$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa File: b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa (raw, json) Hash identifier: WNgo6u4lp3Q1T3EHyXptq/CRrT2TfWbBhi62RkyIlTA= Subject key identifier: 48:94:2C:A8:32:39:24:12:2C:D3:E6:36:DB:83:0C:97:46:19:FB:A4 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584949FE908F88679ACD81A4EB80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 16509 IP address blocks: 207.202.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:90:8f:88:67:9a:cd:81:a4:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=e4c88e80-38cf-4abd-807b-545b3b274ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:b4:78:fb:c0:a3:26:0b:10:5a:cc:cc:fa: 2a:5a:f2:88:a0:4c:69:4c:a1:dc:9c:16:7e:b7:0e: d1:9a:83:13:0a:0a:e1:8c:c6:78:d1:e0:db:65:36: 51:ab:38:67:fe:18:36:76:36:3d:78:45:85:8e:65: 57:61:75:cb:21:4b:79:2c:c0:1f:42:57:47:58:47: 53:b2:cc:e6:a2:0e:d9:31:96:86:98:5e:8a:30:f6: 6d:d7:4c:e3:f6:f5:a0:c4:84:b2:7d:bc:51:a6:e1: 54:c2:6f:e5:0d:b4:47:9d:0c:95:d1:13:8a:ed:ed: aa:09:64:07:f1:2d:a2:83:88:6c:5e:77:00:66:3c: e7:ac:4c:1d:d3:04:4b:b1:53:27:4e:a0:bd:19:7b: e5:7b:87:67:37:4b:0a:36:73:b1:8e:9e:8c:ec:33: 0c:16:60:44:28:58:48:dc:39:ca:6f:60:32:de:b3: dc:ae:41:bf:5f:41:59:e9:77:b6:8a:f1:c4:aa:b7: 18:93:68:ff:6e:46:f3:a3:05:f0:05:cf:60:10:3d: 4b:cb:c5:d2:42:d5:f0:6f:ef:69:42:c7:43:49:45: ec:1f:e0:88:21:de:5a:5c:3a:73:a7:2c:e4:2f:ba: a0:8b:03:42:49:00:85:1b:b9:09:04:70:df:5a:08: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:2C:A8:32:39:24:12:2C:D3:E6:36:DB:83:0C:97:46:19:FB:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:01:15:41:11:5d:aa:74:55:d8:9f:19:5e:b6:e4:0f:54:05: c7:9f:95:e4:91:b5:46:2c:8e:06:de:cf:89:da:6e:b5:d7:0f: 92:a2:6a:14:ca:04:8b:9e:4f:62:d4:95:76:1c:37:a0:8f:ca: be:75:cb:03:90:96:d8:3a:c8:fa:e4:9a:2b:00:55:11:c3:88: f9:5c:0e:92:d5:db:9c:53:8a:ec:fd:80:02:b0:a9:de:75:9f: de:00:ad:17:0b:76:63:43:73:c8:09:02:2e:70:cf:fd:94:a9: 01:34:40:a7:5a:72:4f:53:5e:9c:8a:94:91:5f:6e:b2:ee:ee: a0:73:c4:d0:ac:6c:49:3b:5b:5b:5a:52:ac:e6:8c:3f:a7:e2: 13:1c:07:fe:63:3b:ef:e0:e6:81:03:5e:fe:c2:c6:f5:dc:8d: 2a:5c:1c:f5:18:22:78:71:ff:a0:4a:f7:ea:e3:0f:52:8a:0d: b2:a2:c4:1a:45:c9:7d:ae:5d:be:cf:5f:79:bc:ab:80:09:39: f2:41:66:45:75:cc:24:90:c0:a6:3c:e3:63:06:2d:e8:f8:9b: 81:b2:78:a7:2c:8b:59:ad:21:c3:8f:91:8f:78:b4:53:9c:f7: fd:06:c6:31:91:d9:ec:77:b6:17:51:15:34:98:7b:55:11:cb: 4a:7c:95:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pCPiGeazYGk64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZTRjODhlODAtMzhjZi00YWJkLTgwN2ItNTQ1YjNiMjc0ZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEe0ePvAoyYLEFrMzPoqWvKIoExpTKHcnBZ+ tw7RmoMTCgrhjMZ40eDbZTZRqzhn/hg2djY9eEWFjmVXYXXLIUt5LMAfQldHWEdT sszmog7ZMZaGmF6KMPZt10zj9vWgxISyfbxRpuFUwm/lDbRHnQyV0ROK7e2qCWQH 8S2ig4hsXncAZjznrEwd0wRLsVMnTqC9GXvle4dnN0sKNnOxjp6M7DMMFmBEKFhI 3DnKb2Ay3rPcrkG/X0FZ6Xe2ivHEqrcYk2j/bkbzowXwBc9gED1Ly8XSQtXwb+9p QsdDSUXsH+CIId5aXDpzpyzkL7qgiwNCSQCFG7kJBHDfWgg81wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiULKgyOSQSLNPmNtuDDJdGGfukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjhjZGZiMWItZWFjOC0z MDY3LWEyYTMtNTJkZjhhMTVhOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoBFUERXap0VdifGV625A9UBcefleSRtUYsjgbez4nabrXXD5KiahTK BIueT2LUlXYcN6CPyr51ywOQltg6yPrkmisAVRHDiPlcDpLV25xTiuz9gAKwqd51 n94ArRcLdmNDc8gJAi5wz/2UqQE0QKdack9TXpyKlJFfbrLu7qBzxNCsbEk7W1ta UqzmjD+n4hMcB/5jO+/g5oEDXv7CxvXcjSpcHPUYInhx/6BK9+rjD1KKDbKixBpF yX2uXb7PX3m8q4AJOfJBZkV1zCSQwKY842MGLej4m4GyeKcsi1mtIcOPkY94tFOc 9/0GxjGR2ex3thdRFTSYe1URy0p8las= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:14 2025 by rpki-client