$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa File: 0917c39d-467b-37b1-b692-3a38d4b29e0d.roa (raw, json) Hash identifier: Li1sajGls274R8RnL6u4a7J6OXSYMKcHQBPUxqXL/po= Subject key identifier: 65:2C:FB:7C:A2:6A:35:06:B2:55:82:8D:F5:B9:46:4D:EA:17:A7:72 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858494B640FF61601090B84BD5640 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 207.202.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0f:f6:16:01:09:0b:84:bd:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=4b984d9f-c7c8-48fd-8e84-4780091bfe4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:42:36:b6:dc:84:27:52:f3:16:8c:60:1d: 3a:2c:30:a0:e5:36:7f:73:68:09:07:d1:ab:6a:01: bc:bc:8e:11:a7:40:0f:c5:b1:eb:92:74:0f:f3:54: f0:d7:d8:8f:55:f8:0d:4e:47:c8:36:a0:37:a7:70: d7:da:07:40:e0:6c:4a:37:87:06:18:6d:6b:b0:bd: 2a:eb:b9:c3:0c:28:91:17:ec:3a:0f:a6:33:19:37: b8:37:cf:7a:a7:eb:98:ea:f6:9a:69:bc:f9:ad:33: 54:44:18:0b:e5:d5:59:df:56:f4:47:ab:da:20:69: e9:22:16:8e:80:ce:1c:78:0b:10:22:de:c9:86:fb: 91:1a:ac:93:1a:0d:c3:fb:24:d2:5d:9d:a8:8b:28: dc:7a:31:6b:60:7a:f7:91:e6:b6:44:14:79:1a:37: f5:4f:51:7a:9e:52:7f:de:43:f3:e4:57:66:04:43: d3:1c:d2:e2:4e:c2:bb:63:b8:df:48:20:34:75:c8: c1:8a:a9:36:90:e1:c4:ab:b6:83:a6:89:61:1a:f9: 51:70:9d:36:78:73:fe:2b:8c:55:6d:b0:b0:5c:e0: c6:c5:cd:6b:2b:3d:ab:c8:9c:15:7b:05:e8:e6:98: 25:11:1a:39:04:67:6c:b4:d1:fc:36:00:ea:1b:d6: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:FB:7C:A2:6A:35:06:B2:55:82:8D:F5:B9:46:4D:EA:17:A7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0917c39d-467b-37b1-b692-3a38d4b29e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b8:d1:ca:7f:e4:d7:e8:d8:23:44:75:5b:77:86:ac:17:7a: 51:45:bc:11:ab:84:f7:0f:5f:2f:6b:4d:fc:0b:08:94:bd:fa: d4:d9:7d:f0:2e:82:c8:4a:ed:4b:28:97:f9:d3:ad:e8:68:f2: 4b:9c:94:8b:38:37:c4:23:e0:c9:56:40:34:f4:20:4d:c8:40: 59:a3:9a:3f:df:1d:54:fc:54:96:4c:ae:ff:5d:10:2e:88:3d: 19:3e:12:3c:5d:47:29:b9:28:8b:e3:a5:27:c6:bc:1a:cd:06: 13:9a:c5:69:e3:f2:6c:b5:cc:8a:a3:a9:52:c7:50:25:6e:dc: 24:48:bf:ca:79:2d:e9:29:c2:bf:88:46:33:88:5c:fb:91:85: 2e:06:69:68:b4:f2:e3:5b:52:96:1f:bb:cb:4c:63:22:0b:08: a3:48:8c:6c:f6:74:ce:c5:6d:93:2b:d9:b5:af:d9:b5:22:26: 15:ff:4f:6f:7c:e7:a0:8f:d1:40:f2:ec:f5:6c:3f:3b:03:5d: 29:d4:cc:b6:c8:f3:d3:28:a7:a8:8f:2b:6f:66:3c:73:df:a0: d7:10:31:0c:94:90:07:e4:40:65:ca:a2:c0:08:43:1c:2e:9c: 28:3a:ff:c5:f9:43:60:7d:b7:f4:e6:95:db:28:f6:99:c9:05: 18:4f:93:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZA/2FgEJC4S9VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NGI5ODRkOWYtYzdjOC00OGZkLThlODQtNDc4MDA5MWJmZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6RCNrbchCdS8xaMYB06LDCg5TZ/c2gJB9Gr agG8vI4Rp0APxbHrknQP81Tw19iPVfgNTkfINqA3p3DX2gdA4GxKN4cGGG1rsL0q 67nDDCiRF+w6D6YzGTe4N896p+uY6vaaabz5rTNURBgL5dVZ31b0R6vaIGnpIhaO gM4ceAsQIt7JhvuRGqyTGg3D+yTSXZ2oiyjcejFrYHr3kea2RBR5Gjf1T1F6nlJ/ 3kPz5FdmBEPTHNLiTsK7Y7jfSCA0dcjBiqk2kOHEq7aDpolhGvlRcJ02eHP+K4xV bbCwXODGxc1rKz2ryJwVewXo5pglERo5BGdstNH8NgDqG9YkewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUs+3yiajUGslWCjfW5Rk3qF6dyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMDkxN2MzOWQtNDY3Yi0z N2IxLWI2OTItM2EzOGQ0YjI5ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK40cp/5Nfo2CNEdVt3hqwXelFFvBGrhPcPXy9rTfwLCJS9+tTZffAu gshK7Usol/nTreho8kuclIs4N8Qj4MlWQDT0IE3IQFmjmj/fHVT8VJZMrv9dEC6I PRk+EjxdRym5KIvjpSfGvBrNBhOaxWnj8my1zIqjqVLHUCVu3CRIv8p5Lekpwr+I RjOIXPuRhS4GaWi08uNbUpYfu8tMYyILCKNIjGz2dM7FbZMr2bWv2bUiJhX/T298 56CP0UDy7PVsPzsDXSnUzLbI89Mop6iPK29mPHPfoNcQMQyUkAfkQGXKosAIQxwu nCg6/8X5Q2B9t/Tmldso9pnJBRhPk8I= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:37 2025 by rpki-client