$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa File: 09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa (raw, json) Hash identifier: 8zGyPXtB7tuagWFuIkNI34LsJr59n7OTp+VNCAlzWCw= Subject key identifier: AF:E1:06:12:5C:B3:E4:6B:9B:88:E8:4D:36:CB:FB:1F:12:6C:7C:41 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC24AB6C7BD01530F844C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.3.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:24:ab:6c:7b:d0:15:30:f8:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=0a2c749c-af55-4a24-8b38-4cad85676e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:20:f0:e6:24:d3:64:f4:d2:06:04:04:a1: 75:20:00:af:8b:16:ba:c9:72:ab:bd:ed:73:1f:bb: bf:82:0e:56:1e:21:1b:4d:b7:99:b8:88:30:fc:0a: 37:39:dd:4c:24:ed:cd:da:65:53:6c:3f:c5:34:bf: ff:50:be:2f:8e:31:5a:e1:d9:d8:3f:9e:15:fc:1c: 13:42:56:02:c9:d1:6a:4f:f6:70:1d:c6:c2:24:d8: b2:16:c3:c4:e8:97:76:1d:44:9b:69:0f:41:e2:c5: 4f:72:57:0e:c2:45:b8:8d:1f:b6:7c:f9:dd:a4:66: 46:ad:f8:9d:c3:e7:54:78:39:2a:b0:f3:5d:15:50: 97:e9:70:bc:99:b1:50:fa:dc:95:0b:da:28:08:1c: 15:aa:9a:ab:21:2b:a5:e6:01:e7:76:f6:a1:dc:66: 5c:d7:60:13:8a:22:09:eb:8c:1f:32:3e:46:6b:5d: 64:22:1a:b2:e8:56:8a:4e:f6:4f:07:53:cf:a5:8c: 88:bc:3d:6e:d6:a6:4e:2e:ec:a6:93:55:84:18:fa: b9:3c:6a:54:75:86:d8:5d:3c:63:89:74:46:aa:1c: 12:c0:53:81:be:31:55:2b:06:42:b9:9c:6b:4a:69: 9e:95:79:dc:8c:f6:6e:18:0e:2c:ce:49:e2:75:97: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E1:06:12:5C:B3:E4:6B:9B:88:E8:4D:36:CB:FB:1F:12:6C:7C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.3.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:aa:bb:1c:fa:0c:81:bf:08:22:77:43:f8:18:ba:a4:62:66: 87:56:8a:5b:ea:96:96:c4:42:71:07:00:76:3b:3a:da:ed:cf: 53:b3:48:7a:15:e4:ee:39:3c:3e:0f:68:89:48:28:6f:c1:4c: b0:bb:d1:e1:4f:c2:bb:ac:1a:de:28:59:31:93:e0:bb:c2:77: d1:86:fc:d5:f3:a0:12:a6:3c:2e:a4:a5:6d:aa:24:02:18:96: 3b:49:59:e9:14:ba:2c:3e:df:fa:b8:a5:3d:8d:16:46:3d:f2: 98:a0:dd:35:fc:32:9f:3e:27:33:bd:28:7f:37:fc:ef:0f:10: 94:9b:6a:2d:29:f6:0c:b8:4e:45:c5:c3:93:1b:ce:fc:78:04: ae:2e:fb:f5:1b:4b:63:11:d7:0e:3b:ee:b6:e9:fd:98:c5:b7: ba:81:96:32:35:fe:76:d4:61:26:ce:87:2b:45:68:8c:5a:b5: 88:44:ab:c3:ae:4f:5c:ea:c1:09:31:2c:2a:d2:cf:a0:cf:da: 8c:7c:35:4f:98:7a:a1:ec:7d:4a:3f:d7:d2:bf:78:19:6e:40: 8f:fb:c1:33:a9:8a:42:74:4f:88:f5:76:7b:fd:4f:fc:af:2c: 74:1f:15:b1:fb:df:c4:aa:93:c3:81:0b:1c:68:df:72:15:f0: 50:36:0f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CSrbHvQFTD4RMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MGEyYzc0OWMtYWY1NS00YTI0LThiMzgtNGNhZDg1Njc2ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVog8OYk02T00gYEBKF1IACvixa6yXKrve1z H7u/gg5WHiEbTbeZuIgw/Ao3Od1MJO3N2mVTbD/FNL//UL4vjjFa4dnYP54V/BwT QlYCydFqT/ZwHcbCJNiyFsPE6Jd2HUSbaQ9B4sVPclcOwkW4jR+2fPndpGZGrfid w+dUeDkqsPNdFVCX6XC8mbFQ+tyVC9ooCBwVqpqrISul5gHndvah3GZc12ATiiIJ 64wfMj5Ga11kIhqy6FaKTvZPB1PPpYyIvD1u1qZOLuymk1WEGPq5PGpUdYbYXTxj iXRGqhwSwFOBvjFVKwZCuZxrSmmelXncjPZuGA4szknidZcRMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/hBhJcs+Rrm4joTTbL+x8SbHxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliZTk4ZDktODI3MS0z ZWU3LTg4ODgtNWM2ZDY4MGVkM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6quxz6DIG/CCJ3Q/gYuqRiZodWilvqlpbEQnEHAHY7Otrtz1OzSHoV 5O45PD4PaIlIKG/BTLC70eFPwrusGt4oWTGT4LvCd9GG/NXzoBKmPC6kpW2qJAIY ljtJWekUuiw+3/q4pT2NFkY98pig3TX8Mp8+JzO9KH83/O8PEJSbai0p9gy4TkXF w5Mbzvx4BK4u+/UbS2MR1w477rbp/ZjFt7qBljI1/nbUYSbOhytFaIxatYhEq8Ou T1zqwQkxLCrSz6DP2ox8NU+YeqHsfUo/19K/eBluQI/7wTOpikJ0T4j1dnv9T/yv LHQfFbH738Sqk8OBCxxo33IV8FA2D4A= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:47 2025 by rpki-client