$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa File: 54999924-5032-3b39-ac1c-a58f234e2e45.roa (raw, json) Hash identifier: CuKIg7UY5mYj0lwdF+jXNq4YeAZuvHcBhKjZXWy2jUg= Subject key identifier: 0C:EA:71:C2:AC:DF:1C:3F:AB:AD:C4:B8:F8:98:40:25:51:A4:7B:38 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848D90BB5F65AA3252D1F1DED40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa Signing time: Tue 11 Feb 2025 14:00:52 +0000 ROA not before: Tue 11 Feb 2025 14:00:52 +0000 ROA not after: Mon 12 May 2025 13:00:52 +0000 asID: 26842 IP address blocks: 64.158.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:0b:b5:f6:5a:a3:25:2d:1f:1d:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 11 14:00:52 2025 GMT Not After : May 12 13:00:52 2025 GMT Subject: CN=7f66cd62-a236-4a67-b4ae-acf50fe8c58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:53:4f:49:f9:66:14:52:a6:8f:2a:b9:81: 0d:d2:d4:2f:74:ac:f8:24:fb:b8:4a:ff:ba:dd:d9: 14:91:70:ee:de:14:56:eb:63:7c:a9:69:cd:39:03: fc:64:18:13:6f:68:2f:e4:91:f8:06:6e:16:9d:07: 55:59:00:dc:7f:8b:99:fd:80:37:e4:ae:64:b7:72: 7d:34:6f:e9:08:21:ff:89:8f:c8:57:e9:d0:53:55: 07:67:bc:21:b6:d4:60:1d:e1:78:89:c3:82:75:46: a1:28:27:03:b9:90:ac:6c:de:71:3f:6e:67:66:19: dc:1d:a8:28:be:a3:30:64:21:86:f3:ea:18:22:17: 0d:fe:b7:be:3a:aa:1a:7c:0e:aa:3a:6e:dc:82:1a: e0:63:b1:43:ed:f3:49:8e:fd:ec:98:80:a4:e8:74: 7d:71:74:a0:3b:cd:73:0a:51:b6:d0:4f:1a:ef:37: b0:a1:f0:32:b3:5d:67:78:ea:b2:5c:54:f1:4b:4b: b6:db:99:ee:df:ef:8e:0d:d5:e1:19:3a:72:e9:34: d4:82:43:7b:5a:5b:67:dc:b2:32:18:0f:ee:e1:97: 21:53:af:98:6c:5f:fb:f4:93:0d:84:48:5f:bd:bc: 46:20:dd:ed:09:8c:88:11:37:73:a0:75:d3:8b:c1: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EA:71:C2:AC:DF:1C:3F:AB:AD:C4:B8:F8:98:40:25:51:A4:7B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/54999924-5032-3b39-ac1c-a58f234e2e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.158.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:18:8c:55:bb:69:bd:48:df:56:a7:16:52:48:ff:f0:a4:22: 2b:60:04:e1:0f:9c:02:55:e2:9f:7e:b5:34:3c:27:52:cf:f6: 3e:42:0f:2e:cb:32:2e:5e:f2:48:e7:de:3d:b3:a1:45:f8:00: 9b:a3:62:7f:75:d4:51:51:b2:5b:fd:95:13:f1:5f:41:64:fa: f0:a7:91:66:ed:e2:34:fa:74:83:24:32:a9:5e:be:78:81:64: fe:ed:35:5f:03:a0:8e:35:51:51:77:6a:13:fd:43:bd:0c:c9: 42:f2:4c:27:27:f2:a4:26:a7:12:9c:18:f8:f9:e5:62:65:d0: 87:d8:48:cc:0f:76:e2:49:1c:5c:e3:e8:2c:aa:0d:9e:e5:f3: 23:27:10:81:17:3c:2a:81:94:74:46:3c:4f:83:95:d6:cb:ed: d1:b8:a7:33:97:16:0a:1b:10:4d:15:06:ed:45:e8:2d:31:8a: c0:4c:30:e5:d7:b3:55:51:4c:86:a0:9e:53:b0:b2:96:6b:46: 4e:e8:6c:91:22:fb:c6:7e:1a:cf:29:1a:eb:44:10:2a:91:04: 87:3a:d2:53:3c:38:5f:81:ab:35:17:78:27:fe:9e:4f:ef:36: f3:96:35:57:f9:7b:74:0a:5c:29:61:fe:70:2c:87:d9:12:98: bf:13:9a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZC7X2WqMlLR8d7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIxMTE0MDA1MloXDTI1MDUxMjEzMDA1MlowLzEtMCsGA1UEAxMk N2Y2NmNkNjItYTIzNi00YTY3LWI0YWUtYWNmNTBmZThjNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLdTT0n5ZhRSpo8quYEN0tQvdKz4JPu4Sv+6 3dkUkXDu3hRW62N8qWnNOQP8ZBgTb2gv5JH4Bm4WnQdVWQDcf4uZ/YA35K5kt3J9 NG/pCCH/iY/IV+nQU1UHZ7whttRgHeF4icOCdUahKCcDuZCsbN5xP25nZhncHago vqMwZCGG8+oYIhcN/re+OqoafA6qOm7cghrgY7FD7fNJjv3smICk6HR9cXSgO81z ClG20E8a7zewofAys11neOqyXFTxS0u225nu3++ODdXhGTpy6TTUgkN7Wltn3LIy GA/u4ZchU6+YbF/79JMNhEhfvbxGIN3tCYyIETdzoHXTi8E6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzqccKs3xw/q63EuPiYQCVRpHs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTQ5OTk5MjQtNTAzMi0z YjM5LWFjMWMtYTU4ZjIzNGUyZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJ7JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMYjFW7ab1I31anFlJI//CkIitgBOEPnAJV4p9+tTQ8J1LP9j5CDy7L Mi5e8kjn3j2zoUX4AJujYn911FFRslv9lRPxX0Fk+vCnkWbt4jT6dIMkMqlevniB ZP7tNV8DoI41UVF3ahP9Q70MyULyTCcn8qQmpxKcGPj55WJl0IfYSMwPduJJHFzj 6CyqDZ7l8yMnEIEXPCqBlHRGPE+DldbL7dG4pzOXFgobEE0VBu1F6C0xisBMMOXX s1VRTIagnlOwspZrRk7obJEi+8Z+Gs8pGutEECqRBIc60lM8OF+BqzUXeCf+nk/v NvOWNVf5e3QKXClh/nAsh9kSmL8Tmr4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:55 2025 by rpki-client