$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa File: 391fae6e-c374-3d34-84aa-27f280411df1.roa (raw, json) Hash identifier: rR6rfLj+IFHeuSm5lzfPMxoOie48iUcqAmUmqnNTtbA= Subject key identifier: 2C:04:4F:23:77:A1:75:31:A6:F5:C2:DE:E5:17:E3:B4:F6:B8:57:41 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC29BB150892226F471700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.9.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:29:bb:15:08:92:22:6f:47:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=096c6402-bc2b-42a8-b6f6-ba5e7191de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:8a:f4:bc:00:00:11:e0:86:12:fd:c3:bc: 53:23:05:6f:39:7b:ac:34:a2:ce:34:2d:f5:bd:94: e1:68:a2:02:87:be:52:c8:b8:36:1c:dc:74:19:46: de:6e:51:60:b5:e8:b5:93:06:8c:b1:11:6b:4f:27: fe:11:4b:ad:9d:4a:34:0b:0d:93:05:99:80:cf:6f: e4:21:64:56:ec:07:bc:41:38:07:6c:ba:c3:e6:2e: 81:12:70:28:06:70:48:1f:b7:7c:80:0a:4c:d0:2e: f0:c0:0e:a6:67:35:b1:fc:5d:50:69:17:e1:05:33: b6:61:9a:0d:dd:c9:16:02:b5:d7:2b:6b:b1:11:f5: 53:2e:da:28:02:e3:0d:1b:be:8d:e8:55:80:21:7d: 84:7d:6f:6b:cd:bf:90:f4:ff:4e:48:95:82:76:e2: 98:f6:0d:cb:6d:c1:60:7b:f2:cf:d7:b6:0f:4d:21: 85:e9:5a:5c:06:64:00:b6:1e:7f:56:23:99:99:ac: 2a:f4:29:8c:fe:6c:27:d2:c6:1d:fe:8d:83:49:ee: 45:cf:79:cf:2d:ee:d3:21:f0:6d:07:2a:df:29:a2: b8:1f:06:8c:47:08:26:47:09:b8:cd:7f:39:2e:8a: 7d:4f:d7:4e:8c:28:e2:f5:47:be:e7:ea:35:d5:dc: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:4F:23:77:A1:75:31:A6:F5:C2:DE:E5:17:E3:B4:F6:B8:57:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:93:99:02:03:df:e9:15:4c:76:68:04:b0:5b:30:3f:27:00: d2:51:1f:4d:58:b1:b9:73:03:6a:7e:55:94:13:9b:3f:b6:fc: bf:fd:5c:80:62:28:c8:34:6d:8a:36:8d:5d:db:0f:ef:96:a1: 4e:00:aa:55:bb:c1:25:13:ac:89:2e:25:ab:e6:cf:16:0e:d6: c3:a5:5c:e0:cc:88:ff:c1:f5:68:90:b6:e7:bd:4a:aa:81:24: 6e:bd:9b:93:47:bc:f1:19:6d:49:97:3c:98:f0:de:23:db:7e: 87:74:07:f4:0f:93:2c:a4:96:e2:99:69:17:cf:4d:cb:20:b0: 50:f0:de:72:2e:fd:18:e3:de:03:f5:96:7d:84:8c:97:c6:1f: c1:f4:9d:8f:ca:ba:ac:3e:51:5e:d7:aa:e4:5e:18:1f:15:73: 8a:3c:c0:7f:a0:cd:99:70:eb:bd:0f:52:32:a6:f8:4d:1b:f8: c5:0b:b1:7f:55:a4:16:99:b4:ae:be:ad:49:b6:f6:2d:60:09: 64:9b:e3:a9:af:4f:dd:29:cd:dd:c6:df:0e:90:7b:01:6a:77: 68:c8:06:b0:a1:90:61:21:53:c5:a2:11:f6:bc:ae:53:01:cc: 1d:79:cc:59:5d:5a:5a:6a:3b:24:36:63:ac:fb:4f:3d:50:c7: b6:2f:0c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Cm7FQiSIm9HFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDk2YzY0MDItYmMyYi00MmE4LWI2ZjYtYmE1ZTcxOTFkZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6CK9LwAABHghhL9w7xTIwVvOXusNKLONC31 vZThaKICh75SyLg2HNx0GUbeblFgtei1kwaMsRFrTyf+EUutnUo0Cw2TBZmAz2/k IWRW7Ae8QTgHbLrD5i6BEnAoBnBIH7d8gApM0C7wwA6mZzWx/F1QaRfhBTO2YZoN 3ckWArXXK2uxEfVTLtooAuMNG76N6FWAIX2EfW9rzb+Q9P9OSJWCduKY9g3LbcFg e/LP17YPTSGF6VpcBmQAth5/ViOZmawq9CmM/mwn0sYd/o2DSe5Fz3nPLe7TIfBt ByrfKaK4HwaMRwgmRwm4zX85Lop9T9dOjCji9Ue+5+o11dzeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwETyN3oXUxpvXC3uUX47T2uFdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzkxZmFlNmUtYzM3NC0z ZDM0LTg0YWEtMjdmMjgwNDExZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2TmQID3+kVTHZoBLBbMD8nANJRH01YsblzA2p+VZQTmz+2/L/9XIBi KMg0bYo2jV3bD++WoU4AqlW7wSUTrIkuJavmzxYO1sOlXODMiP/B9WiQtue9SqqB JG69m5NHvPEZbUmXPJjw3iPbfod0B/QPkyykluKZaRfPTcsgsFDw3nIu/Rjj3gP1 ln2EjJfGH8H0nY/Kuqw+UV7XquReGB8Vc4o8wH+gzZlw670PUjKm+E0b+MULsX9V pBaZtK6+rUm29i1gCWSb46mvT90pzd3G3w6QewFqd2jIBrChkGEhU8WiEfa8rlMB zB15zFldWlpqOyQ2Y6z7Tz1Qx7YvDHs= -----END CERTIFICATE-----Generated at Fri May 9 20:33:17 2025 by rpki-client