$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa File: 60b15d2e-704c-3568-abdb-f630f5163896.roa (raw, json) Hash identifier: 5cRudZNwrHR1FLgIPH8TcmbQhvy9xYSZ461d7Wk6DGA= Subject key identifier: BB:46:67:BE:D7:FC:D9:C9:AC:6F:08:AD:1C:43:78:FF:B3:EF:76:73 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584957F3FADA20067E49F8F8A700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 22898 IP address blocks: 8.28.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fa:da:20:06:7e:49:f8:f8:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=589d0c20-c8ac-43d4-8fe1-90494c5a92e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:27:a7:5d:be:ad:59:15:d2:35:2e:93:4f: 21:b0:94:ae:15:f2:5e:70:49:8a:c3:ed:b7:57:6e: de:6f:08:c9:d2:fe:b0:51:e5:0d:88:ce:76:11:a6: 8c:6f:af:04:0e:6e:6a:34:bb:8d:75:6d:a0:77:04: 07:73:14:4a:7a:3e:79:0f:15:e4:41:c0:44:70:b9: 63:9d:58:bf:d5:87:32:6a:38:1d:80:f5:f8:bc:c7: 1d:69:32:42:c3:de:56:da:23:a5:ef:d4:a3:f4:c1: 54:03:2e:37:a9:78:62:89:96:34:23:69:16:b6:84: 55:8a:96:04:0b:73:52:57:6c:cc:60:be:cb:b7:7a: b8:7e:e4:54:a7:ec:d3:8a:52:d2:19:a8:4a:c7:85: a0:42:1d:99:4a:e7:40:a6:5f:4d:89:4d:49:d3:67: 3a:ae:1a:4d:90:ff:17:77:30:c3:a7:a4:d2:64:e8: bc:0d:ea:65:7f:e7:f8:04:2e:f4:73:64:cf:60:fe: 39:d2:e6:5f:e9:6b:2c:82:9e:c1:5b:c9:e9:03:b7: 97:c0:94:6e:dd:ad:c1:65:1d:11:9d:9d:5c:fd:ee: 20:d4:a3:20:e7:27:30:48:ac:b3:ad:95:ea:8d:95: 1e:06:26:b8:4d:ac:f1:53:d0:8c:90:99:1d:d7:11: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:67:BE:D7:FC:D9:C9:AC:6F:08:AD:1C:43:78:FF:B3:EF:76:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.28.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:af:e5:76:33:d8:07:83:60:71:74:fc:07:19:f4:cc:73:97: 7d:c7:c7:61:eb:83:31:21:96:4d:41:6c:ce:e4:34:49:c0:92: 3f:08:0a:3e:f5:9a:4b:e2:41:38:55:ff:c0:1c:3d:bd:57:32: 05:4e:bb:f4:50:88:4d:61:fe:ec:98:d9:4f:b4:f0:bc:f5:11: 66:d7:f2:08:b4:7e:02:69:9b:65:f0:e7:11:e4:6d:ff:42:03: 31:1f:21:fc:36:59:e8:3c:dd:48:ad:c7:2c:2c:a5:b5:b8:3a: a2:86:a6:63:33:65:9a:42:4f:12:24:5d:ee:df:5a:8d:33:7c: c9:24:fb:e2:29:e8:f2:54:75:6d:48:97:7b:26:67:3d:59:26: 36:0e:19:8d:2a:69:80:4a:10:67:84:06:1e:75:38:79:60:ee: b4:2f:6e:f1:97:18:40:15:81:f5:5d:2e:75:37:20:58:61:c5: 72:b3:99:26:e8:2d:db:89:f4:b7:46:7b:91:27:b1:17:8c:c3: ce:10:19:1c:41:7d:47:9e:f3:53:a0:cd:84:22:9a:c3:9a:57: 7d:65:da:c3:f0:29:f5:ee:1c:52:27:7d:2c:6e:6f:41:9d:55: e0:72:31:fd:10:c9:dc:f9:39:d4:aa:74:4c:e8:61:39:d2:49: bb:02:45:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/raIAZ+Sfj4pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NTg5ZDBjMjAtYzhhYy00M2Q0LThmZTEtOTA0OTRjNWE5MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Hwnp12+rVkV0jUuk08hsJSuFfJecEmKw+23 V27ebwjJ0v6wUeUNiM52EaaMb68EDm5qNLuNdW2gdwQHcxRKej55DxXkQcBEcLlj nVi/1YcyajgdgPX4vMcdaTJCw95W2iOl79Sj9MFUAy43qXhiiZY0I2kWtoRVipYE C3NSV2zMYL7Lt3q4fuRUp+zTilLSGahKx4WgQh2ZSudApl9NiU1J02c6rhpNkP8X dzDDp6TSZOi8Deplf+f4BC70c2TPYP450uZf6Wssgp7BW8npA7eXwJRu3a3BZR0R nZ1c/e4g1KMg5ycwSKyzrZXqjZUeBia4TazxU9CMkJkd1xF1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtGZ77X/NnJrG8IrRxDeP+z73ZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjBiMTVkMmUtNzA0Yy0z NTY4LWFiZGItZjYzMGY1MTYzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECBzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWv5XYz2AeDYHF0/AcZ9Mxzl33Hx2HrgzEhlk1BbM7kNEnAkj8ICj71 mkviQThV/8AcPb1XMgVOu/RQiE1h/uyY2U+08Lz1EWbX8gi0fgJpm2Xw5xHkbf9C AzEfIfw2Weg83UitxywspbW4OqKGpmMzZZpCTxIkXe7fWo0zfMkk++Ip6PJUdW1I l3smZz1ZJjYOGY0qaYBKEGeEBh51OHlg7rQvbvGXGEAVgfVdLnU3IFhhxXKzmSbo LduJ9LdGe5EnsReMw84QGRxBfUee81OgzYQimsOaV31l2sPwKfXuHFInfSxub0Gd VeByMf0Qydz5OdSqdEzoYTnSSbsCRZM= -----END CERTIFICATE-----Generated at Sun May 11 07:40:52 2025 by rpki-client