$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/97ea93a6-82e0-3407-aa63-757715bcbf04.roa File: 97ea93a6-82e0-3407-aa63-757715bcbf04.roa (raw, json) Hash identifier: 6HchlmvWmDRtXdgLSWxfiWLDAGCJqomeBb5DTEDY768= Subject key identifier: 20:8E:DC:F0:68:CC:11:04:5C:F8:72:E4:B8:B9:6D:0E:D6:24:00:E1 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858486695C26D82CA729A356A4940 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/97ea93a6-82e0-3407-aa63-757715bcbf04.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 207.202.16.0/24 maxlen: 24 207.202.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:c2:6d:82:ca:72:9a:35:6a:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=63e1fe1d-e984-4626-9ce6-ad06ae6768f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:f8:27:13:64:28:2a:c4:6f:04:e2:84:05: d3:2a:c5:5b:6e:cd:82:a8:44:b0:3e:ed:e6:25:e7: fe:54:bf:b5:22:b0:f6:74:ff:9c:ca:1d:0c:b1:37: 1e:9f:20:c7:6b:97:6e:9e:62:87:3e:2c:60:dc:dd: ab:74:a2:d6:dc:00:46:19:e4:54:0d:55:a9:bb:cd: 7e:6d:76:0d:e5:e8:39:ca:cd:74:84:be:f8:09:22: 10:40:0b:48:91:50:72:2b:c3:3d:57:59:55:06:0d: 87:25:ed:56:33:56:9d:38:95:c7:88:4f:d7:ca:6b: bb:89:ca:1e:70:fb:5b:73:d1:06:c7:11:b0:bf:42: 74:0a:30:81:74:1a:bf:88:c8:97:4e:2e:0c:bd:67: 7a:c5:59:b2:68:20:8f:f0:61:3f:ce:23:81:5e:59: 62:8c:ad:79:be:1f:8f:cd:b6:ea:cc:0c:5f:1e:e6: c2:ae:32:c0:b2:cb:5b:2a:9d:41:33:00:b8:c3:a9: 8c:34:6d:b0:ce:92:b9:c5:63:1e:65:fa:6e:30:37: cf:41:c2:cf:01:de:07:ac:2c:28:e8:ee:f0:ca:bf: a0:93:18:41:59:29:a7:c2:5c:3f:c0:75:98:12:d3: b9:a8:69:83:ac:20:34:e6:f5:cf:57:b3:c7:0e:29: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:DC:F0:68:CC:11:04:5C:F8:72:E4:B8:B9:6D:0E:D6:24:00:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/97ea93a6-82e0-3407-aa63-757715bcbf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:40:2e:6f:91:2d:d4:66:b0:ff:57:11:01:53:5a:3d:68:5d: 64:a4:57:ee:ae:d2:45:29:2c:b6:d3:89:34:fe:94:e8:28:c7: 2f:b7:5a:43:55:1b:8a:35:48:de:41:15:16:6d:8f:b7:30:9c: 95:e2:b0:cd:df:dd:4a:9b:64:da:5a:7d:54:b5:71:6b:11:ea: fb:51:ba:46:b9:d0:b3:eb:b7:d1:04:32:6f:40:74:29:d1:13: 8d:b8:c7:6d:a6:fa:3f:5f:b4:98:8e:ed:e6:e5:fc:fe:19:2c: 52:72:ef:c2:2c:c1:ea:f0:40:f6:5d:ca:aa:99:c1:8c:17:09: c6:a2:b4:5b:1e:98:33:7a:98:0f:cb:1a:f7:73:4a:5b:e8:c8: 33:e2:2f:7d:98:55:ad:ca:fe:69:18:d1:45:a0:0d:cb:1b:f1: fe:64:e1:f9:c4:d5:49:80:7b:cb:2f:2a:93:bf:d2:96:89:d7: ae:a0:ec:39:42:82:28:e6:d4:45:0e:51:92:18:7d:b0:80:7c: 9d:05:4d:0c:04:bf:64:88:fc:88:cb:0c:87:26:ca:0a:76:f9: 13:e4:07:43:b2:79:3b:1c:92:8a:4f:f8:79:da:d4:7c:83:05: 24:82:25:7b:e1:67:21:8f:ff:a7:59:9c:15:2b:ad:82:d3:c8: 6f:96:c9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcJtgspymjVqSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NjNlMWZlMWQtZTk4NC00NjI2LTljZTYtYWQwNmFlNjc2OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ/4JxNkKCrEbwTihAXTKsVbbs2CqESwPu3m Jef+VL+1IrD2dP+cyh0MsTcenyDHa5dunmKHPixg3N2rdKLW3ABGGeRUDVWpu81+ bXYN5eg5ys10hL74CSIQQAtIkVByK8M9V1lVBg2HJe1WM1adOJXHiE/Xymu7icoe cPtbc9EGxxGwv0J0CjCBdBq/iMiXTi4MvWd6xVmyaCCP8GE/ziOBXllijK15vh+P zbbqzAxfHubCrjLAsstbKp1BMwC4w6mMNG2wzpK5xWMeZfpuMDfPQcLPAd4HrCwo 6O7wyr+gkxhBWSmnwlw/wHWYEtO5qGmDrCA05vXPV7PHDik/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCO3PBozBEEXPhy5Li5bQ7WJADhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOTdlYTkzYTYtODJlMC0z NDA3LWFhNjMtNzU3NzE1YmNiZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBALm+RLdRmsP9XEQFTWj1oXWSkV+6u0kUpLLbTiTT+lOgoxy+3WkNV G4o1SN5BFRZtj7cwnJXisM3f3UqbZNpafVS1cWsR6vtRuka50LPrt9EEMm9AdCnR E424x22m+j9ftJiO7ebl/P4ZLFJy78IswerwQPZdyqqZwYwXCcaitFsemDN6mA/L GvdzSlvoyDPiL32YVa3K/mkY0UWgDcsb8f5k4fnE1UmAe8svKpO/0paJ166g7DlC gijm1EUOUZIYfbCAfJ0FTQwEv2SI/IjLDIcmygp2+RPkB0OyeTsckopP+Hna1HyD BSSCJXvhZyGP/6dZnBUrrYLTyG+WybE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:05 2025 by rpki-client