$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/58a10bb5-c049-31c7-b06c-5c15c054c11b.roa File: 58a10bb5-c049-31c7-b06c-5c15c054c11b.roa (raw, json) Hash identifier: zeZ6kjTdiFvR38R4r/sBvw0DGGqLe1p8IJrRAPa3sKM= Subject key identifier: 4A:E6:72:DD:38:67:7F:E3:A5:8F:7D:3C:50:FE:54:87:9C:E0:03:D8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858492CB2089B6FF6C9FE27DCBA80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/58a10bb5-c049-31c7-b06c-5c15c054c11b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 8.12.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:08:9b:6f:f6:c9:fe:27:dc:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=c94c8b92-08d5-46e3-b0cf-eae6f6a559ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:ad:46:5d:14:61:75:a0:87:5e:2b:b7:ad: 5f:46:83:20:2e:a2:d5:ec:50:a9:6d:01:bc:63:4a: 9e:9a:11:4b:37:25:d0:e8:6c:17:63:54:f7:de:f3: 62:28:8b:b9:c9:e7:2a:6f:9b:8f:c1:2a:e4:10:24: 84:8a:89:94:69:5e:e1:1c:19:57:a0:6a:8a:82:c6: a5:f8:1b:1b:07:fa:70:58:72:ed:f0:8b:35:3e:cf: 4a:18:e2:34:1e:86:c1:27:13:49:f9:26:50:3a:de: 89:6b:8f:6f:19:8f:41:77:71:c6:df:f9:73:fe:8f: b9:46:ab:06:24:70:68:01:02:05:fc:1d:d2:b4:69: bb:02:2d:30:e5:a1:bc:b6:16:dc:6f:d2:34:38:ca: d5:74:8c:42:48:20:44:0f:49:1e:4c:87:8d:e2:d8: 86:7b:5a:23:60:bc:5c:27:dd:51:3d:a6:fb:ba:fd: 57:48:ed:8e:64:76:cb:a6:00:4d:1f:85:7e:7b:fb: 8c:79:2b:8e:2d:fc:7e:20:dc:64:6a:1f:21:9c:99: e0:2e:2f:8a:f9:f4:9b:89:e9:7f:7e:49:2d:08:55: 2b:67:79:a4:aa:66:63:14:05:9e:9b:55:dd:0f:76: 93:de:86:6f:f9:57:90:43:07:8a:0d:20:d3:a2:55: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E6:72:DD:38:67:7F:E3:A5:8F:7D:3C:50:FE:54:87:9C:E0:03:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/58a10bb5-c049-31c7-b06c-5c15c054c11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.12.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8c:7c:7d:8a:db:ba:58:0c:20:32:ea:75:b4:58:c1:89:99: f2:f7:81:68:ab:72:33:f2:8d:60:62:b6:b7:aa:06:d8:b6:f4: 34:e1:68:b2:d4:14:d2:f7:7d:f4:98:81:b0:56:15:4b:ce:86: bc:fc:ac:34:0b:78:1b:81:c1:09:54:bd:a6:8c:57:e8:ae:c5: 68:c2:a2:11:3b:49:15:30:37:44:ca:0b:bf:81:a1:12:44:b8: 74:d5:8a:0a:c0:5b:a5:15:57:23:44:ae:6d:8f:c8:80:8b:11: a2:33:92:0e:ce:2c:48:67:27:17:58:d9:3b:28:ab:14:b7:db: b6:7c:34:48:52:a0:90:21:77:09:c7:ad:c2:22:86:f8:30:6d: 8f:08:21:66:41:43:d8:a2:bb:72:4f:8d:b2:47:58:7a:d7:72: 7f:aa:a5:35:5e:80:65:9e:90:3d:56:cc:41:ea:75:51:66:72: 27:bd:da:3d:28:1d:e6:66:95:03:93:4e:7c:4a:ac:a8:34:80: 82:c7:b7:2d:6f:1f:c8:9e:33:05:e6:6e:a4:21:f0:d2:0e:db: 79:52:4d:94:e4:53:ba:b2:1c:6b:4f:c7:f1:85:f6:73:b4:30: 4a:de:86:00:3b:b2:7c:59:f7:29:07:50:9d:b3:d6:29:8a:75: 8f:4d:5e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgibb/bJ/ifcuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Yzk0YzhiOTItMDhkNS00NmUzLWIwY2YtZWFlNmY2YTU1OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF6tRl0UYXWgh14rt61fRoMgLqLV7FCpbQG8 Y0qemhFLNyXQ6GwXY1T33vNiKIu5yecqb5uPwSrkECSEiomUaV7hHBlXoGqKgsal +BsbB/pwWHLt8Is1Ps9KGOI0HobBJxNJ+SZQOt6Ja49vGY9Bd3HG3/lz/o+5RqsG JHBoAQIF/B3StGm7Ai0w5aG8thbcb9I0OMrVdIxCSCBED0keTIeN4tiGe1ojYLxc J91RPab7uv1XSO2OZHbLpgBNH4V+e/uMeSuOLfx+INxkah8hnJngLi+K+fSbiel/ fkktCFUrZ3mkqmZjFAWem1XdD3aT3oZv+VeQQweKDSDTolXxywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErmct04Z3/jpY99PFD+VIec4APYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNThhMTBiYjUtYzA0OS0z MWM3LWIwNmMtNWMxNWMwNTRjMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAxPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGMfH2K27pYDCAy6nW0WMGJmfL3gWircjPyjWBitreqBti29DThaLLU FNL3ffSYgbBWFUvOhrz8rDQLeBuBwQlUvaaMV+iuxWjCohE7SRUwN0TKC7+BoRJE uHTVigrAW6UVVyNErm2PyICLEaIzkg7OLEhnJxdY2TsoqxS327Z8NEhSoJAhdwnH rcIihvgwbY8IIWZBQ9iiu3JPjbJHWHrXcn+qpTVegGWekD1WzEHqdVFmcie92j0o HeZmlQOTTnxKrKg0gILHty1vH8ieMwXmbqQh8NIO23lSTZTkU7qyHGtPx/GF9nO0 MErehgA7snxZ9ykHUJ2z1imKdY9NXqM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:22 2025 by rpki-client