$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa File: f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa (raw, json) Hash identifier: 1mWqvywZvugHrPmnxjB2xINQyCmIc1bLlOwBkDkoi5U= Subject key identifier: D2:F9:E4:0F:D2:6A:43:48:33:F7:07:49:E7:99:C6:9A:FB:CD:90:A1 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858493C091F24C6B0BDD2FD82E070 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 207.202.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1f:24:c6:b0:bd:d2:fd:82:e0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=ac589b74-35e0-4489-b3f0-d9f89766f545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:82:99:64:1e:df:31:f2:25:5d:6f:cf:bf: d8:90:66:de:73:7e:e3:18:ef:ba:4a:2c:84:b2:bc: 57:c9:b0:c9:ab:a6:53:a9:34:bf:d8:9e:1b:85:d2: 9b:28:82:e2:b7:4a:4b:1e:f0:fb:07:4b:0d:4e:fb: 98:9d:ce:c1:a1:01:b0:d7:91:74:76:b7:ad:a3:44: f5:91:e9:a3:5a:c9:a1:b4:c9:c4:39:04:d9:b4:ad: 1f:64:2a:31:3c:e0:cd:d5:e5:90:76:05:4f:87:a4: 1b:6b:05:46:9a:18:15:31:1e:b7:38:9e:b8:0c:4f: a1:1b:db:96:e8:ce:c7:12:39:fb:66:cc:3b:ca:f8: e4:15:cc:5b:7f:ba:4b:28:31:a9:41:35:1c:a7:7f: c1:d0:89:09:d1:9f:08:26:78:5b:a3:2e:62:94:64: 27:c6:1f:f6:f6:3c:35:3d:00:a1:67:7b:a6:5b:6e: 14:ad:a3:6f:99:9a:fe:15:59:74:87:1d:ef:77:82: 57:4d:65:20:9e:d2:49:e4:a8:e9:d4:98:f6:5e:ae: a9:f6:a8:09:82:0f:28:12:6f:1e:4a:dd:c2:a0:f5: 35:46:a2:1e:6d:26:7d:3f:6e:b0:ea:86:70:4f:28: ad:01:3f:49:76:bf:13:cb:2e:76:98:0d:6d:3b:13: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:E4:0F:D2:6A:43:48:33:F7:07:49:E7:99:C6:9A:FB:CD:90:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f6:38:ff:4e:b9:f0:7b:e5:e5:28:00:2f:cd:4f:d1:29:d0: 16:82:43:dc:e3:71:97:37:b9:13:8d:89:a2:65:43:db:88:fd: 32:ac:2e:ff:eb:01:70:3b:b0:e6:80:6c:38:24:f4:3f:f0:7e: 2d:12:90:3a:45:a4:9b:e0:72:38:b0:b2:d5:01:77:92:9b:c1: af:a6:67:83:8d:00:12:0c:32:c3:b2:ef:72:b2:2f:42:2f:b3: a5:df:78:d5:f3:1e:8f:5b:10:13:d6:f1:2e:b0:c9:31:56:5e: 20:3c:60:5c:b7:75:82:c8:08:97:99:06:07:3a:5a:d5:dc:b1: fb:c5:20:99:b2:42:21:4a:24:f7:b6:a0:18:7a:3e:8f:19:6c: fb:80:7b:98:a5:8e:87:4d:16:33:22:81:a4:ee:87:28:1b:ed: 5f:41:fe:df:95:75:17:87:a7:d8:e9:3c:24:96:a1:99:1b:4e: f9:88:75:2e:5d:81:5a:6b:9c:97:9d:24:b1:03:fb:4f:0c:7f: b9:ca:48:5b:32:8b:15:24:5f:48:79:4e:6e:ac:d9:4f:76:7f: 02:27:a2:88:0f:cf:ad:9c:91:e8:e1:d2:37:26:01:61:3e:e7: 23:ee:ad:5c:92:20:33:69:54:20:81:2c:4b:72:54:93:a5:fe: 22:73:84:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CR8kxrC90v2C4HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YWM1ODliNzQtMzVlMC00NDg5LWIzZjAtZDlmODk3NjZmNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfSCmWQe3zHyJV1vz7/YkGbec37jGO+6SiyE srxXybDJq6ZTqTS/2J4bhdKbKILit0pLHvD7B0sNTvuYnc7BoQGw15F0dreto0T1 kemjWsmhtMnEOQTZtK0fZCoxPODN1eWQdgVPh6QbawVGmhgVMR63OJ64DE+hG9uW 6M7HEjn7Zsw7yvjkFcxbf7pLKDGpQTUcp3/B0IkJ0Z8IJnhboy5ilGQnxh/29jw1 PQChZ3umW24UraNvmZr+FVl0hx3vd4JXTWUgntJJ5Kjp1Jj2Xq6p9qgJgg8oEm8e St3CoPU1RqIebSZ9P26w6oZwTyitAT9Jdr8Tyy52mA1tOxPItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL55A/SakNIM/cHSeeZxpr7zZChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjcyOWY5MmMtODM3Yy0z YmY0LWI0ZWUtZjUwYzQwZDYzYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALj2OP9OufB75eUoAC/NT9Ep0BaCQ9zjcZc3uRONiaJlQ9uI/TKsLv/r AXA7sOaAbDgk9D/wfi0SkDpFpJvgcjiwstUBd5Kbwa+mZ4ONABIMMsOy73KyL0Iv s6XfeNXzHo9bEBPW8S6wyTFWXiA8YFy3dYLICJeZBgc6WtXcsfvFIJmyQiFKJPe2 oBh6Po8ZbPuAe5iljodNFjMigaTuhygb7V9B/t+VdReHp9jpPCSWoZkbTvmIdS5d gVprnJedJLED+08Mf7nKSFsyixUkX0h5Tm6s2U92fwInoogPz62ckejh0jcmAWE+ 5yPurVySIDNpVCCBLEtyVJOl/iJzhGA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:14 2025 by rpki-client