$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/49b4da33-d249-30e1-9656-c0e8370b206a.roa File: 49b4da33-d249-30e1-9656-c0e8370b206a.roa (raw, json) Hash identifier: VgcsCGlaaGk2QNnNcco/7RQeYTHD7SqAoZzUi1dqhW8= Subject key identifier: DC:D4:C7:D6:7E:41:BD:0B:FB:77:B3:01:6B:C2:FA:E7:2C:EF:9D:55 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848C2B6495156DB7F29E2976580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/49b4da33-d249-30e1-9656-c0e8370b206a.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 207.123.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:49:51:56:db:7f:29:e2:97:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=81c360d9-fb96-4598-976b-614be5c36a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8e:3b:0a:ce:ce:94:a5:11:e7:6d:9d:97:5a: d8:91:b4:3d:4e:de:db:9d:c6:db:b7:34:0c:a5:93: 34:60:7e:d4:6a:a2:3a:24:31:e7:ad:f8:ed:36:fe: 2d:5d:c9:74:4a:09:01:d9:c7:ef:12:5e:c6:fd:e9: d2:e6:03:55:1b:50:ea:1c:8d:82:62:4e:89:82:3a: 2a:41:ec:c4:d1:3d:f9:db:89:ba:c5:47:ba:c2:fa: 88:e9:ce:1b:22:04:12:af:94:6c:30:ab:6f:a3:48: e1:ee:8a:5f:44:9b:03:3c:bb:66:13:f2:85:b4:8d: 9c:33:f1:7f:ec:4d:06:74:7c:f4:29:10:96:1c:e3: ce:03:01:28:d0:12:f7:45:8f:21:c2:fe:e1:3d:b2: 1f:cb:eb:c8:49:32:9c:b4:3c:33:ac:4c:96:9d:31: 87:9d:23:3a:42:9a:bb:92:a9:51:91:56:87:58:c2: 89:f4:a7:c9:f5:db:79:be:f5:90:e1:81:ea:a5:4d: 68:b2:b7:c9:5b:bb:d1:44:2c:ed:f6:48:31:27:1b: 1b:59:ab:ab:c1:a8:5c:3d:69:58:4b:93:6b:e7:57: bc:e6:54:26:d0:48:7a:61:50:f0:0f:39:0d:17:27: d6:49:10:1c:1f:fd:21:07:e9:ea:dc:e5:84:83:ab: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D4:C7:D6:7E:41:BD:0B:FB:77:B3:01:6B:C2:FA:E7:2C:EF:9D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/49b4da33-d249-30e1-9656-c0e8370b206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.123.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:67:84:02:13:37:55:70:d5:08:80:b1:53:09:22:e4:d8:71: 61:f7:78:5b:9c:b8:7e:c9:31:3d:5a:c8:4a:fd:5c:70:b4:59: fb:a1:29:16:d5:1a:57:15:97:ec:ae:be:46:f7:99:07:74:5c: 5c:dc:1f:6e:20:a9:dc:cb:f4:ea:c0:05:96:5b:f7:f7:e5:3d: 00:e2:1a:25:c3:1f:c0:52:c2:1d:f6:7f:41:40:ef:a4:97:61: b8:47:a5:31:b4:87:74:64:ed:d0:e9:05:e6:e7:8b:cd:59:43: 07:05:73:c4:a9:ee:25:bd:c4:f6:f7:4f:19:0e:d3:0b:06:a1: 98:09:77:14:cc:fc:6e:ff:b7:db:a9:ac:35:b9:04:06:57:7d: 35:80:09:46:ba:67:c9:a0:4d:a6:74:0e:42:0f:27:a0:22:1a: be:92:e5:f2:3a:aa:87:bf:04:dd:c7:13:ef:36:b3:f8:de:00: 38:f1:66:e2:72:b5:8a:f1:b6:64:37:dd:86:2d:3d:23:6f:8d: 93:62:44:16:c3:1a:b4:d2:89:66:b8:14:f7:2b:b8:9c:a2:b0: b4:72:73:90:a3:6b:0c:39:30:7f:7d:28:6d:e9:f3:97:69:dd: f2:91:c8:96:4c:ec:61:35:52:ba:c3:d6:ed:f7:d2:b7:a1:13: ad:7d:e9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtklRVtt/KeKXZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk ODFjMzYwZDktZmI5Ni00NTk4LTk3NmItNjE0YmU1YzM2YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko47Cs7OlKUR522dl1rYkbQ9Tt7bncbbtzQM pZM0YH7UaqI6JDHnrfjtNv4tXcl0SgkB2cfvEl7G/enS5gNVG1DqHI2CYk6Jgjoq QezE0T3524m6xUe6wvqI6c4bIgQSr5RsMKtvo0jh7opfRJsDPLtmE/KFtI2cM/F/ 7E0GdHz0KRCWHOPOAwEo0BL3RY8hwv7hPbIfy+vISTKctDwzrEyWnTGHnSM6Qpq7 kqlRkVaHWMKJ9KfJ9dt5vvWQ4YHqpU1osrfJW7vRRCzt9kgxJxsbWaurwahcPWlY S5Nr51e85lQm0Eh6YVDwDzkNFyfWSRAcH/0hB+nq3OWEg6ub+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzUx9Z+Qb0L+3ezAWvC+ucs751VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDliNGRhMzMtZDI0OS0z MGUxLTk2NTYtYzBlODM3MGIyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz3vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItnhAITN1Vw1QiAsVMJIuTYcWH3eFucuH7JMT1ayEr9XHC0WfuhKRbV GlcVl+yuvkb3mQd0XFzcH24gqdzL9OrABZZb9/flPQDiGiXDH8BSwh32f0FA76SX YbhHpTG0h3Rk7dDpBebni81ZQwcFc8Sp7iW9xPb3TxkO0wsGoZgJdxTM/G7/t9up rDW5BAZXfTWACUa6Z8mgTaZ0DkIPJ6AiGr6S5fI6qoe/BN3HE+82s/jeADjxZuJy tYrxtmQ33YYtPSNvjZNiRBbDGrTSiWa4FPcruJyisLRyc5Cjaww5MH99KG3p85dp 3fKRyJZM7GE1UrrD1u330rehE6196fk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:56 2025 by rpki-client