$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa File: 3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa (raw, json) Hash identifier: ebTvAK7IPG4+2aUkwJQASuaeTbeyytAVq7q+IOwchxM= Subject key identifier: BC:C1:97:91:D4:89:3B:6A:67:BF:37:AE:F2:92:C9:E7:27:3C:E1:E6 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584902EC1D0DAE9DCF6C7FDE1380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 13781 IP address blocks: 8.8.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1d:0d:ae:9d:cf:6c:7f:de:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=a2e1b476-3f8e-4e79-a50e-795b052ed401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:38:04:87:78:6a:b6:42:e1:7e:eb:34:26: 41:ec:13:e9:85:b5:6a:51:6f:2c:31:de:b1:7f:ca: 4c:19:ff:dc:13:7e:55:04:b0:f3:0a:ad:91:38:9c: 9b:cb:2a:94:ae:50:8e:c9:79:35:df:01:55:db:a9: ab:9b:72:f7:98:c9:bf:19:d2:61:db:6a:4d:80:e8: 53:c6:47:7f:94:15:48:af:69:92:7b:32:66:f0:76: 98:6a:a7:d5:a6:92:d3:5c:77:25:7c:06:04:83:22: 4b:e9:b6:2d:60:dd:f6:26:bf:5d:3d:4c:94:59:cd: 34:24:50:08:02:2e:8e:cf:08:88:62:12:20:38:f8: a3:92:4d:c5:54:62:77:f5:62:1e:59:e4:ac:06:48: f8:63:2f:d0:c8:35:74:95:e2:88:2e:0d:dc:5d:97: 48:e1:35:f8:64:f4:53:a0:27:c4:43:19:33:cd:66: c5:1e:08:23:a9:ad:8a:6b:30:88:f7:5d:d0:a8:ef: 9f:85:16:57:ff:4d:94:5d:32:79:65:83:13:17:4f: b5:2a:f3:c4:ac:1e:f0:f6:9d:a9:8f:26:0c:66:da: cc:20:c1:98:08:d5:bc:18:9d:d7:1b:d0:1e:fc:e0: c5:05:2d:a8:99:00:ed:e6:1e:79:59:98:ea:13:d7: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C1:97:91:D4:89:3B:6A:67:BF:37:AE:F2:92:C9:E7:27:3C:E1:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:72:be:90:93:b7:18:bd:ae:8b:5a:6c:b1:69:bc:6a:81:60: 79:32:19:b9:1b:15:95:d0:a7:6b:24:ed:5c:59:da:2b:68:c1: 80:30:9e:c5:c7:2b:09:3d:99:fe:c6:82:02:49:8d:b0:fe:2e: ee:2d:fb:28:7d:1c:45:c6:11:f3:74:20:4e:bd:68:2b:a9:00: 94:de:75:da:24:3e:d8:dd:b3:55:33:b1:bf:0b:9f:5d:4c:80: 5d:dc:f3:bb:3a:42:cb:80:af:f4:8d:97:44:4c:c9:43:79:46: 25:1b:4f:36:1e:3c:f2:5e:3f:27:3b:0a:ee:de:38:bc:e4:63: 24:57:6a:f4:2e:30:90:36:85:76:7e:ae:ef:31:96:3f:7b:91: 4d:08:dc:7e:cc:b2:01:4f:8d:d3:01:d5:72:dd:aa:87:ba:cf: 01:19:91:79:0a:41:c3:a6:0b:98:f4:70:5c:f5:6a:1a:f0:3e: dc:48:29:3d:1b:65:be:ce:de:19:fd:59:f7:df:90:ca:8b:ff: ff:43:76:ce:4a:5c:e2:64:18:de:ac:e0:89:33:e9:14:0c:ad: a4:e5:d5:80:a7:03:58:73:c2:8a:97:97:e5:e3:2f:a6:50:b8: 6c:c8:f7:85:53:ea:d9:80:dd:59:24:03:a8:13:82:f2:e7:e2: 8c:65:0a:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7B0Nrp3PbH/eE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YTJlMWI0NzYtM2Y4ZS00ZTc5LWE1MGUtNzk1YjA1MmVkNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSY4BId4arZC4X7rNCZB7BPphbVqUW8sMd6x f8pMGf/cE35VBLDzCq2ROJybyyqUrlCOyXk13wFV26mrm3L3mMm/GdJh22pNgOhT xkd/lBVIr2mSezJm8HaYaqfVppLTXHclfAYEgyJL6bYtYN32Jr9dPUyUWc00JFAI Ai6OzwiIYhIgOPijkk3FVGJ39WIeWeSsBkj4Yy/QyDV0leKILg3cXZdI4TX4ZPRT oCfEQxkzzWbFHggjqa2KazCI913QqO+fhRZX/02UXTJ5ZYMTF0+1KvPErB7w9p2p jyYMZtrMIMGYCNW8GJ3XG9Ae/ODFBS2omQDt5h55WZjqE9foNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzBl5HUiTtqZ783rvKSyecnPOHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzM5M2RmNzEtYmQ0Yi0z YzBmLTkyODAtYzE3ZjFmMmZkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVyvpCTtxi9rotabLFpvGqBYHkyGbkbFZXQp2sk7VxZ2itowYAwnsXH Kwk9mf7GggJJjbD+Lu4t+yh9HEXGEfN0IE69aCupAJTeddokPtjds1Uzsb8Ln11M gF3c87s6QsuAr/SNl0RMyUN5RiUbTzYePPJePyc7Cu7eOLzkYyRXavQuMJA2hXZ+ ru8xlj97kU0I3H7MsgFPjdMB1XLdqoe6zwEZkXkKQcOmC5j0cFz1ahrwPtxIKT0b Zb7O3hn9WfffkMqL//9Dds5KXOJkGN6s4Ikz6RQMraTl1YCnA1hzwoqXl+XjL6ZQ uGzI94VT6tmA3VkkA6gTgvLn4oxlCho= -----END CERTIFICATE-----Generated at Thu Apr 10 04:27:47 2025 by rpki-client