$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa File: 42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa (raw, json) Hash identifier: 3yZW1uRAF/VmUhQpHDlXD1xmydWPrxZ0MqhUyh6gaPE= Subject key identifier: 49:4F:87:DC:A6:68:07:82:72:8E:DB:70:F3:4B:4A:66:97:73:2D:BD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A0D6A8876E1D04BC1F6153280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 394973 IP address blocks: 8.44.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:88:76:e1:d0:4b:c1:f6:15:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=e7698808-8ba8-4d64-b8c6-742b11a8c8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:55:08:97:5a:ee:9f:d1:cb:91:3d:2b:14:46: 9b:fb:e3:3d:cf:56:75:e2:16:55:76:c7:18:4c:44: 09:6e:12:78:12:0c:f6:e0:c9:52:db:1f:db:f3:ff: 35:82:81:a7:d2:2c:6b:a7:7d:33:f8:44:db:b7:d8: e3:6a:36:31:37:7e:bf:4e:26:b1:0b:3f:b9:5d:5f: 11:21:ab:99:6d:7b:ee:06:3d:a8:47:e7:dc:5e:55: 6c:b3:13:75:87:e4:7e:2f:fe:89:55:a8:9e:d5:c5: 56:23:af:ce:c4:77:2c:55:db:1a:c7:72:cd:d3:b0: f5:a4:20:38:79:f0:e7:16:16:71:b0:c3:2e:b8:36: 44:b5:94:34:66:70:6d:f4:4b:9d:c1:62:c1:6d:20: 6a:14:27:b9:5b:3e:a7:d0:45:02:30:73:c0:84:3c: 44:d7:eb:ff:a0:d3:07:20:4b:e9:4f:9e:a8:39:d9: 75:f1:f2:67:92:9a:f9:3d:e0:66:b8:3b:8b:61:72: 0e:74:ca:ec:de:39:00:55:f2:7f:89:fe:bd:8b:0f: ac:cc:4d:41:cc:ff:d1:26:ed:03:c0:f1:4c:8b:80: 21:80:6a:09:e4:d6:30:77:3b:d5:66:ad:c0:3a:eb: 1a:82:04:70:cb:26:de:04:15:22:78:7c:15:9b:95: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:87:DC:A6:68:07:82:72:8E:DB:70:F3:4B:4A:66:97:73:2D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.44.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:28:66:1d:39:c4:41:a2:c4:6e:1d:76:d5:7d:f2:02:ef:c5: dd:6b:dc:bb:62:e4:b3:65:18:95:46:c3:2e:50:2f:1b:7f:34: f8:c8:1d:4e:b1:fa:27:f3:48:f3:a2:93:19:70:13:ff:10:b2: c7:dd:c6:83:b6:cc:84:60:86:0d:2b:b8:ed:ef:99:04:65:da: a9:01:81:84:9a:39:77:bf:28:18:9a:8a:58:c9:d7:5a:dc:be: 7c:bc:3b:e9:14:b0:67:04:66:c4:b3:a0:f4:13:0c:76:58:eb: f2:5b:6f:98:48:21:df:3e:cd:f7:5f:6b:1d:c7:ac:9d:8b:06: 73:2d:92:e9:1a:a6:c4:65:ff:a0:48:d0:7b:b5:1a:f2:ca:fb: c1:7b:92:82:49:e8:79:c0:4d:81:f7:73:9a:96:b4:e8:c8:e7: 93:b3:97:95:83:99:1e:52:bf:b2:95:b6:54:f2:1b:0b:e0:54: aa:7b:ad:fc:a4:7a:2a:a3:a5:29:c9:55:3c:ea:59:9b:2b:73: 64:16:6a:8e:f2:b8:77:74:cf:91:ad:a3:e8:d4:16:ee:db:f1: 2b:89:6f:d3:57:7e:a8:7b:b7:36:6e:37:37:08:c7:dc:ac:7e: 62:97:13:14:f7:59:b8:b7:09:5a:49:21:0c:33:23:24:d6:6f: bd:11:7e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoh24dBLwfYVMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTc2OTg4MDgtOGJhOC00ZDY0LWI4YzYtNzQyYjExYThjOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lUIl1run9HLkT0rFEab++M9z1Z14hZVdscY TEQJbhJ4Egz24MlS2x/b8/81goGn0ixrp30z+ETbt9jjajYxN36/TiaxCz+5XV8R IauZbXvuBj2oR+fcXlVssxN1h+R+L/6JVaie1cVWI6/OxHcsVdsax3LN07D1pCA4 efDnFhZxsMMuuDZEtZQ0ZnBt9EudwWLBbSBqFCe5Wz6n0EUCMHPAhDxE1+v/oNMH IEvpT56oOdl18fJnkpr5PeBmuDuLYXIOdMrs3jkAVfJ/if69iw+szE1BzP/RJu0D wPFMi4AhgGoJ5NYwdzvVZq3AOusaggRwyybeBBUieHwVm5Xr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElPh9ymaAeCco7bcPNLSmaXcy29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDI1MDlmOGQtMjFlMC0z ZTdhLTlmZDktY2EwZTFhMmE2NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsoZh05xEGixG4ddtV98gLvxd1r3Lti5LNlGJVGwy5QLxt/NPjIHU6x +ifzSPOikxlwE/8QssfdxoO2zIRghg0ruO3vmQRl2qkBgYSaOXe/KBiailjJ11rc vny8O+kUsGcEZsSzoPQTDHZY6/Jbb5hIId8+zfdfax3HrJ2LBnMtkukapsRl/6BI 0Hu1GvLK+8F7koJJ6HnATYH3c5qWtOjI55Ozl5WDmR5Sv7KVtlTyGwvgVKp7rfyk eiqjpSnJVTzqWZsrc2QWao7yuHd0z5Gto+jUFu7b8SuJb9NXfqh7tzZuNzcIx9ys fmKXExT3Wbi3CVpJIQwzIyTWb70RfiA= -----END CERTIFICATE-----Generated at Sun Jun 8 07:39:39 2025 by rpki-client