$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/ce9bb094-544d-33b3-b8a1-e7cd6fee23df.roa File: ce9bb094-544d-33b3-b8a1-e7cd6fee23df.roa (raw, json) Hash identifier: /yYrqJ207O5sTpWjOAjA6+AKn4qYF0pFbUV/du2HvcA= Subject key identifier: 81:D0:4C:29:CF:05:D8:B7:FC:57:6B:F3:C3:73:E8:F1:02:57:59:25 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285848FD56D060818E46578438C6E0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/ce9bb094-544d-33b3-b8a1-e7cd6fee23df.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 207.202.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:d0:60:81:8e:46:57:84:38:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=c80f859d-54c3-4c38-8cd6-319afa823d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:21:17:54:e8:2e:ff:4f:4f:27:c1:57:b0: 23:4a:bb:eb:8b:7c:5a:de:f3:96:b5:4d:6b:06:57: 07:76:2e:7d:be:ba:cc:f7:ac:bd:6e:cd:f1:f8:7d: 33:e8:ee:f3:33:18:3c:df:77:80:d7:73:cb:f5:f3: db:7c:70:33:51:e8:62:09:e0:ef:75:6f:1f:85:99: 80:ad:7c:ca:ec:99:4b:03:7e:e5:61:97:e5:cc:3c: 8a:ee:c8:70:67:b0:dc:5a:ed:b8:54:6b:78:10:71: 8e:5c:87:87:d8:0b:8f:53:d8:d9:12:bb:0b:17:9b: ef:61:88:6b:89:18:11:ea:e5:e8:d3:79:b1:cf:08: 4e:e4:3e:db:63:e0:24:c9:3d:63:6c:c3:b4:86:98: 74:c7:78:90:1d:28:ca:3d:14:f3:22:16:7e:ad:0b: 38:ef:fb:e4:76:b9:71:77:6e:5b:95:6c:d8:aa:d0: 1e:e4:5b:95:11:b3:b4:ea:5b:d0:ba:99:76:91:26: f4:df:01:f8:ea:b7:70:3b:e5:73:2e:c9:dc:a9:5e: e9:80:49:84:df:37:db:db:69:3f:d5:23:f1:49:b2: 85:35:a9:e3:53:c4:28:3c:b6:25:60:2b:9e:44:f2: 11:54:8c:bc:a2:93:fd:1f:c8:c8:75:27:1b:66:8d: 5f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D0:4C:29:CF:05:D8:B7:FC:57:6B:F3:C3:73:E8:F1:02:57:59:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/ce9bb094-544d-33b3-b8a1-e7cd6fee23df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bd:4b:b5:03:03:07:08:aa:c9:1d:5d:2a:45:37:37:a6:a0: b8:77:37:e1:af:c1:9d:6e:6d:a0:1e:81:6a:79:8d:68:dd:33: 9f:f0:0a:72:7c:04:60:76:bb:74:0d:14:c9:67:a5:7d:aa:5b: 0c:c7:29:07:8a:58:ba:08:29:42:2a:9d:fa:82:a3:48:0e:64: 5b:0b:81:8f:eb:3e:3c:fe:65:4f:7f:be:08:20:9b:29:d7:1f: c4:59:05:85:28:a6:08:91:eb:2a:1c:e4:f7:38:b0:25:0e:23: 59:34:5a:c7:86:4e:31:34:6f:28:a3:15:e2:1b:ec:61:b8:8e: a4:06:da:5a:49:61:0f:34:05:93:73:2c:8f:c0:1d:55:3b:ee: fd:7b:18:4e:a1:b6:11:42:41:8b:eb:15:76:e9:31:ef:0d:ea: 52:25:ed:77:6b:f5:84:bf:df:db:9f:ed:4c:cf:2a:c8:8b:d4: 14:8b:fe:2a:5c:76:df:10:77:6b:e2:cf:f3:8d:f8:76:5e:5c: 33:f3:60:96:1c:23:cd:f2:f6:d0:8e:2b:af:3a:0a:2a:3f:52: 41:a5:1a:39:f4:8a:47:01:30:60:e3:68:91:a9:8c:69:5d:0a: f4:94:6a:7e:e8:56:67:67:60:9e:90:bc:5c:b0:9c:a5:7a:b4: f4:03:1d:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VtBggY5GV4Q4xuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzgwZjg1OWQtNTRjMy00YzM4LThjZDYtMzE5YWZhODIzZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhMhF1ToLv9PTyfBV7AjSrvri3xa3vOWtU1r BlcHdi59vrrM96y9bs3x+H0z6O7zMxg833eA13PL9fPbfHAzUehiCeDvdW8fhZmA rXzK7JlLA37lYZflzDyK7shwZ7DcWu24VGt4EHGOXIeH2AuPU9jZErsLF5vvYYhr iRgR6uXo03mxzwhO5D7bY+AkyT1jbMO0hph0x3iQHSjKPRTzIhZ+rQs47/vkdrlx d25blWzYqtAe5FuVEbO06lvQupl2kSb03wH46rdwO+VzLsncqV7pgEmE3zfb22k/ 1SPxSbKFNanjU8QoPLYlYCueRPIRVIy8opP9H8jIdScbZo1fuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHQTCnPBdi3/Fdr88Nz6PECV1klMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvY2U5YmIwOTQtNTQ0ZC0z M2IzLWI4YTEtZTdjZDZmZWUyM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8oWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+9S7UDAwcIqskdXSpFNzemoLh3N+GvwZ1ubaAegWp5jWjdM5/wCnJ8 BGB2u3QNFMlnpX2qWwzHKQeKWLoIKUIqnfqCo0gOZFsLgY/rPjz+ZU9/vgggmynX H8RZBYUopgiR6yoc5Pc4sCUOI1k0WseGTjE0byijFeIb7GG4jqQG2lpJYQ80BZNz LI/AHVU77v17GE6hthFCQYvrFXbpMe8N6lIl7Xdr9YS/39uf7UzPKsiL1BSL/ipc dt8Qd2viz/ON+HZeXDPzYJYcI83y9tCOK686Cio/UkGlGjn0ikcBMGDjaJGpjGld CvSUan7oVmdnYJ6QvFywnKV6tPQDHX0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:03 2025 by rpki-client