$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa File: 87c708cc-aab6-358e-a4e7-4226a4708aa3.roa (raw, json) Hash identifier: cCLoNuqhenKyZz6y/ZqWer2+xKIyQG2ZMfC99pR2RNo= Subject key identifier: FC:99:5B:15:CE:4B:AE:B2:F4:DE:40:D9:A2:18:7A:46:08:93:20:C5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858489075FF2C6DA0B8008E7FDE80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 13315 IP address blocks: 199.94.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ff:2c:6d:a0:b8:00:8e:7f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=af694c89-4054-461f-a211-b8a9cdddf101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:6b:b0:70:b7:5b:f1:6a:8a:a1:e2:84:c0: ba:ce:43:c5:b4:f7:7a:54:15:6c:62:4b:ac:27:35: 8e:07:7d:7c:0f:c8:36:fd:84:1a:2d:b7:c5:e0:55: 15:e2:ff:23:c6:f8:18:6c:e0:07:5d:ad:10:55:08: 03:29:af:3a:f6:58:37:56:df:5e:32:83:99:5d:c0: f8:6c:b5:0a:87:fc:39:4c:42:0c:19:fd:2c:35:7b: 2e:f2:aa:09:53:bf:94:d8:ae:f8:9d:18:88:03:0d: 95:f7:06:74:a2:8e:59:e2:91:e0:c4:ae:df:b9:45: 23:32:30:8a:4f:8a:fd:6c:68:81:86:53:45:6e:48: 67:b0:70:47:a3:6f:45:56:4a:b0:3b:9e:d9:0c:66: d1:54:c9:02:b3:1c:75:11:cd:00:55:b5:a0:bf:c9: ea:f3:81:b8:28:49:e9:33:39:45:2c:76:c5:49:da: ec:93:12:38:af:b4:0c:fa:76:fb:59:6e:49:9b:ac: 81:ef:9c:94:2c:40:ff:5e:f3:5d:21:24:05:1a:bd: ae:64:81:2a:f0:f9:98:27:eb:45:24:df:82:78:5f: 8a:bb:5c:e6:cf:25:8d:c0:c8:cc:9a:9d:b5:32:24: bf:68:d0:8e:e0:c3:21:ee:21:ba:21:60:e0:b4:de: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:99:5B:15:CE:4B:AE:B2:F4:DE:40:D9:A2:18:7A:46:08:93:20:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.94.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f5:24:66:db:e0:be:0d:68:d3:13:c4:6d:e6:61:63:18:a9: 66:1d:01:01:dc:79:01:17:49:70:43:44:42:7c:9d:78:e0:f2: ed:12:f1:bf:2b:4a:e3:08:aa:1c:d3:b1:59:ab:82:0e:98:1f: b2:57:d8:52:c7:97:d2:4e:45:4c:4c:08:a0:68:df:37:95:79: 3e:6e:06:88:65:c5:23:42:af:a1:4c:4b:43:0c:78:55:43:35: 73:d0:5e:8d:85:46:7a:5c:e6:c1:18:75:6e:4f:3e:e0:6c:1f: 0d:f6:dd:ea:ff:9d:b2:aa:7d:eb:b3:99:c4:31:69:d7:c4:e0: a6:c6:13:f0:05:f7:9d:80:2c:79:03:d9:df:d1:22:fe:8f:f2: b5:bd:7c:6f:6e:d0:fa:92:96:ce:9b:c8:4b:0d:cf:e1:1a:ac: 55:35:77:40:24:21:75:55:51:44:2b:36:8c:27:0e:29:22:1e: e9:cd:9b:19:2d:cc:1b:cd:ce:6a:23:24:ab:02:c1:79:16:4e: e6:f3:ff:ba:88:71:3a:6a:ad:5b:aa:a0:ac:6d:01:30:be:be: 82:36:f2:91:d6:af:64:a6:d2:cf:f5:15:d3:44:2c:26:52:20: cc:9c:0a:f8:c5:3b:41:01:c4:cf:e0:42:32:bf:e3:b3:8e:ea: f1:2d:ef:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdf8sbaC4AI5/3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk YWY2OTRjODktNDA1NC00NjFmLWEyMTEtYjhhOWNkZGRmMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywNrsHC3W/FqiqHihMC6zkPFtPd6VBVsYkus JzWOB318D8g2/YQaLbfF4FUV4v8jxvgYbOAHXa0QVQgDKa869lg3Vt9eMoOZXcD4 bLUKh/w5TEIMGf0sNXsu8qoJU7+U2K74nRiIAw2V9wZ0oo5Z4pHgxK7fuUUjMjCK T4r9bGiBhlNFbkhnsHBHo29FVkqwO57ZDGbRVMkCsxx1Ec0AVbWgv8nq84G4KEnp MzlFLHbFSdrskxI4r7QM+nb7WW5Jm6yB75yULED/XvNdISQFGr2uZIEq8PmYJ+tF JN+CeF+Ku1zmzyWNwMjMmp21MiS/aNCO4MMh7iG6IWDgtN54EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyZWxXOS66y9N5A2aIYekYIkyDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdjNzA4Y2MtYWFiNi0z NThlLWE0ZTctNDIyNmE0NzA4YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx14gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH71JGbb4L4NaNMTxG3mYWMYqWYdAQHceQEXSXBDREJ8nXjg8u0S8b8r SuMIqhzTsVmrgg6YH7JX2FLHl9JORUxMCKBo3zeVeT5uBohlxSNCr6FMS0MMeFVD NXPQXo2FRnpc5sEYdW5PPuBsHw323er/nbKqfeuzmcQxadfE4KbGE/AF952ALHkD 2d/RIv6P8rW9fG9u0PqSls6byEsNz+EarFU1d0AkIXVVUUQrNownDikiHunNmxkt zBvNzmojJKsCwXkWTubz/7qIcTpqrVuqoKxtATC+voI28pHWr2Sm0s/1FdNELCZS IMycCvjFO0EBxM/gQjK/47OO6vEt7w8= -----END CERTIFICATE-----Generated at Sun Apr 6 10:59:47 2025 by rpki-client