$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa File: b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa (raw, json) Hash identifier: 4hQeXQZCJ8QuC5RW6uyXewt++wyv9oApZPjKMmsQFIw= Subject key identifier: 54:D0:33:3F:2F:89:53:AD:38:59:F6:DC:F5:FA:70:A3:7F:0F:99:05 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584A295565EA601FD33E5AA38700 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 16509 IP address blocks: 207.202.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:65:ea:60:1f:d3:3e:5a:a3:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=e5cc34bc-58c7-4e75-835a-56c93f2fe831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:2b:aa:7f:41:67:b3:2d:4e:e5:99:e8:d8: 22:6e:af:95:27:73:d6:6e:bc:1d:a2:a3:f2:4b:a9: 77:9b:9c:17:bb:04:61:67:47:6b:f7:00:2e:00:87: 3a:bf:66:55:9a:e7:ae:a6:63:1e:d9:5d:4e:f0:59: ea:e8:67:7a:9e:dd:6c:64:7a:03:fe:65:9d:1c:52: f4:e5:8c:fd:6f:2d:bd:48:83:40:4e:21:c4:e0:5b: 7b:a1:3b:00:1c:bf:50:fe:a0:39:2b:7f:4b:48:3f: 3b:a7:2a:45:36:6d:20:7b:ce:13:a2:f5:86:7e:42: 72:9c:93:77:eb:04:f6:46:1b:93:53:ae:ea:d8:f1: 30:f3:eb:49:23:eb:b0:21:1d:71:b1:b4:1d:c5:67: 4f:20:88:cb:1b:6a:8b:dc:82:51:b9:8c:e5:3c:58: f8:7e:5a:e7:1a:a7:3b:c8:6c:04:86:08:6d:39:28: 25:d1:c5:04:b8:8c:d1:97:33:7b:83:a3:61:c1:26: a2:e8:23:74:cc:e0:55:4f:6a:76:2e:8e:d2:19:a0: 2a:4f:e4:56:ce:d1:9c:62:ca:d9:79:bd:03:97:c7: 36:d2:14:67:16:7c:41:0a:7b:d5:05:5f:eb:fb:f1: 0e:d9:7c:bf:1f:40:f7:c3:ac:ac:c2:33:14:b8:2f: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:33:3F:2F:89:53:AD:38:59:F6:DC:F5:FA:70:A3:7F:0F:99:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6f:a5:b2:c8:a6:8f:ee:3e:26:94:3c:9e:44:44:f1:17:ab: 19:68:6c:59:86:c3:cc:05:bf:9a:76:0c:28:9e:ee:1c:02:e2: 65:49:ae:04:6e:74:dd:a5:8b:84:92:61:35:48:94:80:6a:13: 3d:02:51:a2:c6:10:a8:73:39:ba:2b:52:e5:49:1b:d5:64:3a: 68:ef:8e:d3:81:41:58:9e:fc:d1:3a:7d:6f:48:db:a8:e0:94: d4:77:09:69:dc:5b:a2:f0:41:ba:03:77:bb:f5:3a:91:43:f2: e0:5a:a7:04:da:5d:52:33:7e:ad:fc:fa:c4:6d:43:70:ea:c8: f7:65:07:c3:30:95:09:43:f3:51:4e:65:22:cf:a9:3b:f5:2f: df:cb:92:66:c4:d9:f2:8f:fc:1d:f4:bf:6c:d7:a0:8a:f6:62: 9b:e2:80:fc:a9:e2:2f:fe:02:bf:46:02:2c:a3:a3:cf:ab:3d: 1a:12:76:d4:bd:f8:b0:57:72:95:60:81:78:7a:57:3e:b1:3e: 80:ec:95:1a:11:bc:43:a4:c4:c6:e2:14:a4:ed:0d:52:9b:ce: 51:c0:f2:f3:ce:1f:e6:69:40:b8:72:27:e8:31:7b:28:eb:3e: 02:1f:4a:34:0d:f0:d6:ce:7c:90:1b:42:30:38:3a:dc:5f:e3: c7:c4:84:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWXqYB/TPlqjhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk ZTVjYzM0YmMtNThjNy00ZTc1LTgzNWEtNTZjOTNmMmZlODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Mrqn9BZ7MtTuWZ6Ngibq+VJ3PWbrwdoqPy S6l3m5wXuwRhZ0dr9wAuAIc6v2ZVmueupmMe2V1O8Fnq6Gd6nt1sZHoD/mWdHFL0 5Yz9by29SINATiHE4Ft7oTsAHL9Q/qA5K39LSD87pypFNm0ge84TovWGfkJynJN3 6wT2RhuTU67q2PEw8+tJI+uwIR1xsbQdxWdPIIjLG2qL3IJRuYzlPFj4flrnGqc7 yGwEhghtOSgl0cUEuIzRlzN7g6NhwSai6CN0zOBVT2p2Lo7SGaAqT+RWztGcYsrZ eb0Dl8c20hRnFnxBCnvVBV/r+/EO2Xy/H0D3w6yswjMUuC/UIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTQMz8viVOtOFn23PX6cKN/D5kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjhjZGZiMWItZWFjOC0z MDY3LWEyYTMtNTJkZjhhMTVhOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtvpbLIpo/uPiaUPJ5ERPEXqxlobFmGw8wFv5p2DCie7hwC4mVJrgRu dN2li4SSYTVIlIBqEz0CUaLGEKhzOborUuVJG9VkOmjvjtOBQVie/NE6fW9I26jg lNR3CWncW6LwQboDd7v1OpFD8uBapwTaXVIzfq38+sRtQ3DqyPdlB8MwlQlD81FO ZSLPqTv1L9/LkmbE2fKP/B30v2zXoIr2YpvigPyp4i/+Ar9GAiyjo8+rPRoSdtS9 +LBXcpVggXh6Vz6xPoDslRoRvEOkxMbiFKTtDVKbzlHA8vPOH+ZpQLhyJ+gxeyjr PgIfSjQN8NbOfJAbQjA4Otxf48fEhGU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:06 2025 by rpki-client