$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/dc8de600-5727-3add-9d95-4f3d4cae5940.roa File: dc8de600-5727-3add-9d95-4f3d4cae5940.roa (raw, json) Hash identifier: 85s6XhDIJ6qXqZaYG6cUVWovIFsWDHyc5TygBjTz/JE= Subject key identifier: A0:3A:9C:9B:62:E8:99:B8:CD:CB:B7:67:62:1E:1B:00:25:AA:61:89 Certificate issuer: /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4 Certificate serial: 010D0C9F4328584961B9985218DD52AE4BD92050 Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/dc8de600-5727-3add-9d95-4f3d4cae5940.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 14618 IP address blocks: 207.174.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:98:52:18:dd:52:ae:4b:d9:20:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=233b3706-cfb1-42b0-b5a7-35eb11f540ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:2c:c6:b6:33:ef:bc:bf:09:d1:b8:8a:37: 26:1c:f4:43:11:5e:05:21:2c:7b:ca:e1:f9:dc:c8: 62:83:d2:1a:67:11:71:e9:e9:e3:03:b0:44:0c:5a: 8a:00:7f:e4:9f:b7:a3:de:a6:f6:8a:b5:d5:31:63: fa:ad:eb:51:2a:39:9e:80:ab:bf:7f:fe:bb:b4:0b: 48:e8:d4:ce:a7:04:87:84:8a:6b:23:39:d2:24:2f: 8b:e3:9e:bf:3d:57:8e:b2:15:90:96:23:54:93:71: c0:8b:b9:30:6d:e8:33:f8:70:16:c6:4e:20:0c:e5: 45:38:5b:1c:23:ce:cc:30:48:49:2f:83:3a:f7:11: 54:f9:1a:53:53:93:29:08:5b:f7:e8:1b:ad:f8:fa: 65:22:e4:14:79:3c:44:1d:ea:cc:4b:0c:7a:95:09: dc:ef:0c:2c:f3:77:a1:02:fd:4e:ba:1c:cf:a1:9c: 5c:5e:72:c5:ba:82:58:48:46:e5:bc:8f:79:a2:1e: 0a:5e:26:f5:03:e3:f8:36:a3:59:c3:40:1b:da:85: 7f:50:01:b5:af:db:2f:45:ad:98:c0:48:35:79:70: 55:a9:a2:70:e5:39:05:12:ef:d2:a2:f6:1b:e0:d6: 9b:6d:1c:84:0d:f1:a6:40:7c:15:4e:a8:57:ce:fa: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3A:9C:9B:62:E8:99:B8:CD:CB:B7:67:62:1E:1B:00:25:AA:61:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/dc8de600-5727-3add-9d95-4f3d4cae5940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl X509v3 Authority Key Identifier: keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer sbgp-ipAddrBlock: critical IPv4: 207.174.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:06:b9:79:25:13:38:a3:ba:10:f7:62:16:ed:f6:b5:7e:a2: b6:15:32:f4:72:0f:56:ab:dd:24:a4:40:f2:74:e9:5f:8b:8c: 48:18:c0:dd:be:d6:76:a7:d6:38:02:ff:92:0f:a3:94:0e:0a: 53:b2:95:06:7d:c7:6f:ca:d3:bd:81:6c:a4:ee:9b:fd:fb:a3: 91:af:6f:4f:7d:3d:96:68:bb:0c:d1:f6:88:e2:69:21:06:13: 8e:65:c9:6c:fc:e0:20:7a:fd:0d:4c:ae:3a:f6:42:d0:0c:ed: d7:04:e0:ce:d0:bd:2c:33:29:9d:b2:10:e0:33:e9:00:80:ed: 27:12:93:82:69:64:d6:2e:7d:c8:9a:d7:d2:b3:09:58:f8:ad: c8:46:00:6b:be:e5:77:8e:6e:41:4a:ea:54:f4:b5:69:81:d4: c2:cf:6a:61:f7:3c:e5:fa:08:ca:52:11:e8:78:0d:ce:27:c7: df:5b:54:35:16:6a:a8:43:e9:f0:ac:f6:d4:4a:ca:68:0a:dd: 6b:ef:f7:8f:3a:00:d6:23:b9:ee:1c:37:63:5f:8d:9d:8a:45: cd:a5:05:79:8f:fb:d9:62:42:71:79:c0:e5:06:63:ee:25:74: f1:20:f0:65:e1:99:1d:74:2b:90:2a:05:e3:26:ee:99:d3:e8: f7:ac:10:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZhSGN1SrkvZIFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjODgwZmQtMTdkNi00YjM3LTk1MzctNDU2ZWU2MzY5 ZWQ0MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MjMzYjM3MDYtY2ZiMS00MmIwLWI1YTctMzVlYjExZjU0MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFksxrYz77y/CdG4ijcmHPRDEV4FISx7yuH5 3Mhig9IaZxFx6enjA7BEDFqKAH/kn7ej3qb2irXVMWP6retRKjmegKu/f/67tAtI 6NTOpwSHhIprIznSJC+L456/PVeOshWQliNUk3HAi7kwbegz+HAWxk4gDOVFOFsc I87MMEhJL4M69xFU+RpTU5MpCFv36But+PplIuQUeTxEHerMSwx6lQnc7wws83eh Av1OuhzPoZxcXnLFuoJYSEblvI95oh4KXib1A+P4NqNZw0Ab2oV/UAG1r9svRa2Y wEg1eXBVqaJw5TkFEu/SovYb4NabbRyEDfGmQHwVTqhXzvolLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA6nJti6Jm4zcu3Z2IeGwAlqmGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2M4 ODBmZC0xN2Q2LTRiMzctOTUzNy00NTZlZTYzNjllZDQvZGM4ZGU2MDAtNTcyNy0z YWRkLTlkOTUtNGYzZDRjYWU1OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNjODgwZmQtMTdkNi00YjM3LTk1 MzctNDU2ZWU2MzY5ZWQ0L2QzYzg4MGZkLTE3ZDYtNGIzNy05NTM3LTQ1NmVlNjM2 OWVkNC5jcmwwHwYDVR0jBBgwFoAUYvCQUJVtCdjqk9lfUIr65R55EwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2M4ODBmZC0xN2Q2LTRiMzctOTUzNy00NTZl ZTYzNjllZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz65BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgGuXklEzijuhD3Yhbt9rV+orYVMvRyD1ar3SSkQPJ06V+LjEgYwN2+ 1nan1jgC/5IPo5QOClOylQZ9x2/K072BbKTum/37o5Gvb099PZZouwzR9ojiaSEG E45lyWz84CB6/Q1Mrjr2QtAM7dcE4M7QvSwzKZ2yEOAz6QCA7ScSk4JpZNYufcia 19KzCVj4rchGAGu+5XeObkFK6lT0tWmB1MLPamH3POX6CMpSEeh4Dc4nx99bVDUW aqhD6fCs9tRKymgK3Wvv9486ANYjue4cN2NfjZ2KRc2lBXmP+9liQnF5wOUGY+4l dPEg8GXhmR10K5AqBeMm7pnT6PesEPU= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:11 2025 by rpki-client