$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json) Hash identifier: tw2AfiFaRb7P45PKKrAfNhJzfP+xzpsdMDWjZXBL11M= Subject key identifier: 5A:19:BD:8B:57:1C:89:07:BD:A3:49:5A:33:A5:F4:2F:9E:8D:30:85 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849C79F614B1406E2B3E2F2BF80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 3356 IP address blocks: 209.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:61:4b:14:06:e2:b3:e2:f2:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=bee7c9b4-dda3-4665-b51a-9cb085b1a953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:3d:c4:e1:bb:f6:a3:b3:8f:6a:42:b1:3a: 52:06:03:ac:25:d7:a3:11:90:e3:f3:bc:b9:8e:9f: 51:43:eb:77:93:ee:71:07:8b:03:16:f9:79:6e:63: 2b:4f:99:9f:c8:8c:8f:f5:f4:1d:53:5f:b5:2a:bc: 48:18:c9:ae:76:7b:41:25:96:f8:ba:f5:99:cd:e9: e2:58:f9:ee:08:d3:23:9f:b0:1d:ea:b3:80:67:a7: b2:3b:9d:fc:73:11:15:ed:44:f4:52:3f:71:75:95: ee:95:73:6d:b8:18:d0:2e:dd:95:c7:2d:b1:b2:06: be:40:aa:b7:ce:48:ab:c6:5c:dc:fd:be:e0:d5:d1: f6:e8:2b:3e:55:f4:7e:4c:eb:0e:78:a2:0e:2b:65: 23:5f:1d:e3:7a:39:4d:32:28:17:ca:23:a4:6a:ed: b5:e0:e3:b4:f2:87:e9:5c:c0:14:01:fd:1f:52:bb: 5d:27:22:94:e3:81:ef:21:b4:43:1c:a0:89:83:e0: 51:d9:1b:ed:83:d5:08:ec:b1:64:21:d4:6d:20:3f: 0b:1b:f9:14:fb:ea:92:f3:ae:96:09:11:15:b8:1c: 80:8c:5c:b2:7a:ee:68:a9:ea:13:b0:63:7a:c9:32: cb:7f:fe:ea:d0:0b:96:93:8b:7f:3f:9b:5a:2e:6e: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:19:BD:8B:57:1C:89:07:BD:A3:49:5A:33:A5:F4:2F:9E:8D:30:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:29:cc:75:1d:64:e0:79:3b:e6:0c:fb:19:e1:e9:2c:e4:d1: c1:46:9f:0a:98:f2:db:a6:6e:e6:cb:cb:b3:19:5e:9a:b3:cd: da:49:e4:de:ad:2d:69:f5:cb:be:1e:f3:f7:02:51:47:3b:df: 5d:19:d0:23:59:08:bd:78:25:6a:5d:a4:56:fc:dd:42:57:b2: 99:cb:34:54:4f:5f:71:2a:32:7e:60:b7:b8:2b:3e:73:08:58: 19:a8:01:cd:06:77:21:ba:97:2d:57:11:33:c5:92:22:df:f3: ee:c4:3b:81:ac:52:cd:36:38:e4:a0:98:a3:75:9c:36:2a:34: e6:da:d9:0a:33:98:68:2f:61:bb:40:59:7e:28:c7:d5:9f:6e: c1:e3:57:57:be:8a:ef:96:4b:9e:b2:d9:5b:5d:74:04:b1:4d: 90:68:ad:07:6b:94:0b:7e:d1:1f:e4:66:db:d5:5d:57:19:14: 9f:60:8e:95:b0:29:3d:a5:25:f8:6f:a5:8a:89:7b:55:84:33: 87:94:0a:73:43:45:9c:2e:0f:51:5f:f4:16:22:01:32:92:29: fc:df:9f:48:9b:65:8f:c9:fb:1b:26:0e:d7:73:25:a6:a3:72: c7:24:d0:b0:32:f2:2a:9c:96:f8:9f:07:69:34:84:63:c5:2d: c8:bc:e2:ae -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnHn2FLFAbis+Lyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk YmVlN2M5YjQtZGRhMy00NjY1LWI1MWEtOWNiMDg1YjFhOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXE9xOG79qOzj2pCsTpSBgOsJdejEZDj87y5 jp9RQ+t3k+5xB4sDFvl5bmMrT5mfyIyP9fQdU1+1KrxIGMmudntBJZb4uvWZzeni WPnuCNMjn7Ad6rOAZ6eyO538cxEV7UT0Uj9xdZXulXNtuBjQLt2Vxy2xsga+QKq3 zkirxlzc/b7g1dH26Cs+VfR+TOsOeKIOK2UjXx3jejlNMigXyiOkau214OO08ofp XMAUAf0fUrtdJyKU44HvIbRDHKCJg+BR2Rvtg9UI7LFkIdRtID8LG/kU++qS866W CREVuByAjFyyeu5oqeoTsGN6yTLLf/7q0AuWk4t/P5taLm51lwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFoZvYtXHIkHvaNJWjOl9C+ejTCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzRhMTVkZjMtYWU3OC0z NzJlLTgxNjAtZTcxZDExOGI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgynMdR1k4Hk75gz7GeHpLOTRwUafCpjy26Zu5svLsxlemrPN2knk3q0t afXLvh7z9wJRRzvfXRnQI1kIvXglal2kVvzdQleymcs0VE9fcSoyfmC3uCs+cwhY GagBzQZ3IbqXLVcRM8WSIt/z7sQ7gaxSzTY45KCYo3WcNio05trZCjOYaC9hu0BZ fijH1Z9uweNXV76K75ZLnrLZW110BLFNkGitB2uUC37RH+Rm29VdVxkUn2COlbAp PaUl+G+liol7VYQzh5QKc0NFnC4PUV/0FiIBMpIp/N+fSJtlj8n7GyYO13MlpqNy xyTQsDLyKpyW+J8HaTSEY8UtyLzirg== -----END CERTIFICATE-----Generated at Sun May 11 08:35:56 2025 by rpki-client