$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa File: f559045e-4405-39ab-8824-3e21d81e1ce2.roa (raw, json) Hash identifier: g5abZY8GETD2EKMfuTNPTqkUdisR/U5ONH+MKIq1MoQ= Subject key identifier: 38:57:A1:C5:A4:92:F8:88:B7:52:88:DC:81:0B:27:A3:3F:48:58:11 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849B6DF5B3AB44ABC3DF3DF47E0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 207.202.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5b:3a:b4:4a:bc:3d:f3:df:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=b5039be7-04ce-4e31-835d-8daa5a672be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:59:c4:fd:07:f3:53:2d:ab:fe:c2:44:11: 11:c6:90:e8:4c:e6:2b:1e:fc:69:8e:95:48:b9:73: 9b:ef:38:2d:f7:b4:47:d3:06:19:d8:d3:6d:35:01: 41:1d:f8:e8:79:8a:45:9b:97:63:93:71:33:64:fd: c1:09:0a:49:26:5e:6b:1c:f0:e6:f5:c5:2b:27:cf: 8b:c5:3b:2a:ed:a3:d2:29:58:44:f0:b5:64:74:74: 74:ac:eb:a6:9e:13:8d:d2:06:d8:a6:98:2e:2b:81: cf:14:5f:c3:f7:d6:a4:a8:34:47:65:7d:56:e0:11: db:27:25:0f:44:88:75:30:72:2e:4a:a5:05:b4:47: 6c:1a:c2:8a:40:32:41:f2:76:9c:21:f7:12:51:46: 5f:5e:6d:a3:76:89:a1:16:f2:88:60:98:f4:e2:fb: c6:15:92:62:85:7a:2e:c7:d4:8f:6d:34:89:dd:b9: 4d:42:37:d6:a1:be:29:5b:3b:29:08:4b:6f:00:41: 5d:f2:d1:fd:6f:d9:63:65:60:bd:89:e7:46:94:03: 11:d5:b2:78:ef:5b:ee:6f:3d:f9:db:d5:54:b8:36: 14:db:bb:bd:84:95:31:21:e5:b9:4e:12:c5:93:e2: d4:a4:e4:12:6b:4d:d7:ae:e0:3b:17:3e:a7:aa:aa: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:A1:C5:A4:92:F8:88:B7:52:88:DC:81:0B:27:A3:3F:48:58:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:91:7e:67:a6:c7:6e:70:af:01:ea:75:38:99:ae:ca:40:a2: 32:4b:a8:82:ae:20:c8:67:98:c6:8b:4d:6c:b0:8d:55:82:45: 1f:83:d5:3b:a0:5c:04:6c:be:bc:46:a0:b0:e7:f3:c9:6d:8d: 6b:9d:1d:6d:d4:4a:9f:ef:8a:66:aa:b1:c7:5f:da:95:94:cf: f3:d9:ae:ec:92:2b:dc:3f:b2:39:3d:60:c3:4f:d2:94:65:5e: 1c:b1:fd:a0:ac:1c:34:86:c2:f9:00:d1:3d:8b:74:05:f8:ad: a8:75:7a:a4:9b:39:ab:40:f6:29:f0:f7:25:52:40:aa:1d:74: c4:18:91:77:e5:76:c2:b4:12:2f:d9:a4:25:b3:b4:fd:92:1b: 79:51:ba:f8:0d:67:d0:ce:02:06:1d:f2:06:ad:e2:2d:25:70: b8:85:16:b2:6f:68:fb:55:3b:37:bb:5e:16:a8:5c:77:5d:16: 46:73:cf:be:e0:32:fc:53:c8:71:5c:d7:1d:99:9d:b3:ca:73: d9:38:21:7b:6e:ef:82:a2:47:03:3e:a7:cc:f9:ca:54:17:de: f2:dd:65:07:cf:a5:a1:c8:71:d0:0f:eb:26:8e:ee:44:75:24: b2:da:74:b4:93:f7:bf:73:f1:d8:2f:49:85:cb:42:61:a6:fd: f9:69:db:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231s6tEq8PfPfR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk YjUwMzliZTctMDRjZS00ZTMxLTgzNWQtOGRhYTVhNjcyYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RJZxP0H81Mtq/7CRBERxpDoTOYrHvxpjpVI uXOb7zgt97RH0wYZ2NNtNQFBHfjoeYpFm5djk3EzZP3BCQpJJl5rHPDm9cUrJ8+L xTsq7aPSKVhE8LVkdHR0rOumnhON0gbYppguK4HPFF/D99akqDRHZX1W4BHbJyUP RIh1MHIuSqUFtEdsGsKKQDJB8nacIfcSUUZfXm2jdomhFvKIYJj04vvGFZJihXou x9SPbTSJ3blNQjfWob4pWzspCEtvAEFd8tH9b9ljZWC9iedGlAMR1bJ471vubz35 29VUuDYU27u9hJUxIeW5ThLFk+LUpOQSa03XruA7Fz6nqqoFtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhXocWkkviIt1KI3IELJ6M/SFgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjU1OTA0NWUtNDQwNS0z OWFiLTg4MjQtM2UyMWQ4MWUxY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCRfmemx25wrwHqdTiZrspAojJLqIKuIMhnmMaLTWywjVWCRR+D1Tug XARsvrxGoLDn88ltjWudHW3USp/vimaqscdf2pWUz/PZruySK9w/sjk9YMNP0pRl Xhyx/aCsHDSGwvkA0T2LdAX4rah1eqSbOatA9inw9yVSQKoddMQYkXfldsK0Ei/Z pCWztP2SG3lRuvgNZ9DOAgYd8gat4i0lcLiFFrJvaPtVOze7XhaoXHddFkZzz77g MvxTyHFc1x2ZnbPKc9k4IXtu74KiRwM+p8z5ylQX3vLdZQfPpaHIcdAP6yaO7kR1 JLLadLST979z8dgvSYXLQmGm/flp25o= -----END CERTIFICATE-----Generated at Mon May 5 10:10:22 2025 by rpki-client