$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa File: 33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa (raw, json) Hash identifier: zaalO9XnWssjwiapxlDNUppJbBmMNN3sXi04UotYy9c= Subject key identifier: 90:54:A5:05:59:A5:61:91:55:C1:AB:B5:C5:38:8D:6A:AF:72:15:21 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858486EF5BFC66B4DF36171B4A780 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 207.202.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:bf:c6:6b:4d:f3:61:71:b4:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=a16bfe6c-e0eb-453d-9f27-3a402fb63fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:54:e4:13:8c:50:d7:fc:22:08:29:22:af: dd:7a:1e:fd:90:53:da:1a:3e:25:0b:4a:33:6f:01: 3e:b1:bb:fb:5a:dc:45:be:9a:80:f5:f0:ef:d6:cf: ae:45:76:a8:a9:e4:7e:ba:75:23:e1:65:95:98:62: 77:26:a9:41:fb:54:72:38:3d:54:33:20:7f:9d:44: 0d:0b:32:96:f3:d7:72:6a:2e:1e:95:e1:46:6a:22: e7:f9:fd:2a:45:4e:8b:3c:67:f7:65:59:a1:52:1c: 66:bf:98:30:28:c9:c3:83:ad:ee:fa:45:00:e4:63: 4c:52:3a:a9:2c:f6:f7:e0:3f:19:f2:25:be:db:d5: 9c:5f:2d:1c:c2:64:b4:5b:c0:6e:7f:82:2e:9c:4a: 06:66:76:41:5b:b2:b9:55:76:99:14:17:d3:5c:bc: a4:a8:32:4e:8c:9b:06:f6:49:c2:0a:3a:5c:b6:90: 07:54:c5:8a:b6:c0:4a:59:1a:e8:6e:72:c2:0a:4f: af:b6:7a:0d:fe:e5:dd:ae:06:c3:b6:e0:ff:a9:0b: b2:27:7b:fc:b3:12:f7:ea:8f:dc:8d:27:3f:53:fa: 44:14:be:47:a1:91:e9:db:1e:bb:af:c0:1f:ff:64: 3d:6c:5a:71:6c:59:9f:be:08:b2:64:37:53:ca:8e: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:A5:05:59:A5:61:91:55:C1:AB:B5:C5:38:8D:6A:AF:72:15:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d7:9a:6f:b5:58:88:d6:67:68:8b:f9:c9:93:f1:82:a5:8d: 09:0c:c5:04:3a:98:bd:5d:a1:7e:ed:62:a4:50:47:14:8d:dc: b1:8d:5f:d9:5e:73:49:b9:01:ef:2c:04:40:7f:24:aa:ad:96: fb:82:f7:6b:9a:04:21:96:ac:90:e6:f5:0a:04:d8:e2:ba:f7: 8e:c4:d0:4d:96:3b:2e:22:bd:81:4d:11:17:a0:95:95:5e:be: 17:d1:35:ee:8a:87:cf:c5:4d:77:26:45:31:9d:47:59:47:54: e3:e8:a7:4e:a1:4b:2e:bf:5c:6d:dc:ce:46:70:08:90:cb:85: a4:34:e9:b4:f9:10:e0:d2:bf:b1:6f:b2:31:b8:61:d7:83:e2: 4b:48:21:ea:4a:95:3f:bd:72:c1:f8:0c:0b:0c:e3:c5:f7:fe: 8f:f0:8d:82:66:54:52:eb:be:67:b7:3f:3a:42:19:3a:2b:81: f8:b3:b7:da:2b:28:c5:32:33:99:af:f8:e0:77:37:40:40:ea: 97:dd:9e:73:a6:5f:d8:71:6f:9f:da:f1:4d:b9:d4:30:60:cb: f1:b4:39:38:3d:93:93:57:3f:05:00:f3:dd:69:fc:ad:71:42: 29:23:c1:e4:10:7d:b0:12:d8:88:3f:da:5c:b8:9f:2e:f7:fb: 53:00:9a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9b/Ga03zYXG0p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk YTE2YmZlNmMtZTBlYi00NTNkLTlmMjctM2E0MDJmYjYzZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocpU5BOMUNf8IggpIq/deh79kFPaGj4lC0oz bwE+sbv7WtxFvpqA9fDv1s+uRXaoqeR+unUj4WWVmGJ3JqlB+1RyOD1UMyB/nUQN CzKW89dyai4eleFGaiLn+f0qRU6LPGf3ZVmhUhxmv5gwKMnDg63u+kUA5GNMUjqp LPb34D8Z8iW+29WcXy0cwmS0W8Buf4IunEoGZnZBW7K5VXaZFBfTXLykqDJOjJsG 9knCCjpctpAHVMWKtsBKWRrobnLCCk+vtnoN/uXdrgbDtuD/qQuyJ3v8sxL36o/c jSc/U/pEFL5HoZHp2x67r8Af/2Q9bFpxbFmfvgiyZDdTyo6SrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBUpQVZpWGRVcGrtcU4jWqvchUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMzNhMGU5MzctM2U4Yi0z NTVlLThmYzktNDFiOGQ1MGRkMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Xmm+1WIjWZ2iL+cmT8YKljQkMxQQ6mL1doX7tYqRQRxSN3LGNX9le c0m5Ae8sBEB/JKqtlvuC92uaBCGWrJDm9QoE2OK6947E0E2WOy4ivYFNEReglZVe vhfRNe6Kh8/FTXcmRTGdR1lHVOPop06hSy6/XG3czkZwCJDLhaQ06bT5EODSv7Fv sjG4YdeD4ktIIepKlT+9csH4DAsM48X3/o/wjYJmVFLrvme3PzpCGTorgfizt9or KMUyM5mv+OB3N0BA6pfdnnOmX9hxb5/a8U251DBgy/G0OTg9k5NXPwUA891p/K1x QikjweQQfbAS2Ig/2ly4ny73+1MAmko= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:03 2025 by rpki-client