$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa File: 5637e173-3e78-350b-928e-7c47064f489f.roa (raw, json) Hash identifier: dqJ+IXiFMKVup8dwkOkmwFRImuZ/wlx1Qy2v5cdE/Lg= Subject key identifier: 1E:DA:33:89:D2:30:D6:9F:27:C9:5B:07:61:6E:D4:C9:3C:3B:76:61 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285849EBEA5080C06324A7E5BFF200 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 51964 IP address blocks: 200.30.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:50:80:c0:63:24:a7:e5:bf:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=5f996fdf-1f2c-45b5-8cce-d126a253e854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:f6:06:91:0d:8f:d3:c5:1d:f1:1b:83:fe: 1e:0e:d8:05:5e:3b:fa:8c:22:42:90:5a:6f:11:8d: 3d:48:9c:57:a4:73:bd:4f:bc:39:49:61:6d:39:83: 48:ba:44:0b:a4:0a:9f:48:ba:2a:6b:71:19:c7:b5: 6a:91:56:08:80:e0:c6:f9:19:ef:c9:d3:fb:c7:1e: 5c:84:1c:e8:0a:cc:de:78:ce:37:20:07:8c:be:bd: ee:1b:9c:d3:c7:1a:f7:de:44:5c:32:60:4f:8f:b5: 47:ec:f7:2d:aa:c8:f6:34:d7:2a:44:b4:b1:10:80: fb:33:ee:ff:35:d9:18:e0:6d:c0:83:91:8d:38:25: 5c:3a:38:d8:61:d6:da:e6:a1:08:0a:cc:1b:0c:8f: 32:ae:f5:a7:7e:32:7b:66:83:f3:3f:a4:07:5b:9d: de:4f:84:84:9c:1f:08:1a:97:4a:0f:b6:01:01:53: 56:06:bb:21:5e:5a:54:b1:c2:b8:6d:55:53:4c:40: 72:17:e6:a7:50:e5:89:da:52:6c:42:72:dc:c9:9e: 7d:75:f4:56:28:46:10:e1:c7:ba:da:b3:25:fe:61: 6c:55:40:c1:c0:55:e3:5d:75:c2:06:44:7f:24:e6: 6f:9d:41:3b:cb:de:04:9e:fd:11:a5:e6:f1:46:65: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DA:33:89:D2:30:D6:9F:27:C9:5B:07:61:6E:D4:C9:3C:3B:76:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 200.30.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:4c:c0:2f:db:08:48:18:57:f3:f2:9a:ff:13:6d:ac:e1:ce: bb:e1:c7:9b:9c:35:5c:b9:d1:b9:a6:20:12:d7:81:85:92:4a: 4a:b0:62:af:e7:d0:f2:ca:19:08:cf:1f:7e:1c:f9:6a:af:18: 7b:04:7b:1c:37:13:22:83:e0:dd:f4:fd:a4:62:3d:08:1f:68: 91:19:8c:9f:07:ce:04:81:8a:e0:9a:ea:df:a0:1c:f7:81:67: aa:33:25:f9:e8:04:42:16:04:93:ce:fb:59:d8:33:18:8f:42: ee:e6:fe:4f:e1:bc:50:9d:76:a9:f4:21:77:f3:c5:2b:ae:37: 47:cf:87:97:73:3c:46:86:5e:16:06:dd:0d:85:60:47:1e:4c: d7:fd:dc:c2:79:b9:bf:14:78:5b:9c:59:5d:f9:a9:d9:27:83: 5b:18:35:09:ae:fc:9b:9c:b1:c0:79:a8:62:f5:2c:b8:1c:36: bc:e7:5d:30:9d:87:35:74:87:b2:d9:78:ea:7d:b7:c5:5c:6d: be:5e:45:44:5e:09:b1:58:5c:47:0c:02:8b:03:d5:a3:f9:d1: 14:2b:4a:3d:f7:3a:00:9e:14:65:66:2a:b5:09:28:7c:12:d2: 38:cc:8c:a9:86:2c:35:ba:79:55:db:5a:e5:9a:4c:be:eb:e3: 27:dd:4a:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6lCAwGMkp+W/8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NWY5OTZmZGYtMWYyYy00NWI1LThjY2UtZDEyNmEyNTNlODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo532BpENj9PFHfEbg/4eDtgFXjv6jCJCkFpv EY09SJxXpHO9T7w5SWFtOYNIukQLpAqfSLoqa3EZx7VqkVYIgODG+RnvydP7xx5c hBzoCszeeM43IAeMvr3uG5zTxxr33kRcMmBPj7VH7Pctqsj2NNcqRLSxEID7M+7/ NdkY4G3Ag5GNOCVcOjjYYdba5qEICswbDI8yrvWnfjJ7ZoPzP6QHW53eT4SEnB8I GpdKD7YBAVNWBrshXlpUscK4bVVTTEByF+anUOWJ2lJsQnLcyZ59dfRWKEYQ4ce6 2rMl/mFsVUDBwFXjXXXCBkR/JOZvnUE7y94Env0RpebxRmVW5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7aM4nSMNafJ8lbB2Fu1Mk8O3ZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNTYzN2UxNzMtM2U3OC0z NTBiLTkyOGUtN2M0NzA2NGY0ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVMwC/bCEgYV/Pymv8Tbazhzrvhx5ucNVy50bmmIBLXgYWSSkqwYq/n 0PLKGQjPH34c+WqvGHsEexw3EyKD4N30/aRiPQgfaJEZjJ8HzgSBiuCa6t+gHPeB Z6ozJfnoBEIWBJPO+1nYMxiPQu7m/k/hvFCddqn0IXfzxSuuN0fPh5dzPEaGXhYG 3Q2FYEceTNf93MJ5ub8UeFucWV35qdkng1sYNQmu/JucscB5qGL1LLgcNrznXTCd hzV0h7LZeOp9t8Vcbb5eRUReCbFYXEcMAosD1aP50RQrSj33OgCeFGVmKrUJKHwS 0jjMjKmGLDW6eVXbWuWaTL7r4yfdSqY= -----END CERTIFICATE-----Generated at Sat Jun 7 16:23:31 2025 by rpki-client