$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa File: 9b95030b-a993-3973-92d4-5063b41f1b1b.roa (raw, json) Hash identifier: bWaFRMz8fo3s+kyxKbNRK+XsNzpZLOe0AGqml1hR57w= Subject key identifier: 43:6C:AE:E4:8A:AE:D5:6F:0D:CA:9F:31:F0:89:10:4B:A2:6A:D5:1A Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584A1B5FF6984A80F79174FE1A80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 207.202.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:5f:f6:98:4a:80:f7:91:74:fe:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=8b545da8-5032-40e7-9105-d9d30802ea22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:d8:48:b7:6d:ac:0d:fe:9d:d4:20:82:23: 3a:f9:9e:d1:97:49:13:40:75:23:a5:49:4f:df:10: 6f:20:d3:c5:ae:00:65:ea:a5:f5:59:e1:c9:93:0b: 7f:fd:e3:42:72:98:f7:f0:95:a6:cf:a5:4f:4b:13: 62:38:9f:f2:77:20:47:b3:a8:b1:83:10:0e:a0:b0: 48:10:98:e7:7a:fd:a7:9a:39:88:a4:77:a1:62:0c: 36:ea:d1:64:9f:fd:be:88:25:59:fc:8d:74:7f:66: bf:c4:66:bc:3f:f7:a4:26:34:14:11:a8:ff:2b:cc: ac:84:d5:2d:4b:1f:b9:c4:77:4f:8b:65:2f:29:9a: b2:07:b9:66:23:d3:75:74:74:09:48:b6:3f:e8:c6: 4c:0b:b4:ca:ac:d0:25:3c:4e:3a:2f:e7:1a:9b:77: 7d:65:e1:a2:7a:86:0d:9f:db:af:8b:1b:5f:dd:81: 60:d6:8c:52:f9:4f:c9:66:ac:33:ca:70:b4:7d:18: b4:be:d0:2d:e9:35:54:1c:0b:f3:17:76:88:77:74: a7:83:79:c0:e4:2e:13:10:be:ab:d8:04:18:2f:7a: 5c:4d:ab:69:47:91:00:81:1e:84:f7:9f:92:af:6c: a7:64:fe:79:74:c8:4a:3f:d9:be:5a:b5:ea:b2:ea: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6C:AE:E4:8A:AE:D5:6F:0D:CA:9F:31:F0:89:10:4B:A2:6A:D5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d2:b5:79:89:56:27:1e:4d:bc:de:3e:b9:19:e3:a9:23:3f: 55:96:d5:98:6f:de:ef:df:6b:75:94:55:63:43:85:be:71:8d: 33:32:02:13:66:2c:90:ca:13:e3:3e:c9:0b:37:45:d6:86:8e: 70:a9:d7:6d:54:6e:9e:6e:95:e6:88:4f:5d:8a:16:ad:b6:f6: 2b:7b:b2:56:7b:36:26:26:8d:40:e6:75:82:f8:fe:47:94:7a: b7:14:6c:9d:b4:61:c2:9a:70:af:96:bb:4b:06:e6:3d:6b:7b: cb:f8:2c:03:c1:58:f2:0c:b6:ea:51:18:3f:60:12:7a:76:04: 1d:20:b7:dc:5a:2d:a4:25:34:a5:f0:2c:80:15:f9:0f:8f:76: d0:38:1d:92:bc:e4:49:b5:0d:84:b8:1f:be:fe:79:99:7e:30: 05:55:53:8e:36:7f:e0:82:6b:e7:73:9f:b6:9b:b0:bf:ac:f8: d9:d2:83:b5:67:6f:cf:0b:78:7f:4d:9e:cf:f5:9b:a4:43:fc: ad:4b:4d:7f:eb:89:96:ff:43:ea:d9:ca:4e:26:45:c4:d1:16: 5c:37:1e:78:c7:3f:8d:01:21:b4:0e:d4:4d:22:1c:55:09:5b: f0:92:13:4c:e0:b5:95:ea:fd:bb:45:6a:b9:c2:40:e7:2d:75: ed:be:fe:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/aYSoD3kXT+GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk OGI1NDVkYTgtNTAzMi00MGU3LTkxMDUtZDlkMzA4MDJlYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuTYSLdtrA3+ndQggiM6+Z7Rl0kTQHUjpUlP 3xBvINPFrgBl6qX1WeHJkwt//eNCcpj38JWmz6VPSxNiOJ/ydyBHs6ixgxAOoLBI EJjnev2nmjmIpHehYgw26tFkn/2+iCVZ/I10f2a/xGa8P/ekJjQUEaj/K8yshNUt Sx+5xHdPi2UvKZqyB7lmI9N1dHQJSLY/6MZMC7TKrNAlPE46L+cam3d9ZeGieoYN n9uvixtf3YFg1oxS+U/JZqwzynC0fRi0vtAt6TVUHAvzF3aId3Sng3nA5C4TEL6r 2AQYL3pcTatpR5EAgR6E95+Sr2ynZP55dMhKP9m+WrXqsur/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENsruSKrtVvDcqfMfCJEEuiatUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOWI5NTAzMGItYTk5My0z OTczLTkyZDQtNTA2M2I0MWYxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLStXmJViceTbzePrkZ46kjP1WW1Zhv3u/fa3WUVWNDhb5xjTMyAhNm LJDKE+M+yQs3RdaGjnCp121Ubp5uleaIT12KFq229it7slZ7NiYmjUDmdYL4/keU ercUbJ20YcKacK+Wu0sG5j1re8v4LAPBWPIMtupRGD9gEnp2BB0gt9xaLaQlNKXw LIAV+Q+PdtA4HZK85Em1DYS4H77+eZl+MAVVU442f+CCa+dzn7absL+s+NnSg7Vn b88LeH9Nns/1m6RD/K1LTX/riZb/Q+rZyk4mRcTRFlw3HnjHP40BIbQO1E0iHFUJ W/CSE0zgtZXq/btFarnCQOctde2+/hA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:09 2025 by rpki-client