$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa File: 308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa (raw, json) Hash identifier: W3XlZ9oRSBPxpSXGXjtvzKuRFwrnWvLUQmsXVUgSXiw= Subject key identifier: 80:45:24:BF:1A:40:E1:72:E2:5E:5C:CE:5C:4C:CC:BF:46:64:0C:93 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849DC8FCBD6B08B30D61064F080 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 207.202.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:cb:d6:b0:8b:30:d6:10:64:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=bb12b25a-a8ee-47e0-b80d-c2c9b96edaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:5b:20:3b:4e:6e:a7:b0:ec:50:af:46:bc: 90:0c:e6:2b:05:7e:5c:24:4c:35:1f:e4:63:88:34: bd:aa:6a:42:39:72:4a:9c:ea:0e:d8:c0:62:49:2a: 97:a6:a1:e5:f6:6c:b8:9b:e8:88:c2:20:7c:68:0f: 97:c7:49:f1:e2:f6:bb:2f:a1:61:ab:20:2b:49:e5: 55:82:6f:4c:d2:0a:07:03:15:09:8e:87:a3:25:63: 4e:aa:f6:fe:b7:ab:51:48:d5:00:cc:af:4a:7b:75: fe:5b:6a:4f:45:6c:1e:87:70:09:ad:ad:fb:38:c9: f5:f3:29:a7:9d:82:eb:5f:24:6f:2e:41:4d:b6:9b: e2:3f:b5:97:d3:57:e0:e9:70:c6:91:82:db:b6:7f: af:e5:70:a7:52:23:27:03:b4:d6:52:84:eb:59:97: d9:f7:f0:2a:a3:2a:be:9c:37:9c:66:c9:4e:4b:ad: 00:f1:bc:38:ab:4c:cf:df:c9:8c:1e:b9:78:20:dd: 88:6c:be:ed:be:08:57:f7:52:b9:c3:a3:5f:6c:dc: 70:ed:87:e6:64:ab:69:1d:34:7a:ec:ef:bd:92:d7: 19:be:ac:b1:e3:bb:0f:ff:ac:37:d4:ef:d1:f0:e3: 93:a8:fb:87:37:23:7b:15:14:88:01:42:07:ff:4b: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:45:24:BF:1A:40:E1:72:E2:5E:5C:CE:5C:4C:CC:BF:46:64:0C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9f:e4:51:cc:07:f0:0c:cb:f8:f3:c8:26:58:8d:9b:25:20: bd:53:30:ba:73:cd:9f:e2:a6:36:6e:45:99:c2:c6:92:84:df: 25:a0:4d:4a:78:60:ff:de:ba:d9:fc:b0:1e:aa:2f:59:f7:52: 4b:91:0a:f9:8e:21:2c:7c:1e:fe:68:b6:4a:da:a9:0e:23:20: 92:27:fd:d5:bf:26:c8:49:4e:82:46:ea:a1:19:c4:71:6c:b7: 5c:db:89:bb:79:82:9f:ec:22:f1:ac:b6:e9:89:35:d8:dd:82: da:9f:37:8a:23:7f:c2:36:ad:fb:90:ef:da:f4:1d:9e:dc:20: 5b:4e:c4:4e:0d:d7:f2:04:4f:fc:1d:20:ab:49:8d:43:48:03: 40:ba:de:1b:c1:ae:17:8d:9b:ec:45:4a:ee:6d:a9:4d:fa:49: 66:34:c6:ce:27:a0:9e:a6:77:ab:7e:ee:9d:f6:12:e0:ac:74: c2:ed:c9:4b:36:37:68:48:db:ed:ed:17:5d:ba:a3:b2:d7:9e: a9:c9:26:aa:f7:a7:0a:60:a1:09:a3:03:57:5e:c4:89:b7:ec: 47:6b:07:c7:b3:35:a8:be:0c:54:f1:d0:d4:88:e8:cf:d6:18: c1:9c:b1:f4:02:d6:e1:cb:b0:4f:7f:f5:da:50:06:6b:67:a8: 72:f0:0a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8vWsIsw1hBk8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YmIxMmIyNWEtYThlZS00N2UwLWI4MGQtYzJjOWI5NmVkYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+BbIDtObqew7FCvRryQDOYrBX5cJEw1H+Rj iDS9qmpCOXJKnOoO2MBiSSqXpqHl9my4m+iIwiB8aA+Xx0nx4va7L6FhqyArSeVV gm9M0goHAxUJjoejJWNOqvb+t6tRSNUAzK9Ke3X+W2pPRWweh3AJra37OMn18ymn nYLrXyRvLkFNtpviP7WX01fg6XDGkYLbtn+v5XCnUiMnA7TWUoTrWZfZ9/Aqoyq+ nDecZslOS60A8bw4q0zP38mMHrl4IN2IbL7tvghX91K5w6NfbNxw7YfmZKtpHTR6 7O+9ktcZvqyx47sP/6w31O/R8OOTqPuHNyN7FRSIAUIH/0tCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBFJL8aQOFy4l5czlxMzL9GZAyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMzA4ZGMzMzctODU5Mi0z ZTM5LWJkNzktZDViN2NiMTRhZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8oWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuf5FHMB/AMy/jzyCZYjZslIL1TMLpzzZ/ipjZuRZnCxpKE3yWgTUp4 YP/eutn8sB6qL1n3UkuRCvmOISx8Hv5otkraqQ4jIJIn/dW/JshJToJG6qEZxHFs t1zbibt5gp/sIvGstumJNdjdgtqfN4ojf8I2rfuQ79r0HZ7cIFtOxE4N1/IET/wd IKtJjUNIA0C63hvBrheNm+xFSu5tqU36SWY0xs4noJ6md6t+7p32EuCsdMLtyUs2 N2hI2+3tF126o7LXnqnJJqr3pwpgoQmjA1dexIm37EdrB8ezNai+DFTx0NSI6M/W GMGcsfQC1uHLsE9/9dpQBmtnqHLwCsI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:19 2025 by rpki-client