$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa File: 7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa (raw, json) Hash identifier: bypIVqR+AylX7rLR/4+FpN/n01QivRjdAN3rZ9cqcCQ= Subject key identifier: 7C:F0:38:43:60:03:E7:17:12:57:18:E3:B9:8D:80:DF:FA:7D:7F:9E Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849BB0F71DF7782F76D4D6CA720 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 14618 IP address blocks: 207.202.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:71:df:77:82:f7:6d:4d:6c:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=76aac728-0e43-4bf5-ab2c-e095a606d45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:99:35:8a:09:bb:d3:ba:2c:72:07:16:86:bc: 3a:a0:24:fd:91:58:13:06:fb:9d:50:54:03:49:1c: 3e:53:d7:68:84:df:d9:7f:f5:37:64:e6:c2:0e:5c: a9:8f:3d:59:2b:74:31:f4:0c:f5:00:03:6d:cf:5c: c2:2e:d3:05:f2:3c:1a:35:1d:a3:d8:4a:4d:b0:7d: 08:03:da:86:87:81:6b:ee:5c:01:83:33:6d:32:cb: 9d:0d:00:ec:83:04:d5:1a:75:09:7f:47:98:ed:49: 72:0a:12:01:8a:88:46:3b:b6:60:28:a6:05:a7:08: 70:06:9b:c9:63:71:9c:06:56:2d:ea:11:b2:70:e2: ff:87:e3:c7:26:4f:b3:86:b4:04:0d:94:e3:07:14: 1c:a3:d0:65:c2:34:e6:7a:63:07:24:f2:10:1e:f0: f4:38:43:17:5d:e5:6c:31:f2:5d:85:10:63:c5:2f: e8:65:e5:c0:35:4d:4c:f0:fc:fe:94:e6:40:10:44: 2c:5f:77:d7:48:31:b0:bd:e9:49:47:b7:0e:59:b7: 49:d9:de:08:0e:26:ac:55:08:18:66:40:96:05:e3: e8:e6:87:29:6e:c4:21:0d:74:41:0f:0a:8b:dd:96: ee:42:e2:5f:f1:0e:4d:fd:e7:a9:a8:ab:be:92:da: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F0:38:43:60:03:E7:17:12:57:18:E3:B9:8D:80:DF:FA:7D:7F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7a:fa:07:48:06:ab:80:51:03:82:d7:96:92:56:e1:27:5d: 53:89:7f:6f:4b:8c:46:4d:f7:c3:99:a6:4b:54:20:73:9e:0f: c0:6a:3c:8d:84:ad:ab:24:2d:81:3d:cc:be:a4:bf:93:83:45: b5:b0:23:e5:f9:c2:7a:2b:09:9c:48:50:60:90:56:7c:b3:5e: 75:07:08:ce:43:00:38:1e:ee:dd:d6:8e:cb:23:3f:13:5f:6f: 27:20:4d:4f:02:88:0a:fc:2e:22:ea:fc:c0:6f:a4:64:f9:0e: dc:8a:cd:db:34:01:d9:b9:37:0e:23:95:d3:54:17:b8:09:02: 18:1c:de:43:21:7f:2e:5d:6b:6c:ce:bf:00:1e:19:3b:e1:3f: 7f:0b:a4:03:f2:b6:31:23:26:62:ec:ca:39:c8:8a:ed:7a:43: 96:99:58:15:1c:d7:57:2d:e6:85:52:f2:b9:fe:1b:52:d0:f6: 13:95:9e:6a:68:b8:9f:16:8b:c8:1a:e8:07:d4:79:a6:99:80: d8:c9:04:5d:04:2a:b6:a9:e6:88:ae:43:e7:d9:ea:a5:a5:39: 8d:bc:56:b3:4c:96:86:86:a7:ae:28:39:16:2a:9b:f9:47:c8: d3:d3:d5:7e:47:d9:46:72:fc:f1:2c:3e:5f:a2:b7:ae:74:a3: c9:c8:3c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3Hfd4L3bU1spyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk NzZhYWM3MjgtMGU0My00YmY1LWFiMmMtZTA5NWE2MDZkNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jk1igm707oscgcWhrw6oCT9kVgTBvudUFQD SRw+U9dohN/Zf/U3ZObCDlypjz1ZK3Qx9Az1AANtz1zCLtMF8jwaNR2j2EpNsH0I A9qGh4Fr7lwBgzNtMsudDQDsgwTVGnUJf0eY7UlyChIBiohGO7ZgKKYFpwhwBpvJ Y3GcBlYt6hGycOL/h+PHJk+zhrQEDZTjBxQco9BlwjTmemMHJPIQHvD0OEMXXeVs MfJdhRBjxS/oZeXANU1M8Pz+lOZAEEQsX3fXSDGwvelJR7cOWbdJ2d4IDiasVQgY ZkCWBePo5ocpbsQhDXRBDwqL3ZbuQuJf8Q5N/eepqKu+ktqF4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzwOENgA+cXElcY47mNgN/6fX+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvN2VlNzIyOGItYmJmYS0z MDg0LTgyZGMtYmRiODY5NWEzZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl6+gdIBquAUQOC15aSVuEnXVOJf29LjEZN98OZpktUIHOeD8BqPI2E raskLYE9zL6kv5ODRbWwI+X5wnorCZxIUGCQVnyzXnUHCM5DADge7t3WjssjPxNf bycgTU8CiAr8LiLq/MBvpGT5DtyKzds0Adm5Nw4jldNUF7gJAhgc3kMhfy5da2zO vwAeGTvhP38LpAPytjEjJmLsyjnIiu16Q5aZWBUc11ct5oVS8rn+G1LQ9hOVnmpo uJ8Wi8ga6AfUeaaZgNjJBF0EKrap5oiuQ+fZ6qWlOY28VrNMloaGp64oORYqm/lH yNPT1X5H2UZy/PEsPl+it650o8nIPN0= -----END CERTIFICATE-----Generated at Sat May 10 07:37:59 2025 by rpki-client