$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa File: 3c3f1331-082e-3016-8d90-383739e6a21b.roa (raw, json) Hash identifier: cvB+BPfM+Nwvf3I1AsjBv0HjOFE+UsYL+rU8cLEA/58= Subject key identifier: 74:9E:76:EB:FF:B8:05:9C:C4:A5:99:23:13:82:9B:66:45:C5:92:F6 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849DF5A75BE740A6EFCF49AA280 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 16509 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:75:be:74:0a:6e:fc:f4:9a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=63253220-b5a8-4c20-96db-685dac498511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:af:d2:8e:f6:79:ff:3f:b0:20:d0:e4:82: c7:f8:7e:6e:c5:9e:a1:c2:89:74:91:cf:96:ee:c8: 8c:93:3e:02:bd:dd:c5:53:e4:39:a8:ec:90:8e:02: da:97:1b:7d:ff:40:dd:06:23:94:f7:d2:2b:bc:1a: 4a:5f:be:bc:0c:c2:15:84:1f:2b:37:ad:2c:a6:81: f7:2c:45:52:76:08:f4:d4:72:63:f5:30:1c:23:5f: c1:25:b0:04:e1:13:46:50:4c:aa:41:63:d1:88:6a: 83:88:b5:85:cd:cb:eb:83:88:f8:e4:79:10:ee:ba: 11:99:6a:96:da:c8:06:b8:5b:d4:2f:a9:6b:7d:33: c9:aa:0b:33:dc:db:39:5a:b2:48:b2:d3:53:20:d6: 2a:59:ef:51:5d:6a:ce:40:e5:d7:3d:2d:80:31:53: b7:2f:8d:d2:d1:7b:f3:b2:21:0d:c6:be:03:74:41: 7a:cc:72:62:38:46:5c:64:72:88:2a:7d:7d:d8:76: 77:10:98:3a:d6:37:28:ba:c5:64:6b:d9:76:a8:cb: f1:4e:28:e1:42:d1:29:de:a5:72:84:5c:dd:2b:d5: 9e:a0:de:43:4f:f9:d2:71:38:1c:38:d2:ce:55:16: d4:04:0c:9e:e2:30:33:d9:d8:ae:d7:4c:ce:d0:25: af:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9E:76:EB:FF:B8:05:9C:C4:A5:99:23:13:82:9B:66:45:C5:92:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:40:8d:1d:10:5d:c3:dc:be:d7:28:48:b9:fd:a2:8c:c1:c6: ff:28:3f:83:09:fd:42:14:fa:00:bd:23:52:df:da:1a:af:cd: 97:ed:85:f4:fc:d9:ad:b3:57:2c:8c:b7:4d:95:c2:99:ad:cb: 2f:9e:73:99:93:1c:a5:40:f1:51:25:3f:e7:fd:3e:44:1d:e7: 8b:e1:bf:ef:ba:5b:2d:d5:40:28:e4:89:ef:2a:9f:e3:24:78: cc:d7:5d:5e:f3:10:6d:02:e5:7a:a8:aa:76:3f:28:5a:8e:54: a8:cb:ab:38:60:3d:73:d9:20:2a:0a:e9:a0:c3:b6:6a:3d:9b: 57:90:33:7e:ab:ca:75:e3:b9:2e:49:f5:55:7b:28:db:df:18: 49:66:83:6a:b8:f5:09:4c:66:ac:eb:c5:d3:df:a5:bd:45:ac: fa:24:a1:25:07:53:28:07:f2:fb:7d:0c:8d:40:7f:3d:06:64: b0:cd:9b:f2:ca:24:4c:11:48:49:db:14:15:16:08:4c:f3:8f: fb:51:35:cf:78:a6:2b:a0:c6:de:8e:75:ba:9a:a9:eb:72:e0: 61:dc:4e:53:1f:7e:d4:3a:f5:25:55:18:be:8f:47:33:ab:3b: e7:e8:79:e6:6f:99:7f:79:ba:cd:2e:2c:21:85:bf:a0:69:fa: 14:e2:d1:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnW+dApu/PSaooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjMyNTMyMjAtYjVhOC00YzIwLTk2ZGItNjg1ZGFjNDk4NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oOv0o72ef8/sCDQ5ILH+H5uxZ6hwol0kc+W 7siMkz4Cvd3FU+Q5qOyQjgLalxt9/0DdBiOU99IrvBpKX768DMIVhB8rN60spoH3 LEVSdgj01HJj9TAcI1/BJbAE4RNGUEyqQWPRiGqDiLWFzcvrg4j45HkQ7roRmWqW 2sgGuFvUL6lrfTPJqgsz3Ns5WrJIstNTINYqWe9RXWrOQOXXPS2AMVO3L43S0Xvz siENxr4DdEF6zHJiOEZcZHKIKn192HZ3EJg61jcousVka9l2qMvxTijhQtEp3qVy hFzdK9WeoN5DT/nScTgcONLOVRbUBAye4jAz2diu10zO0CWvtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSeduv/uAWcxKWZIxOCm2ZFxZL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2MzZjEzMzEtMDgyZS0z MDE2LThkOTAtMzgzNzM5ZTZhMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhAjR0QXcPcvtcoSLn9oozBxv8oP4MJ/UIU+gC9I1Lf2hqvzZfthfT8 2a2zVyyMt02Vwpmtyy+ec5mTHKVA8VElP+f9PkQd54vhv++6Wy3VQCjkie8qn+Mk eMzXXV7zEG0C5XqoqnY/KFqOVKjLqzhgPXPZICoK6aDDtmo9m1eQM36rynXjuS5J 9VV7KNvfGElmg2q49QlMZqzrxdPfpb1FrPokoSUHUygH8vt9DI1Afz0GZLDNm/LK JEwRSEnbFBUWCEzzj/tRNc94piugxt6Odbqaqety4GHcTlMfftQ69SVVGL6PRzOr O+foeeZvmX95us0uLCGFv6Bp+hTi0WQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:45:44 2025 by rpki-client