$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa File: 8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa (raw, json) Hash identifier: 0YB42janaEOe8q84F0X725jnGkW+O5RuYINel79ypco= Subject key identifier: 3D:22:F4:36:9F:71:86:1F:D0:01:81:60:A1:5B:8F:D5:1D:0B:1E:0A Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849DF5A75AE2CA599D5BD78A140 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 14618 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:75:ae:2c:a5:99:d5:bd:78:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=ede29740-ff0e-4d9d-b336-670a3546e1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:06:18:b7:ee:6e:3c:17:55:9a:1c:8b:43: a5:74:fb:ab:ee:03:eb:4c:e7:5e:0b:be:d4:99:da: b5:d3:d9:0c:f4:ca:81:41:76:08:94:23:45:7c:c9: 62:89:b5:9f:b3:9c:97:78:ac:af:ce:58:d8:33:94: fc:7f:a2:08:42:cc:0b:35:8c:ff:0c:97:9a:88:d7: 9f:d5:bc:ea:f6:82:23:07:41:04:fe:13:13:8a:fa: 28:a9:7b:98:91:72:a4:b9:0f:de:e6:b1:0a:e8:30: be:e1:4f:ab:4e:0d:6b:d9:4c:bb:34:1e:fc:c8:46: e5:b1:1c:f9:ac:e7:1f:c5:7c:23:6a:2e:90:17:d1: b9:c5:02:4e:77:b4:43:ab:82:13:a8:dd:ca:9e:7c: b4:75:bc:5a:f0:0e:3f:32:88:bc:90:d4:6a:c2:8f: d8:aa:06:d0:3e:de:9d:1f:fa:40:a6:49:2d:8c:7a: 57:ed:fe:c0:5d:c1:e2:80:aa:63:ea:e5:d9:9f:66: 2c:3d:d7:7b:ea:e3:86:3e:9c:17:19:dc:02:60:75: 48:1f:1a:f8:b7:69:39:aa:a8:24:88:d4:e0:96:80: ca:39:04:55:b9:25:cf:bd:a7:c8:99:7b:18:41:d2: 4b:62:11:9f:0d:90:5b:ab:a6:eb:44:ee:c0:3d:81: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:F4:36:9F:71:86:1F:D0:01:81:60:A1:5B:8F:D5:1D:0B:1E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:84:dc:48:75:2a:2d:7a:6f:5c:08:2b:53:b9:a2:f9:62:a6: f0:6c:10:34:0f:4f:36:f0:49:9b:6b:56:b8:2b:9b:f6:5b:14: cc:9a:5b:d0:29:95:56:17:cf:42:c7:47:ce:5a:ac:c5:a1:aa: cb:ae:18:01:e7:04:0d:4b:8f:a8:67:e2:ba:f9:a1:d7:8a:0f: 69:43:a5:bd:59:d9:f0:73:d5:08:3c:80:71:76:86:7b:b9:60: 80:fe:43:89:c4:cd:b9:99:77:08:7c:e5:43:30:72:27:c6:b4: b0:28:12:31:86:75:64:4a:6e:c7:f3:25:9e:20:5f:27:53:6b: d9:f0:c3:ee:8a:a4:4f:1c:54:e8:ea:16:76:65:55:14:be:73: 8a:78:85:0a:26:1f:fc:12:99:66:27:c3:ee:27:62:01:55:36: 75:46:25:31:0e:66:fb:a4:c4:d4:ee:6e:3c:6e:df:4e:dd:b5: 5e:19:ac:f5:65:2d:0a:7c:e2:55:8d:3e:22:11:f8:6d:99:b3: ed:b2:33:89:38:75:16:d9:8c:9d:80:ea:71:02:55:b3:0f:c8: 52:b6:b8:d2:13:f7:a0:86:d6:b8:88:43:57:b4:52:26:13:2f: 94:71:c4:ea:62:f0:f6:20:d1:3a:7f:64:b8:40:e5:3b:35:8d: d9:81:c0:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnWuLKWZ1b14oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZWRlMjk3NDAtZmYwZS00ZDlkLWIzMzYtNjcwYTM1NDZlMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmUGGLfubjwXVZoci0OldPur7gPrTOdeC77U mdq109kM9MqBQXYIlCNFfMliibWfs5yXeKyvzljYM5T8f6IIQswLNYz/DJeaiNef 1bzq9oIjB0EE/hMTivooqXuYkXKkuQ/e5rEK6DC+4U+rTg1r2Uy7NB78yEblsRz5 rOcfxXwjai6QF9G5xQJOd7RDq4ITqN3Knny0dbxa8A4/Moi8kNRqwo/YqgbQPt6d H/pApkktjHpX7f7AXcHigKpj6uXZn2YsPdd76uOGPpwXGdwCYHVIHxr4t2k5qqgk iNTgloDKOQRVuSXPvafImXsYQdJLYhGfDZBbq6brRO7APYFdLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0i9DafcYYf0AGBYKFbj9UdCx4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOGMyMjM0ZWMtYjNkNC0z OGViLWIwZjItYzI3NTVlNzc0MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByE3Eh1Ki16b1wIK1O5ovlipvBsEDQPTzbwSZtrVrgrm/ZbFMyaW9Ap lVYXz0LHR85arMWhqsuuGAHnBA1Lj6hn4rr5odeKD2lDpb1Z2fBz1Qg8gHF2hnu5 YID+Q4nEzbmZdwh85UMwcifGtLAoEjGGdWRKbsfzJZ4gXydTa9nww+6KpE8cVOjq FnZlVRS+c4p4hQomH/wSmWYnw+4nYgFVNnVGJTEOZvukxNTubjxu307dtV4ZrPVl LQp84lWNPiIR+G2Zs+2yM4k4dRbZjJ2A6nECVbMPyFK2uNIT96CG1riIQ1e0UiYT L5RxxOpi8PYg0Tp/ZLhA5Ts1jdmBwIk= -----END CERTIFICATE-----Generated at Sun Jun 15 13:20:02 2025 by rpki-client