$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa File: 09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa (raw, json) Hash identifier: 15slzn6b61opC5dBNFCgQ3c1T4panEJcXoI2BxU2exo= Subject key identifier: C3:91:2F:F4:32:EF:C1:CB:15:1D:8E:B5:69:3D:CC:AA:3B:4B:B2:D2 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848388548C83EE083ECE70ADF00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.3.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:48:c8:3e:e0:83:ec:e7:0a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=588e5ed2-f354-4cb0-8504-9c6aaf32bc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:fc:f9:12:bf:9b:dc:0c:2f:c1:c3:42:ac: f5:b8:95:18:79:af:eb:4f:fd:dc:83:df:c6:02:ee: de:28:df:77:ca:6d:87:eb:41:f7:7f:f3:92:f3:52: d8:b8:bf:05:b7:46:5d:2e:86:e2:af:f7:a2:1e:20: 26:c3:81:e3:bf:a2:f8:1a:d8:3a:cd:ad:cc:8f:ef: 28:a0:3d:bc:98:94:4a:72:76:26:91:37:08:82:7a: a3:6b:9f:70:67:a2:36:27:d1:a3:96:68:6b:45:f5: 07:24:16:7e:f4:ac:86:2d:e2:71:50:81:25:c1:c2: f3:df:8d:9f:7e:09:5e:3c:57:4f:25:4b:c6:37:c1: 51:6c:2a:58:f5:29:72:5f:74:bb:98:41:9b:2d:bf: 7a:68:45:a3:33:9b:ec:21:33:20:da:ca:c7:3b:b8: 7e:b4:cd:3a:89:d6:88:03:12:68:1d:65:5f:20:68: e2:91:ae:43:f8:85:60:44:64:27:99:84:da:5e:7b: f3:b6:5d:54:fe:f2:14:8b:ef:a5:dc:6a:27:8d:6f: cb:4e:c2:66:7a:00:9a:3e:b5:a7:72:f2:91:53:83: 05:39:2d:98:96:66:fa:bb:34:b3:ad:45:9b:cd:2f: 82:2b:f0:ec:16:9b:7e:ee:02:99:8f:13:4f:b5:3d: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:91:2F:F4:32:EF:C1:CB:15:1D:8E:B5:69:3D:CC:AA:3B:4B:B2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.3.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:10:c7:44:34:0d:ea:5a:88:48:df:0f:7e:4c:df:89:02:55: b3:b5:74:24:d4:01:22:1e:32:e8:84:d2:eb:69:80:26:dc:fb: 87:f0:51:f3:9f:72:40:17:c7:33:e5:42:39:a1:66:21:91:36: bf:7e:68:03:5e:a2:61:e3:7a:a3:c9:50:34:dd:ba:30:0a:63: 6f:6c:87:d0:38:3e:7a:d5:84:80:dc:63:ad:44:e0:c1:8b:16: d4:4e:65:8e:95:1a:13:da:1b:d3:45:73:54:8e:3f:68:f1:f6: 96:00:7f:3c:6f:d9:4c:a5:4e:66:21:bb:c4:38:7f:4e:9e:1f: ec:4e:4d:eb:b0:fc:cd:6a:f2:b0:0b:cc:18:11:a0:64:dc:36: 83:90:97:04:a5:99:e2:4e:0f:4f:00:d0:94:4b:07:b4:f7:08: 24:d2:f8:68:86:be:64:a9:b5:a8:af:4a:09:99:22:71:3d:cd: c2:06:49:c8:11:b8:31:54:d9:e5:3f:60:40:77:08:29:97:99: ef:2f:4e:32:25:ee:71:f5:23:f5:b1:fb:2b:17:ec:04:3e:3c: 8a:87:36:b4:97:5b:a2:da:3b:3f:6c:f7:2e:71:a7:b3:fb:11: 72:11:94:5f:44:22:4e:57:0a:4f:0f:46:e4:fd:60:ec:16:ae: 42:25:eb:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUjIPuCD7OcK3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk NTg4ZTVlZDItZjM1NC00Y2IwLTg1MDQtOWM2YWFmMzJiYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DL8+RK/m9wML8HDQqz1uJUYea/rT/3cg9/G Au7eKN93ym2H60H3f/OS81LYuL8Ft0ZdLobir/eiHiAmw4Hjv6L4Gtg6za3Mj+8o oD28mJRKcnYmkTcIgnqja59wZ6I2J9GjlmhrRfUHJBZ+9KyGLeJxUIElwcLz342f fglePFdPJUvGN8FRbCpY9SlyX3S7mEGbLb96aEWjM5vsITMg2srHO7h+tM06idaI AxJoHWVfIGjika5D+IVgRGQnmYTaXnvztl1U/vIUi++l3GonjW/LTsJmegCaPrWn cvKRU4MFOS2Ylmb6uzSzrUWbzS+CK/DsFpt+7gKZjxNPtT3xGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMORL/Qy78HLFR2OtWk9zKo7S7LSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliZTk4ZDktODI3MS0z ZWU3LTg4ODgtNWM2ZDY4MGVkM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQQx0Q0DepaiEjfD35M34kCVbO1dCTUASIeMuiE0utpgCbc+4fwUfOf ckAXxzPlQjmhZiGRNr9+aANeomHjeqPJUDTdujAKY29sh9A4PnrVhIDcY61E4MGL FtROZY6VGhPaG9NFc1SOP2jx9pYAfzxv2UylTmYhu8Q4f06eH+xOTeuw/M1q8rAL zBgRoGTcNoOQlwSlmeJOD08A0JRLB7T3CCTS+GiGvmSptaivSgmZInE9zcIGScgR uDFU2eU/YEB3CCmXme8vTjIl7nH1I/Wx+ysX7AQ+PIqHNrSXW6LaOz9s9y5xp7P7 EXIRlF9EIk5XCk8PRuT9YOwWrkIl6+o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:53 2025 by rpki-client