$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa File: c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa (raw, json) Hash identifier: 6hVMJcC+McuJhWtQ32BwgIm7p/XmGiIOngl26M2pl1I= Subject key identifier: 74:0C:6F:25:4D:65:1C:9A:7D:43:8C:E1:F5:EB:E1:39:3F:57:60:C7 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849BB0F70A0328C921CC7C0BF80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 207.202.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:70:a0:32:8c:92:1c:c7:c0:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=91d32183-b926-415d-9af3-c86791137979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:a2:40:75:d8:be:65:74:18:1a:00:42:af: 94:cf:60:67:ea:aa:fb:2a:84:2d:7c:b6:0b:bb:c5: 34:78:c1:76:3a:d0:0f:ae:c3:ee:00:aa:57:f4:54: 21:ae:f8:eb:a7:4e:64:ea:79:9d:19:73:93:d2:9e: f5:a9:07:d0:46:0e:f3:ae:ef:e7:48:a1:0c:b4:8e: 07:ee:3f:f0:52:10:bf:e5:b7:60:63:5f:57:ac:d3: 97:6a:bb:46:31:d0:3f:da:af:67:e9:b5:e9:e4:a4: cb:f2:0c:b2:e6:86:5d:9e:89:5d:e8:67:c3:0d:87: 76:7e:b2:07:1f:1d:57:02:80:d9:23:7e:ee:c1:de: 47:72:49:e9:e3:3a:7b:1c:a0:1c:31:da:1e:45:22: 77:5a:5d:3f:2d:16:84:8b:e7:91:c2:5c:67:99:ad: 73:b2:e7:1b:2d:5c:11:13:da:7d:23:68:9e:9c:85: 04:28:41:b4:13:1c:e0:6f:84:bb:a9:82:13:ec:98: 9a:81:41:c3:8b:9d:86:d4:de:8e:bc:35:6a:a2:9d: 6a:bd:f9:bd:58:45:80:7b:b0:2e:c0:c6:b6:e2:2e: cc:71:d3:77:4f:6d:6f:b0:1d:46:df:ae:90:bc:55: 9a:49:69:90:3b:4b:df:09:a4:ee:fb:cd:f2:18:56: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0C:6F:25:4D:65:1C:9A:7D:43:8C:E1:F5:EB:E1:39:3F:57:60:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/c6da43ef-13fb-3a19-9035-c465cc45e0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:00:82:d9:60:0a:d4:54:a1:ed:49:bc:98:b3:25:ff:ab:0b: b3:8a:19:66:aa:4d:29:c4:96:33:1c:37:a4:11:d9:75:78:74: 93:44:4f:83:14:ac:0a:00:4b:e5:59:50:a2:c7:74:2e:cd:7b: 59:57:80:2a:42:e9:48:b6:87:8e:36:23:ea:36:56:1f:ef:12: 8f:3c:03:c0:e7:8f:df:ef:f7:6e:6a:2e:21:64:bc:a6:bb:55: 88:0c:ca:37:49:9e:97:b6:00:45:3e:e7:af:7c:ed:39:48:4f: 22:5d:6a:15:9f:4d:e9:0e:de:7d:3f:bd:52:de:78:c5:b1:2f: 32:de:0f:dc:58:ac:75:b9:e7:6e:43:26:7c:5c:87:57:15:e5: 17:f4:94:50:f5:33:0d:03:82:c6:60:70:b6:3c:0c:9c:d0:e4: e2:eb:33:ec:8e:e5:45:d8:a1:8e:22:c8:62:68:26:43:d3:79: 0a:a4:27:33:cb:e1:e7:97:81:69:0b:00:fa:75:71:dc:cb:2b: fb:6f:b7:bc:8f:0b:87:9d:c4:b3:42:e9:02:7a:f7:d6:0c:ae: 1a:2e:a4:f4:5b:2f:c5:c5:db:7a:90:83:9e:08:4b:fe:0f:93: 10:c8:21:42:24:8b:df:7b:f3:97:9e:22:eb:a6:39:38:0a:1b: c3:55:10:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3CgMoySHMfAv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk OTFkMzIxODMtYjkyNi00MTVkLTlhZjMtYzg2NzkxMTM3OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNqiQHXYvmV0GBoAQq+Uz2Bn6qr7KoQtfLYL u8U0eMF2OtAPrsPuAKpX9FQhrvjrp05k6nmdGXOT0p71qQfQRg7zru/nSKEMtI4H 7j/wUhC/5bdgY19XrNOXartGMdA/2q9n6bXp5KTL8gyy5oZdnold6GfDDYd2frIH Hx1XAoDZI37uwd5Hcknp4zp7HKAcMdoeRSJ3Wl0/LRaEi+eRwlxnma1zsucbLVwR E9p9I2ienIUEKEG0Exzgb4S7qYIT7JiagUHDi52G1N6OvDVqop1qvfm9WEWAe7Au wMa24i7McdN3T21vsB1G366QvFWaSWmQO0vfCaTu+83yGFY8SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQMbyVNZRyafUOM4fXr4Tk/V2DHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYzZkYTQzZWYtMTNmYi0z YTE5LTkwMzUtYzQ2NWNjNDVlMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoAgtlgCtRUoe1JvJizJf+rC7OKGWaqTSnEljMcN6QR2XV4dJNET4MU rAoAS+VZUKLHdC7Ne1lXgCpC6Ui2h442I+o2Vh/vEo88A8Dnj9/v925qLiFkvKa7 VYgMyjdJnpe2AEU+56987TlITyJdahWfTekO3n0/vVLeeMWxLzLeD9xYrHW5525D Jnxch1cV5Rf0lFD1Mw0DgsZgcLY8DJzQ5OLrM+yO5UXYoY4iyGJoJkPTeQqkJzPL 4eeXgWkLAPp1cdzLK/tvt7yPC4edxLNC6QJ699YMrhoupPRbL8XF23qQg54IS/4P kxDIIUIki99785eeIuumOTgKG8NVEAk= -----END CERTIFICATE-----Generated at Mon May 5 22:38:54 2025 by rpki-client