$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa File: 5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa (raw, json) Hash identifier: /4U3O8+ro/F1q2tjiLxxcgpzbNlAIbSQfeADwtULcDw= Subject key identifier: F4:A7:95:27:AA:23:3C:79:80:84:05:82:2B:BD:41:20:9D:1F:40:9A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858487755D447BA21E4624463C780 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 22898 IP address blocks: 8.42.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d4:47:ba:21:e4:62:44:63:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=7b5c91da-700c-492f-bd04-5e193b125eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:0c:f9:4e:a4:b5:84:ed:32:d6:16:8f:af: c1:e8:2f:24:51:15:6a:b7:7f:11:ff:9a:9c:0b:05: c0:cc:cb:a2:f9:98:ec:a0:fa:cb:1f:fd:b7:24:64: 4d:41:70:77:26:cb:a1:87:86:44:b1:f3:b1:71:45: 42:c1:b2:02:ba:bb:ec:44:1c:17:ee:8c:90:a7:e3: 75:ea:bf:47:a8:da:3b:02:30:d1:51:c5:e3:a8:a7: 47:bb:f3:2f:23:f7:94:80:13:76:b1:ff:54:98:cb: e2:70:45:03:ff:46:79:db:49:2b:2e:34:e4:a1:4b: 25:48:50:39:7d:a7:14:54:7d:f0:47:4b:2f:46:5d: 88:e0:4a:d3:16:88:d9:ac:6f:a4:f9:42:d9:f6:3b: f6:12:c4:9f:5b:75:85:89:2e:b7:90:33:87:f0:ac: 53:dd:af:2a:eb:44:2e:ca:10:a4:14:8f:86:34:08: 51:e4:aa:d2:e6:81:46:32:95:ee:8c:0c:72:60:27: ce:24:43:d6:c0:70:c9:c6:c2:6a:80:5e:21:5d:91: a4:83:df:98:69:01:33:fd:e9:cf:79:57:5c:93:cb: 07:17:ff:80:6f:1b:b0:8c:85:21:9b:51:0a:7b:88: 04:3c:fb:58:c3:dd:9c:56:72:63:f9:b5:38:d2:39: c2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:95:27:AA:23:3C:79:80:84:05:82:2B:BD:41:20:9D:1F:40:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.42.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:be:4a:be:b5:93:1e:9f:d6:98:07:f4:9d:e9:42:2f:40:63: 69:0f:2c:dc:f1:4e:49:ce:99:b6:db:88:ee:43:45:a3:52:bf: 09:c9:ba:69:d1:43:a9:0b:be:b2:8b:12:ba:db:c7:8b:c5:8b: 7c:73:05:35:28:47:91:59:c8:10:08:a1:70:7d:ea:8c:ee:ba: 30:41:94:cb:75:53:8c:dc:35:94:d5:93:69:a3:f3:69:3e:e0: 17:e5:f6:79:91:5f:fd:35:b3:6b:74:2f:5b:d1:31:9d:94:71: 51:8b:ab:82:59:c4:38:a2:7b:e8:ca:01:04:96:5d:cd:d3:ea: 2c:8c:ff:1c:cc:49:bc:92:00:98:79:6a:6e:11:c6:d9:18:eb: ef:9c:d5:97:9e:70:3f:8b:d3:62:78:1d:8b:d9:7e:a2:d9:e8: 16:1b:7c:e1:95:86:d4:03:32:5a:43:8f:2d:f0:31:77:59:aa: 20:73:fb:90:24:22:ef:11:61:c5:ec:d6:b8:75:02:7f:33:ce: cd:9d:c7:10:ef:78:74:05:d5:35:01:82:e2:d3:71:62:51:78: f0:df:05:b4:0d:39:7e:f4:be:4f:ee:52:c8:d0:e1:10:c8:ee: 53:d1:01:70:de:ff:c7:6a:95:3c:be:44:0c:be:a7:5e:ea:11: de:87:d5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdRHuiHkYkRjx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk N2I1YzkxZGEtNzAwYy00OTJmLWJkMDQtNWUxOTNiMTI1ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+IM+U6ktYTtMtYWj6/B6C8kURVqt38R/5qc CwXAzMui+ZjsoPrLH/23JGRNQXB3Jsuhh4ZEsfOxcUVCwbICurvsRBwX7oyQp+N1 6r9HqNo7AjDRUcXjqKdHu/MvI/eUgBN2sf9UmMvicEUD/0Z520krLjTkoUslSFA5 facUVH3wR0svRl2I4ErTFojZrG+k+ULZ9jv2EsSfW3WFiS63kDOH8KxT3a8q60Qu yhCkFI+GNAhR5KrS5oFGMpXujAxyYCfOJEPWwHDJxsJqgF4hXZGkg9+YaQEz/enP eVdck8sHF/+AbxuwjIUhm1EKe4gEPPtYw92cVnJj+bU40jnCpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSnlSeqIzx5gIQFgiu9QSCdH0CaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWNjOGI5YzUtM2Y2OC0z ZjI2LWFhMzQtMDI4NzIwNjRmZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCCrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH++Sr61kx6f1pgH9J3pQi9AY2kPLNzxTknOmbbbiO5DRaNSvwnJumnR Q6kLvrKLErrbx4vFi3xzBTUoR5FZyBAIoXB96ozuujBBlMt1U4zcNZTVk2mj82k+ 4Bfl9nmRX/01s2t0L1vRMZ2UcVGLq4JZxDiie+jKAQSWXc3T6iyM/xzMSbySAJh5 am4RxtkY6++c1ZeecD+L02J4HYvZfqLZ6BYbfOGVhtQDMlpDjy3wMXdZqiBz+5Ak Iu8RYcXs1rh1An8zzs2dxxDveHQF1TUBguLTcWJRePDfBbQNOX70vk/uUsjQ4RDI 7lPRAXDe/8dqlTy+RAy+p17qEd6H1QI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:12 2025 by rpki-client