$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa File: a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa (raw, json) Hash identifier: MEvF+DQ06VhlxTJsMTNcFE9BgMp9TtELfmekdI3QUEA= Subject key identifier: 6B:9E:51:A4:C9:1E:02:5F:12:C8:B5:62:18:04:A2:B7:37:E0:9B:10 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848DBD67016934E635CE1449920 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 0 IP address blocks: 63.215.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:70:16:93:4e:63:5c:e1:44:99:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=17a36425-7ee2-4cf2-9fd3-59b3d8fb1eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:51:98:47:44:45:5a:85:93:81:a8:49:72: 83:8e:7a:ad:af:88:22:4d:d9:36:d5:a0:47:da:f8: 07:22:bb:0e:7c:e4:db:fd:ff:1f:4a:59:b6:a5:b8: 58:12:1c:e7:f6:c5:49:a8:83:e2:b9:77:d3:dc:d5: e0:3b:33:91:ff:bb:38:d0:b4:4e:b8:37:74:68:85: bd:c2:f7:dc:26:15:cc:34:bc:8b:bf:31:05:a4:ff: c7:58:9b:f0:6f:50:f5:d4:99:4e:a0:f6:11:c5:cf: 69:da:0d:4e:ce:f6:a0:6d:1e:f5:f9:c4:0e:2f:22: 7b:2c:f0:b0:bf:cf:c0:24:dc:47:61:40:ca:b3:ef: 4d:27:19:19:f0:09:e5:00:f2:d4:00:3e:3a:d1:c7: 28:27:1b:41:7f:fd:56:9f:69:09:09:0e:80:b2:61: 3b:69:90:20:28:72:67:2b:4f:d0:a4:6c:38:ef:c5: 05:9d:1f:7e:cb:47:c0:f8:34:62:ba:5b:4d:e5:2d: 69:db:73:b7:fe:2f:71:17:bc:17:9d:8d:bc:98:92: a9:1b:68:83:c8:6b:9a:ef:a7:80:79:3e:5a:dc:38: 3b:5e:7d:b6:e8:d3:b5:be:06:11:d7:12:3b:5e:a1: 92:51:ed:1c:77:23:fc:8b:cf:96:92:bb:dd:1b:cb: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9E:51:A4:C9:1E:02:5F:12:C8:B5:62:18:04:A2:B7:37:E0:9B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a7fe9ebc-9749-38af-89f1-fb7a2ad647b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 63.215.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d4:97:a7:44:26:89:e5:8a:ab:51:bc:38:11:7a:f2:2c:72: 58:a1:c0:e6:1b:bd:bd:aa:25:f5:a0:a9:29:96:8a:b6:7d:ec: 54:61:4a:a9:59:9e:4b:b6:a5:0e:8a:14:19:ce:5b:da:6a:4e: a0:f0:37:2b:39:f0:f9:7c:d3:86:9d:35:d9:92:13:37:23:70: 6e:a4:46:82:2b:a4:e4:61:a9:0a:4c:e1:65:85:1e:92:02:02: b2:67:62:89:04:a1:9e:6d:9b:83:e4:3b:39:c0:dd:08:0a:2b: 1f:ee:e7:3b:5a:bb:ff:34:27:34:58:ce:a9:19:d7:aa:c6:12: 43:28:3b:76:e2:a3:58:24:fe:9a:5e:11:fa:bd:1e:da:16:bd: 6a:50:e7:8f:03:b2:23:cf:31:a2:2c:f4:76:a3:e6:e1:6e:d1: b8:23:a6:cc:34:f1:6c:59:bc:52:f5:8c:64:9f:53:29:fc:41: f8:f2:6a:1c:8a:8f:31:08:b2:b3:8b:46:05:c0:98:ba:1e:5e: 1c:08:b8:31:15:63:98:a3:b8:52:67:c6:68:79:f4:00:11:a4: d8:2d:7d:7e:4a:20:52:8f:d4:48:d2:34:8c:f7:c9:c6:97:27: 0f:95:ef:92:1b:d6:dd:50:79:a3:52:fc:90:c4:8d:49:e6:e9: 2d:c5:4a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nAWk05jXOFEmSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk MTdhMzY0MjUtN2VlMi00Y2YyLTlmZDMtNTliM2Q4ZmIxZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfdRmEdERVqFk4GoSXKDjnqtr4giTdk21aBH 2vgHIrsOfOTb/f8fSlm2pbhYEhzn9sVJqIPiuXfT3NXgOzOR/7s40LROuDd0aIW9 wvfcJhXMNLyLvzEFpP/HWJvwb1D11JlOoPYRxc9p2g1OzvagbR71+cQOLyJ7LPCw v8/AJNxHYUDKs+9NJxkZ8AnlAPLUAD460ccoJxtBf/1Wn2kJCQ6AsmE7aZAgKHJn K0/QpGw478UFnR9+y0fA+DRiultN5S1p23O3/i9xF7wXnY28mJKpG2iDyGua76eA eT5a3Dg7Xn226NO1vgYR1xI7XqGSUe0cdyP8i8+WkrvdG8sJuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGueUaTJHgJfEsi1YhgEorc34JsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTdmZTllYmMtOTc0OS0z OGFmLTg5ZjEtZmI3YTJhZDY0N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9exMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/Ul6dEJonliqtRvDgRevIsclihwOYbvb2qJfWgqSmWirZ97FRhSqlZ nku2pQ6KFBnOW9pqTqDwNys58Pl804adNdmSEzcjcG6kRoIrpORhqQpM4WWFHpIC ArJnYokEoZ5tm4PkOznA3QgKKx/u5ztau/80JzRYzqkZ16rGEkMoO3bio1gk/ppe Efq9HtoWvWpQ548DsiPPMaIs9Haj5uFu0bgjpsw08WxZvFL1jGSfUyn8QfjyahyK jzEIsrOLRgXAmLoeXhwIuDEVY5ijuFJnxmh59AARpNgtfX5KIFKP1EjSNIz3ycaX Jw+V75Ib1t1QeaNS/JDEjUnm6S3FSjw= -----END CERTIFICATE-----Generated at Sun Apr 6 11:18:20 2025 by rpki-client