$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3de94574-b81e-31b2-b276-df235ef92b58.roa File: 3de94574-b81e-31b2-b276-df235ef92b58.roa (raw, json) Hash identifier: YbV+NV5HUeshyIs5jRhygigk0NyWcmPY5gXXUxzzCrg= Subject key identifier: 76:8C:93:AA:19:FC:21:38:DB:92:5E:53:C2:F2:59:B5:EB:E6:99:20 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858492CB209014D59D49032945F70 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3de94574-b81e-31b2-b276-df235ef92b58.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 1340 IP address blocks: 8.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:09:01:4d:59:d4:90:32:94:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=006a7244-b594-4d40-ba4b-4f31917ba43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:cf:3d:4d:7b:e3:5c:43:b2:2e:41:bc:e3: 0d:0a:d0:dc:a9:64:a1:f2:d8:e7:82:30:ac:4b:b9: b5:d5:66:5c:37:60:d4:c3:3f:5c:3a:20:b4:ce:3b: b0:1c:79:74:aa:8b:59:74:61:e7:d0:22:16:6b:d2: 62:e5:9a:c4:5a:dd:bf:9b:51:32:ae:fe:f3:f1:b9: 44:5e:3c:48:2c:a4:e1:f2:c0:43:d5:62:01:5d:17: 67:6e:22:7f:a9:02:d3:74:21:70:97:b2:dc:fc:98: cf:4c:f5:25:6f:32:5b:98:47:26:93:32:6c:c4:e5: e0:a5:07:ac:c2:3d:b6:e0:63:4e:6c:67:f5:a9:92: 15:4f:15:db:20:d0:52:1e:df:bd:05:13:64:35:55: 76:47:9e:2a:89:35:ba:04:eb:78:12:65:90:f8:f9: e2:6e:64:31:f7:1a:b2:b3:bb:e6:18:df:82:90:7f: 1e:20:79:bb:cb:04:f1:e9:23:f6:f4:93:d9:56:ef: e3:85:53:cc:39:e1:3f:43:da:b8:60:65:7c:f4:d8: 85:f6:4d:84:83:89:5c:fb:14:0c:10:80:d0:f6:59: 2d:a0:57:1d:c9:d9:1f:82:1a:66:19:24:93:82:74: 3e:27:f3:45:99:fd:36:08:da:d4:58:84:ac:48:c6: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8C:93:AA:19:FC:21:38:DB:92:5E:53:C2:F2:59:B5:EB:E6:99:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3de94574-b81e-31b2-b276-df235ef92b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d2:54:f6:02:52:05:c8:d2:a3:58:22:7e:02:7e:88:ce:79: 0b:84:42:ec:ef:32:93:63:39:a9:5e:2f:11:65:c7:9d:80:01: f6:7e:8a:ca:e3:3b:66:45:8b:46:9b:c9:47:1d:7f:43:51:9e: 10:1f:78:93:f6:06:2b:a9:4b:11:de:49:6b:c8:13:00:66:fc: 9f:f4:d4:13:8f:38:4b:0c:67:d3:cb:63:0d:77:59:9c:9e:df: 9f:7a:70:31:9d:28:92:eb:e1:31:c1:cf:50:fb:1b:d4:01:bf: a7:fb:96:49:4d:4b:2c:2b:18:43:32:df:ae:9a:6a:93:b4:67: 2d:e1:89:fa:0e:3c:a5:c2:c3:28:61:43:b5:97:1f:5e:7d:ff: 4d:92:9a:48:d3:17:20:e3:50:d9:48:aa:a0:18:68:71:17:71: 8e:cc:1c:5a:36:30:3d:0b:1d:6f:20:e0:6d:2c:e9:5e:c5:77: 83:be:46:1d:a5:98:c8:48:7c:19:a0:14:85:cf:1f:fc:1a:6b: 45:7f:ad:72:67:84:48:4a:84:93:59:81:52:37:d6:61:d2:4a: 71:d8:94:4b:ec:b9:8b:32:fa:7f:14:77:54:8f:51:f5:ed:7e: 06:37:ab:e1:64:f2:4b:8b:64:f8:af:f4:eb:ea:1a:0d:bb:4f: 88:68:91:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgkBTVnUkDKUX3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDA2YTcyNDQtYjU5NC00ZDQwLWJhNGItNGYzMTkxN2JhNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDDPPU1741xDsi5BvOMNCtDcqWSh8tjngjCs S7m11WZcN2DUwz9cOiC0zjuwHHl0qotZdGHn0CIWa9Ji5ZrEWt2/m1Eyrv7z8blE XjxILKTh8sBD1WIBXRdnbiJ/qQLTdCFwl7Lc/JjPTPUlbzJbmEcmkzJsxOXgpQes wj224GNObGf1qZIVTxXbINBSHt+9BRNkNVV2R54qiTW6BOt4EmWQ+PnibmQx9xqy s7vmGN+CkH8eIHm7ywTx6SP29JPZVu/jhVPMOeE/Q9q4YGV89NiF9k2Eg4lc+xQM EIDQ9lktoFcdydkfghpmGSSTgnQ+J/NFmf02CNrUWISsSMaw7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaMk6oZ/CE425JeU8LyWbXr5pkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2RlOTQ1NzQtYjgxZS0z MWIyLWIyNzYtZGYyMzVlZjkyYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7SVPYCUgXI0qNYIn4CfojOeQuEQuzvMpNjOaleLxFlx52AAfZ+isrj O2ZFi0abyUcdf0NRnhAfeJP2BiupSxHeSWvIEwBm/J/01BOPOEsMZ9PLYw13WZye 3596cDGdKJLr4THBz1D7G9QBv6f7lklNSywrGEMy366aapO0Zy3hifoOPKXCwyhh Q7WXH159/02SmkjTFyDjUNlIqqAYaHEXcY7MHFo2MD0LHW8g4G0s6V7Fd4O+Rh2l mMhIfBmgFIXPH/waa0V/rXJnhEhKhJNZgVI31mHSSnHYlEvsuYsy+n8Ud1SPUfXt fgY3q+Fk8kuLZPiv9OvqGg27T4hokfc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:08:43 2025 by rpki-client