$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa File: f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa (raw, json) Hash identifier: 3Tw1HcU7HqIMTVmpY2p7UEx4c/SZKncilpbwxl0EsJc= Subject key identifier: 06:A4:FB:85:DE:2D:BD:1A:9A:0B:34:29:A2:4B:22:41:7A:9A:F7:51 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F432858485B6AF397E8CC2140EA9B5840 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 207.202.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f3:97:e8:cc:21:40:ea:9b:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=8bcc1d65-8879-41b9-8b3d-2d168d0245a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:8b:f0:b3:b9:a3:62:44:61:f1:20:0c:6f: 4b:cc:a3:6b:cb:ec:3e:0c:73:95:a3:6b:60:90:04: e9:39:be:46:d9:81:3b:04:cb:a7:0f:8d:79:13:6b: 15:70:dc:15:f1:48:78:e9:7d:3b:67:38:95:3a:0c: ce:24:56:b4:e6:0d:a5:7f:70:f7:73:de:f0:f3:fc: 7c:98:30:75:b2:99:53:d2:29:37:6c:5a:31:9e:85: de:82:97:27:23:4e:c4:ca:34:af:3b:24:d3:1f:66: 02:13:c1:65:a4:e0:2b:0a:9d:0d:66:34:dc:f8:03: 67:de:7d:3c:3f:d8:1e:80:33:c8:0a:44:e5:94:53: bd:61:de:f9:68:57:65:64:51:01:1b:2a:11:5f:a4: 89:fb:23:78:65:10:ae:1f:91:68:7e:b5:45:7a:3c: 84:5f:88:db:e0:3e:33:ec:80:ba:31:c1:8b:c5:58: c2:71:3f:92:95:e1:3f:74:12:a7:7d:ba:b4:5d:3c: d9:3a:be:c3:e4:b0:99:c2:dd:99:fe:d0:e0:7f:89: c6:d9:7a:25:58:8b:88:1c:33:6b:81:41:cf:e3:ff: 33:56:e4:84:3b:4c:16:6f:cd:3c:ba:65:50:0f:3a: 69:57:9f:d4:c1:1a:85:83:fb:f5:94:25:3b:ee:4a: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:FB:85:DE:2D:BD:1A:9A:0B:34:29:A2:4B:22:41:7A:9A:F7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:dc:17:cf:67:2e:9d:06:d7:b6:c1:8a:34:f4:b3:26:9b:96: cf:45:c2:9f:10:24:96:4b:41:37:64:a0:8c:9d:fc:15:00:62: 73:ac:1d:e1:2a:2c:99:67:d0:87:28:ea:4d:23:00:01:84:b9: e2:65:f2:c8:fd:6a:eb:cc:89:d8:bf:eb:f4:89:12:f2:70:06: 86:b7:13:e0:21:7d:d3:4c:76:6f:6a:0a:87:85:f9:cd:0d:bb: bc:3f:ab:65:ec:69:b1:ca:a8:31:bc:17:36:f5:b4:fe:54:49: 78:f1:03:0a:d2:f9:6f:86:ca:55:5b:ff:77:78:23:4c:0c:11: 1e:cf:f9:00:6a:db:23:c5:04:0b:51:f2:8e:85:ec:22:ad:ff: c6:f8:ad:73:31:0e:70:88:92:f3:5d:70:d2:8e:49:98:3f:9b: 10:4c:cd:65:c4:fd:dd:46:5b:4f:37:ff:61:dc:55:03:5f:c0: 10:0a:7f:41:ab:18:3d:66:18:da:08:47:46:26:60:19:e4:05: e4:f5:79:39:f1:c3:41:d5:36:a6:e1:73:2b:64:08:4b:e8:52: 9d:ac:bf:42:2f:36:78:0f:d4:5e:36:ca:53:a5:e2:0f:e3:5f: c2:3b:a5:ee:1f:0b:e6:8e:83:9c:ac:cd:b6:fc:8c:fd:5e:d2: 08:3a:29:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavOX6MwhQOqbWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk OGJjYzFkNjUtODg3OS00MWI5LThiM2QtMmQxNjhkMDI0NWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTGL8LO5o2JEYfEgDG9LzKNry+w+DHOVo2tg kATpOb5G2YE7BMunD415E2sVcNwV8Uh46X07ZziVOgzOJFa05g2lf3D3c97w8/x8 mDB1splT0ik3bFoxnoXegpcnI07EyjSvOyTTH2YCE8FlpOArCp0NZjTc+ANn3n08 P9gegDPICkTllFO9Yd75aFdlZFEBGyoRX6SJ+yN4ZRCuH5FofrVFejyEX4jb4D4z 7IC6McGLxVjCcT+SleE/dBKnfbq0XTzZOr7D5LCZwt2Z/tDgf4nG2XolWIuIHDNr gUHP4/8zVuSEO0wWb808umVQDzppV5/UwRqFg/v1lCU77koo1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAak+4XeLb0amgs0KaJLIkF6mvdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjcyOWY5MmMtODM3Yy0z YmY0LWI0ZWUtZjUwYzQwZDYzYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvcF89nLp0G17bBijT0syabls9Fwp8QJJZLQTdkoIyd/BUAYnOsHeEq LJln0Ico6k0jAAGEueJl8sj9auvMidi/6/SJEvJwBoa3E+AhfdNMdm9qCoeF+c0N u7w/q2XsabHKqDG8Fzb1tP5USXjxAwrS+W+GylVb/3d4I0wMER7P+QBq2yPFBAtR 8o6F7CKt/8b4rXMxDnCIkvNdcNKOSZg/mxBMzWXE/d1GW083/2HcVQNfwBAKf0Gr GD1mGNoIR0YmYBnkBeT1eTnxw0HVNqbhcytkCEvoUp2sv0IvNngP1F42ylOl4g/j X8I7pe4fC+aOg5yszbb8jP1e0gg6Kbk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:59 2025 by rpki-client