$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa File: bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa (raw, json) Hash identifier: BDQUfIC+JrG7eoST+oUTcZruC+dV0EzKbQ+tSHKkvNI= Subject key identifier: 9B:5D:91:26:A5:5E:DD:89:16:47:B6:E3:8C:AD:4E:EB:92:A6:40:47 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584944693ED609A3E24293241D80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3e:d6:09:a3:e2:42:93:24:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=feea088e-80ed-4c56-ab7e-9a97c35702eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:b0:d8:62:64:8c:7b:06:9a:ab:b4:b8:99: 2f:9e:23:c7:8e:8a:d5:ef:4c:13:eb:a9:4f:be:47: 05:15:f4:95:97:69:cd:52:f6:e3:df:88:9e:2d:01: 7c:70:dc:92:b8:e0:6b:30:78:6a:bd:27:59:88:31: be:5f:53:59:8d:9c:ca:af:ec:22:31:93:c6:44:10: a5:ec:5c:90:03:89:6b:17:ad:b1:ef:b6:8d:27:6c: a3:48:1d:0b:e0:26:4d:1c:41:2a:a2:4f:59:81:de: a6:80:c8:33:95:6e:1a:29:fd:b5:ac:bf:40:50:76: 5f:5d:1c:3c:ac:ca:9c:19:81:6a:59:c8:5d:6e:d4: 63:cb:0c:2a:b5:78:ee:9f:86:9c:60:b7:67:61:17: ba:f6:98:b3:9b:62:77:23:7f:f3:7e:75:a0:c6:22: 5a:ec:03:f2:c3:4a:10:37:e8:09:de:39:68:1f:c8: 0d:3f:d2:dc:02:94:2e:d0:c3:51:91:38:87:a1:19: 02:d4:77:1c:7d:a2:46:e9:3b:f4:14:65:46:3d:d2: 6e:81:2a:45:5a:07:2c:c9:e9:db:91:ac:4c:30:2d: 67:bd:bd:43:2c:31:d3:c7:02:1b:d9:5a:df:d3:5d: 1a:76:de:e2:55:d2:bd:59:09:31:cf:8f:d1:5b:60: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:91:26:A5:5E:DD:89:16:47:B6:E3:8C:AD:4E:EB:92:A6:40:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/bdbec3ff-bac6-313c-8580-ba71f61dfb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e5:06:80:0b:4b:3c:96:20:46:90:3b:96:bc:2d:b1:68:c0: bf:d8:60:37:54:63:77:63:65:23:7c:3b:84:02:8f:7c:d1:95: 9b:15:f4:12:36:0e:59:20:e9:0e:dc:c3:46:0c:34:7d:9f:29: 38:7a:09:ae:f0:ba:b9:03:66:09:5f:d0:af:6f:27:86:fe:cf: 3c:e5:d0:1e:c7:f3:40:ef:11:ea:0e:0a:6e:83:e5:a6:51:4c: c3:1c:52:89:2d:08:0c:f9:d0:42:1a:bb:41:d6:a4:cf:94:5f: 29:a2:f7:4b:46:48:c0:d3:f6:e9:1f:02:53:20:a0:28:24:99: 05:f1:83:b0:99:7e:d1:5e:f2:aa:a9:3b:a0:95:28:39:8f:74: fb:33:e1:a1:07:ef:d8:35:35:46:a6:71:81:aa:fd:e2:8a:28: bd:8c:9e:f8:ca:b0:ff:30:ba:99:62:c6:a8:46:3e:b6:14:3c: ec:b1:f2:84:42:4b:9e:b0:9f:16:b4:e0:4d:75:3c:9a:14:64: 1c:69:b5:ff:ed:cf:d9:04:07:d1:a0:6b:2c:44:ba:e6:30:9c: dc:4f:a9:75:e6:a9:30:5e:06:c8:25:14:4d:be:81:e9:6b:91: b6:c6:3b:6f:44:8c:a6:61:5d:90:8d:30:1a:25:ab:c3:45:40: 33:ed:43:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT7WCaPiQpMkHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZmVlYTA4OGUtODBlZC00YzU2LWFiN2UtOWE5N2MzNTcwMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEaw2GJkjHsGmqu0uJkvniPHjorV70wT66lP vkcFFfSVl2nNUvbj34ieLQF8cNySuOBrMHhqvSdZiDG+X1NZjZzKr+wiMZPGRBCl 7FyQA4lrF62x77aNJ2yjSB0L4CZNHEEqok9Zgd6mgMgzlW4aKf21rL9AUHZfXRw8 rMqcGYFqWchdbtRjywwqtXjun4acYLdnYRe69pizm2J3I3/zfnWgxiJa7APyw0oQ N+gJ3jloH8gNP9LcApQu0MNRkTiHoRkC1HccfaJG6Tv0FGVGPdJugSpFWgcsyenb kaxMMC1nvb1DLDHTxwIb2Vrf010adt7iVdK9WQkxz4/RW2CqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtdkSalXt2JFke244ytTuuSpkBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYmRiZWMzZmYtYmFjNi0z MTNjLTg1ODAtYmE3MWY2MWRmYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvlBoALSzyWIEaQO5a8LbFowL/YYDdUY3djZSN8O4QCj3zRlZsV9BI2 Dlkg6Q7cw0YMNH2fKTh6Ca7wurkDZglf0K9vJ4b+zzzl0B7H80DvEeoOCm6D5aZR TMMcUoktCAz50EIau0HWpM+UXymi90tGSMDT9ukfAlMgoCgkmQXxg7CZftFe8qqp O6CVKDmPdPsz4aEH79g1NUamcYGq/eKKKL2MnvjKsP8wuplixqhGPrYUPOyx8oRC S56wnxa04E11PJoUZBxptf/tz9kEB9GgayxEuuYwnNxPqXXmqTBeBsglFE2+gelr kbbGO29EjKZhXZCNMBolq8NFQDPtQ18= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:43 2025 by rpki-client