0BkguH8GVvYkyglOaNTNSdZOTM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:21:15 2025 by rpki-client