$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa File: 8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa (raw, json) Hash identifier: 2om5bcFxu2Z8LR1u0iCPfAj2r7okJLNUp3OKpi+U8Wg= Subject key identifier: 80:4F:0A:C5:F5:E9:42:79:84:D0:B9:CA:AD:FA:ED:48:AF:E7:7A:15 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849002167C398861D205E353500 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:67:c3:98:86:1d:20:5e:35:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=1ad63eed-5ccf-4272-ad18-832252fe4ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:8f:9e:b3:cb:18:fb:43:92:11:bb:7d:0d: 61:02:58:58:de:6e:5e:14:75:0d:ba:dc:f5:18:ac: 9c:50:d9:63:fb:55:6c:60:31:36:15:11:80:f2:4f: cb:d5:00:df:46:d6:8b:ab:9d:10:bb:b7:ca:3e:63: 03:da:78:17:64:79:64:bf:50:99:f0:ec:f2:56:92: 39:5d:1c:97:ac:83:ae:33:b6:4d:23:36:ec:5b:65: d2:b7:87:d4:ed:73:d3:f7:5f:3a:bd:2c:72:9d:d3: 40:84:48:01:0d:0e:7f:e8:3c:a9:68:90:e0:ac:52: 39:28:34:bd:58:67:8e:c2:5a:c9:84:28:b7:00:df: 15:0a:a3:ab:a4:c6:f9:99:2f:76:31:a1:0a:ee:d6: 40:17:60:4c:a9:cb:c2:4c:d7:54:73:df:7f:d9:61: 3f:9f:9d:8c:e9:45:3a:aa:d3:a5:da:64:1b:bc:a3: 6b:d8:dc:c4:63:f1:06:8b:99:60:cf:9c:fa:3c:d0: 2b:e1:a3:e2:e8:19:e4:79:f4:4a:ca:6e:f3:49:d7: d2:9f:f1:72:41:ea:c4:bd:99:d8:c1:71:ab:4e:2a: 0b:53:6e:f5:2f:5d:db:9c:32:66:ba:eb:b3:99:0c: 4e:4f:b2:43:db:68:34:f5:24:d4:41:51:60:83:ba: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4F:0A:C5:F5:E9:42:79:84:D0:B9:CA:AD:FA:ED:48:AF:E7:7A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a7:05:2d:10:87:89:02:88:b7:3a:01:b5:54:9c:ab:15:19: 9c:b6:37:10:11:e0:6e:93:2b:4c:66:55:41:a8:ee:34:99:45: 15:59:8c:1b:5e:c7:ac:e1:b1:3f:31:19:46:ea:ce:9b:70:fc: 74:0d:c5:e4:cb:fb:df:8f:0c:f9:b3:9d:b2:dc:13:9c:e4:de: cd:bd:94:42:7d:22:9b:29:e6:b9:78:47:f4:90:be:f1:1c:0b: 9d:b3:02:87:fe:b2:15:18:9a:2b:d5:14:d2:a6:9a:c4:09:84: 22:10:00:b5:9d:86:3d:f0:5d:df:52:e5:86:07:00:0d:e0:e1: 6f:c9:31:83:54:3b:96:74:7c:a8:65:49:02:ce:1c:93:b6:c0: c7:e4:76:7d:58:9f:1d:ad:60:03:4f:76:d8:92:23:7d:f7:00: 6f:a4:aa:2e:d9:48:54:6f:3b:35:a7:34:2b:77:bf:0a:ea:d3: 1f:9d:f1:df:3c:e1:8c:2c:4f:82:49:3f:8e:04:71:b7:f2:5a: d5:3b:59:e4:0c:ec:4a:42:27:38:d9:5c:62:86:81:91:46:5f: 62:0f:ff:04:52:55:06:5b:04:2c:17:fe:0a:3d:13:be:db:8e: 42:0f:47:46:a5:a8:96:79:1a:20:03:f5:bd:4c:d5:28:31:a5: 30:af:f8:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWfDmIYdIF41NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MWFkNjNlZWQtNWNjZi00MjcyLWFkMTgtODMyMjUyZmU0YWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ePnrPLGPtDkhG7fQ1hAlhY3m5eFHUNutz1 GKycUNlj+1VsYDE2FRGA8k/L1QDfRtaLq50Qu7fKPmMD2ngXZHlkv1CZ8OzyVpI5 XRyXrIOuM7ZNIzbsW2XSt4fU7XPT9186vSxyndNAhEgBDQ5/6DypaJDgrFI5KDS9 WGeOwlrJhCi3AN8VCqOrpMb5mS92MaEK7tZAF2BMqcvCTNdUc99/2WE/n52M6UU6 qtOl2mQbvKNr2NzEY/EGi5lgz5z6PNAr4aPi6BnkefRKym7zSdfSn/FyQerEvZnY wXGrTioLU271L13bnDJmuuuzmQxOT7JD22g09STUQVFgg7rBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBPCsX16UJ5hNC5yq367Uiv53oVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOGMyMjM0ZWMtYjNkNC0z OGViLWIwZjItYzI3NTVlNzc0MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2nBS0Qh4kCiLc6AbVUnKsVGZy2NxAR4G6TK0xmVUGo7jSZRRVZjBte x6zhsT8xGUbqzptw/HQNxeTL+9+PDPmznbLcE5zk3s29lEJ9Ipsp5rl4R/SQvvEc C52zAof+shUYmivVFNKmmsQJhCIQALWdhj3wXd9S5YYHAA3g4W/JMYNUO5Z0fKhl SQLOHJO2wMfkdn1Ynx2tYANPdtiSI333AG+kqi7ZSFRvOzWnNCt3vwrq0x+d8d88 4YwsT4JJP44EcbfyWtU7WeQM7EpCJzjZXGKGgZFGX2IP/wRSVQZbBCwX/go9E77b jkIPR0alqJZ5GiAD9b1M1SgxpTCv+DU= -----END CERTIFICATE-----Generated at Wed Apr 9 19:39:57 2025 by rpki-client