$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa File: 8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa (raw, json) Hash identifier: 5b222v/665mkSH4KfkPM92jMMX4TfLROBIw0sX/KnGw= Subject key identifier: F1:63:4A:9F:9C:D6:95:00:DD:29:E1:5D:1E:36:01:8A:96:B1:48:30 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285848D7A65761CE6D59FA0558DEA0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 207.202.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:57:61:ce:6d:59:fa:05:58:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=c98b4ae6-0049-4a12-8871-5d1979f4edc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:d5:3f:40:40:b1:fa:ce:d8:48:e5:4d:dd: 53:b8:de:ea:06:19:87:73:f1:d2:7e:e4:61:ba:8d: 73:8a:00:dc:c5:54:29:dd:23:2a:df:19:7f:cd:6d: 4d:27:6e:c7:db:ac:1f:92:9b:4d:50:ac:22:0c:f1: dc:39:b0:d1:22:b4:38:5f:1f:be:e3:09:bf:a9:09: 02:06:b0:66:37:7a:ed:38:f2:57:97:c9:d6:ec:71: b4:d2:74:36:8b:82:d3:e1:15:f9:b1:44:db:ae:0b: 2d:1e:cd:2c:f8:4d:ff:a6:ed:5c:d9:ed:ad:38:c4: bc:52:96:44:c6:f3:d2:da:95:ae:bc:a2:b9:25:3f: 43:4c:98:69:b2:65:75:c0:73:82:49:34:70:2d:19: c3:51:b9:74:eb:a4:be:f0:01:46:5d:78:92:05:ba: ef:d6:15:f1:a8:e4:d6:1d:b4:b4:2d:27:ab:60:a5: f8:dd:f9:62:f9:bf:85:40:99:41:0f:e4:14:a5:23: b0:6e:1c:a1:85:13:4e:8d:41:35:78:c6:0c:92:b2: 5e:87:7b:69:d0:85:52:d5:e7:f1:b8:2f:90:82:23: 2c:48:05:8a:bb:2a:1f:81:14:89:5b:d3:b9:87:64: 97:9c:7a:b5:6d:d8:8c:b5:53:de:12:97:75:be:8c: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:4A:9F:9C:D6:95:00:DD:29:E1:5D:1E:36:01:8A:96:B1:48:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8512791c-c3b7-3d44-b9f1-49c24810ef4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ab:55:9a:9c:67:83:c0:ec:e9:7c:40:55:69:e9:c3:8a:6f: f6:cf:a1:47:82:bc:35:a1:b3:1d:b4:89:60:8d:84:89:3d:48: 19:f1:00:9c:7a:92:1a:fa:1d:f1:3d:8f:79:bc:6a:a6:16:19: 1f:f3:33:47:bb:a4:bd:d0:3e:c7:39:e4:8a:77:ba:51:8b:c0: 69:af:31:93:55:04:41:12:f0:d1:04:8a:fa:71:53:11:be:c5: 56:fc:3c:0d:58:ff:49:8a:9f:79:e5:cd:16:3c:52:9b:1f:3a: 3e:f9:d6:4b:88:1e:43:bf:26:d9:43:04:4e:39:fa:6f:73:f2: 50:4e:3b:56:63:cb:4f:f1:81:75:08:15:11:be:ca:98:62:63: df:72:94:91:bc:5b:49:9e:1d:53:a8:0d:c7:00:b1:ef:1b:06: cd:ee:6b:f9:a8:a2:97:37:6d:bd:34:6e:ea:8d:e5:fc:10:36: 15:b2:4b:cf:67:71:e6:2d:e7:cf:8e:46:5b:fa:43:41:e1:79: e5:73:c5:b7:5d:92:c6:08:24:2b:c9:89:18:b7:50:67:22:a3: 94:05:9d:aa:d9:23:cc:1e:dd:ac:e3:1b:16:bc:ed:d1:ef:db: c7:2c:b7:8b:2e:74:e2:c3:4d:70:65:5a:1e:63:9c:4e:36:1f: 80:d7:b8:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpldhzm1Z+gVY3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk Yzk4YjRhZTYtMDA0OS00YTEyLTg4NzEtNWQxOTc5ZjRlZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQrVP0BAsfrO2EjlTd1TuN7qBhmHc/HSfuRh uo1zigDcxVQp3SMq3xl/zW1NJ27H26wfkptNUKwiDPHcObDRIrQ4Xx++4wm/qQkC BrBmN3rtOPJXl8nW7HG00nQ2i4LT4RX5sUTbrgstHs0s+E3/pu1c2e2tOMS8UpZE xvPS2pWuvKK5JT9DTJhpsmV1wHOCSTRwLRnDUbl066S+8AFGXXiSBbrv1hXxqOTW HbS0LSerYKX43fli+b+FQJlBD+QUpSOwbhyhhRNOjUE1eMYMkrJeh3tp0IVS1efx uC+QgiMsSAWKuyofgRSJW9O5h2SXnHq1bdiMtVPeEpd1voydFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFjSp+c1pUA3SnhXR42AYqWsUgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvODUxMjc5MWMtYzNiNy0z ZDQ0LWI5ZjEtNDljMjQ4MTBlZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6rVZqcZ4PA7Ol8QFVp6cOKb/bPoUeCvDWhsx20iWCNhIk9SBnxAJx6 khr6HfE9j3m8aqYWGR/zM0e7pL3QPsc55Ip3ulGLwGmvMZNVBEES8NEEivpxUxG+ xVb8PA1Y/0mKn3nlzRY8UpsfOj751kuIHkO/JtlDBE45+m9z8lBOO1Zjy0/xgXUI FRG+yphiY99ylJG8W0meHVOoDccAse8bBs3ua/moopc3bb00buqN5fwQNhWyS89n ceYt58+ORlv6Q0HheeVzxbddksYIJCvJiRi3UGcio5QFnarZI8we3azjGxa87dHv 28cst4sudOLDTXBlWh5jnE42H4DXuEQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:30 2025 by rpki-client