$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3133b201-516b-3fee-8110-ac0c678aa31d.roa File: 3133b201-516b-3fee-8110-ac0c678aa31d.roa (raw, json) Hash identifier: 5wY8ejbKYlvR/i5kAKNKou8gsMFYI5rFA+PUGnlk04U= Subject key identifier: E1:05:71:D1:22:94:A9:E8:EB:A9:C2:64:D4:01:41:A7:0C:65:30:09 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858486695BCD06588B792A51A9640 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3133b201-516b-3fee-8110-ac0c678aa31d.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 936 IP address blocks: 8.36.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:bc:d0:65:88:b7:92:a5:1a:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=546ef863-b838-429e-8651-74257bb23c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:87:6f:47:10:54:aa:87:c4:44:ae:0c:f6: da:d7:21:ed:b7:ac:bc:01:ab:85:45:4b:9c:63:07: 02:d0:08:5b:41:43:c8:f9:7c:eb:4a:64:99:13:27: 2c:67:89:98:02:22:c1:8f:3d:56:65:f7:26:b0:8a: d9:69:68:cf:a9:1a:ad:f6:cd:49:1d:99:d9:78:b8: 5e:40:63:c7:16:b5:c1:cb:cb:5a:2e:ee:90:28:c4: 30:44:c8:d1:48:dd:bc:94:47:56:45:7d:f8:89:2d: 2e:9e:21:40:e4:33:ae:d4:b4:52:3c:57:a3:10:3b: 69:5f:03:32:68:26:96:9d:65:ac:a7:5b:5f:7c:22: f0:54:e0:41:ef:27:35:58:53:c4:b1:08:4d:a0:43: ff:c3:ea:74:ee:e2:49:4c:fd:25:11:29:de:2e:4a: 70:e6:3f:5b:15:67:71:a0:7e:13:f0:d9:33:fd:14: db:28:28:8d:2a:71:73:8c:80:84:21:51:e8:2a:b4: f3:cd:46:1b:0c:79:56:53:c4:9d:ef:4b:1c:cc:06: 64:e7:68:8e:44:5f:32:82:6c:2c:7a:2a:18:95:fe: 6c:df:61:09:d4:db:59:af:ca:e3:25:01:05:67:43: 25:d0:28:16:58:ce:65:71:91:7f:ba:4a:7e:8f:3c: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:05:71:D1:22:94:A9:E8:EB:A9:C2:64:D4:01:41:A7:0C:65:30:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3133b201-516b-3fee-8110-ac0c678aa31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:31:62:d8:1d:26:06:61:49:0f:b0:bb:8e:68:f9:40:10:f9: dc:4a:c1:b5:25:63:e1:a4:a9:80:cd:9c:50:d4:a4:88:5f:ce: 1b:90:b7:a4:5a:65:c3:a9:e4:5b:7f:e1:3f:d3:81:23:dc:55: 50:8e:f5:00:35:c2:1d:a8:07:25:1e:c8:de:08:bf:21:e5:ec: 10:64:fa:3f:f1:a5:7a:06:04:59:62:56:44:88:77:39:0e:c5: af:83:e2:0e:1a:e8:a7:32:94:37:16:a0:33:1a:6f:a0:cc:e3: 35:8c:d0:16:b8:9f:2a:d3:ae:50:d5:69:2d:a5:4e:5c:4d:e8: 67:75:3c:22:8a:cb:b9:e1:01:79:9c:7f:9a:5a:ce:26:23:0b: 9a:51:fa:9f:ed:3d:22:fb:88:d0:2a:6d:86:13:26:fe:39:44: a5:67:39:6f:de:f5:13:aa:f5:0f:66:12:14:74:ed:f4:9c:77: c3:fc:59:5b:22:73:34:60:60:78:a1:fd:a2:f3:46:d5:a7:c1: 41:3e:2d:ef:5b:5a:b8:61:43:b1:56:2d:a0:65:36:f7:d2:22: 10:2c:dd:60:08:5f:a3:5f:67:df:25:f0:78:f7:7c:6a:62:d2: 23:d2:1e:03:96:8c:64:65:1e:d2:06:8d:a3:fe:f0:00:e7:eb: 0a:76:75:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbzQZYi3kqUalkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk NTQ2ZWY4NjMtYjgzOC00MjllLTg2NTEtNzQyNTdiYjIzYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuOHb0cQVKqHxESuDPba1yHtt6y8AauFRUuc YwcC0AhbQUPI+XzrSmSZEycsZ4mYAiLBjz1WZfcmsIrZaWjPqRqt9s1JHZnZeLhe QGPHFrXBy8taLu6QKMQwRMjRSN28lEdWRX34iS0uniFA5DOu1LRSPFejEDtpXwMy aCaWnWWsp1tffCLwVOBB7yc1WFPEsQhNoEP/w+p07uJJTP0lESneLkpw5j9bFWdx oH4T8Nkz/RTbKCiNKnFzjICEIVHoKrTzzUYbDHlWU8Sd70sczAZk52iORF8ygmws eioYlf5s32EJ1NtZr8rjJQEFZ0Ml0CgWWM5lcZF/ukp+jzxcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEFcdEilKno66nCZNQBQacMZTAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzEzM2IyMDEtNTE2Yi0z ZmVlLTgxMTAtYWMwYzY3OGFhMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4xYtgdJgZhSQ+wu45o+UAQ+dxKwbUlY+GkqYDNnFDUpIhfzhuQt6Ra ZcOp5Ft/4T/TgSPcVVCO9QA1wh2oByUeyN4IvyHl7BBk+j/xpXoGBFliVkSIdzkO xa+D4g4a6KcylDcWoDMab6DM4zWM0Ba4nyrTrlDVaS2lTlxN6Gd1PCKKy7nhAXmc f5paziYjC5pR+p/tPSL7iNAqbYYTJv45RKVnOW/e9ROq9Q9mEhR07fScd8P8WVsi czRgYHih/aLzRtWnwUE+Le9bWrhhQ7FWLaBlNvfSIhAs3WAIX6NfZ98l8Hj3fGpi 0iPSHgOWjGRlHtIGjaP+8ADn6wp2dZQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:56 2025 by rpki-client