$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json) Hash identifier: WRrrn334pSF6y95Lb8ABLWizzfaunZL22EHIQS31XpM= Subject key identifier: 65:7E:24:35:35:14:9E:FA:E3:94:99:92:ED:F5:00:2A:D6:A8:72:9F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848E866608C4FCBB2D2FBCB9FC8 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 3356 IP address blocks: 199.35.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:8c:4f:cb:b2:d2:fb:cb:9f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=876721d8-6c0f-425a-8b03-dc980033a9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:ba:67:49:a9:07:0c:60:ca:8f:9e:ed:64: 90:a4:9d:dd:49:31:03:57:80:1f:ab:0c:05:ab:07: 2f:81:f6:e3:c2:40:4d:0e:04:c9:ef:45:b1:96:78: 02:db:3b:43:d7:5d:40:7e:52:19:e0:be:b6:96:73: 4a:f6:fa:98:fe:5a:a7:c7:34:98:63:a7:01:d0:fb: 00:21:19:95:63:cc:12:51:78:fe:08:4f:ff:91:0d: 0e:e1:f1:df:82:e1:df:b0:fb:77:28:e4:13:6b:ed: f4:4d:fe:35:2f:b0:ad:f9:50:95:f8:79:d4:ea:8c: 2b:4a:6a:5d:e1:52:63:13:0f:5b:9b:21:a2:5c:35: 6d:e1:26:89:59:81:ca:0f:99:c6:c5:a6:cd:bf:fd: 1c:f9:29:9a:43:44:c0:b4:b3:37:84:d6:1d:f1:44: 59:d8:7f:b4:fb:e3:f1:03:b3:29:86:13:3f:04:b6: a7:59:d1:98:57:e0:0b:29:3e:70:81:cb:f0:16:59: 6e:a1:59:da:65:13:02:d8:5b:34:32:e3:47:23:26: 30:a2:88:26:4a:35:2f:3c:5e:90:7a:2f:68:7a:63: 87:e8:e3:7d:3a:f5:a4:1a:c7:89:b7:3a:31:e2:95: c2:51:1c:35:62:8e:3a:f7:71:54:2b:26:11:80:da: 05:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7E:24:35:35:14:9E:FA:E3:94:99:92:ED:F5:00:2A:D6:A8:72:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:47:b0:c5:de:7d:54:ad:db:05:a4:a0:c9:2b:e6:d4:97:ce: 71:79:5a:98:3f:5e:87:1f:6e:21:6e:d7:c5:65:d6:18:68:f4: bc:22:79:6f:8c:3d:fd:46:52:aa:91:ae:b1:d4:6c:f4:05:4d: 3e:92:50:15:dd:71:00:c3:0c:7d:08:f4:7f:e1:e2:c3:37:cf: 6f:f3:c4:ea:40:a2:94:95:c3:e0:80:60:98:02:e0:81:48:83: 21:78:5d:21:c2:4f:79:58:b1:af:e6:98:57:98:bc:e2:15:17: 26:fc:2d:9b:ac:f3:f1:6d:d7:e2:b6:94:36:1a:a4:45:99:2f: ab:d0:3a:ce:66:83:41:3a:d7:85:d6:0f:7c:ae:73:14:94:68: 7e:25:32:0e:0e:3c:0d:30:e4:e1:f5:ab:82:11:3d:18:41:2f: 43:ea:92:2f:52:80:02:e2:7e:8d:60:2d:8a:7e:ea:69:f7:28: ea:c5:6a:f4:1a:f0:52:c8:22:3c:ca:54:23:21:09:81:c8:98: 36:e5:5a:f9:1b:dc:f2:72:1b:09:fa:24:fa:04:14:89:ce:61: 27:31:69:37:d8:a1:40:ad:74:61:28:06:1b:89:7a:31:f1:ec: aa:ac:2c:be:0a:9b:4f:49:ef:ac:35:72:7f:8c:9e:a7:d3:00: d2:b9:33:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmCMT8uy0vvLn8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk ODc2NzIxZDgtNmMwZi00MjVhLThiMDMtZGM5ODAwMzNhOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0u6Z0mpBwxgyo+e7WSQpJ3dSTEDV4AfqwwF qwcvgfbjwkBNDgTJ70WxlngC2ztD111AflIZ4L62lnNK9vqY/lqnxzSYY6cB0PsA IRmVY8wSUXj+CE//kQ0O4fHfguHfsPt3KOQTa+30Tf41L7Ct+VCV+HnU6owrSmpd 4VJjEw9bmyGiXDVt4SaJWYHKD5nGxabNv/0c+SmaQ0TAtLM3hNYd8URZ2H+0++Px A7MphhM/BLanWdGYV+ALKT5wgcvwFlluoVnaZRMC2Fs0MuNHIyYwoogmSjUvPF6Q ei9oemOH6ON9OvWkGseJtzox4pXCURw1Yo4693FUKyYRgNoFDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV+JDU1FJ7645SZku31ACrWqHKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlHsMXefVSt2wWkoMkr5tSXznF5Wpg/XocfbiFu18Vl1hho9LwieW+M Pf1GUqqRrrHUbPQFTT6SUBXdcQDDDH0I9H/h4sM3z2/zxOpAopSVw+CAYJgC4IFI gyF4XSHCT3lYsa/mmFeYvOIVFyb8LZus8/Ft1+K2lDYapEWZL6vQOs5mg0E614XW D3yucxSUaH4lMg4OPA0w5OH1q4IRPRhBL0Pqki9SgALifo1gLYp+6mn3KOrFavQa 8FLIIjzKVCMhCYHImDblWvkb3PJyGwn6JPoEFInOYScxaTfYoUCtdGEoBhuJejHx 7KqsLL4Km09J76w1cn+MnqfTANK5MyU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:25 2025 by rpki-client