$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa File: 87e5dc05-d4f4-377e-a112-331e02304f9e.roa (raw, json) Hash identifier: EUYRGyGdP4HL8sCzm0ZnFBvnvfGtRDkocRLJVD923lM= Subject key identifier: 2B:72:0C:86:E3:90:42:5C:6F:5D:EE:EF:14:2F:8F:88:2A:F8:5B:6C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849203C14BBB689BC5720CBD380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 3356 IP address blocks: 216.54.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:14:bb:b6:89:bc:57:20:cb:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=967719a6-2a82-4ebb-940a-8764b4975189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:88:6d:30:40:55:87:41:3b:3b:5c:0c:d5: c5:16:c3:75:7b:92:9f:0a:17:af:66:bf:90:af:ee: de:a4:02:b5:b3:57:f2:ee:0d:2f:2d:25:f8:dd:ea: 09:89:a4:b0:9b:11:76:5c:d6:0a:ae:c4:df:5d:a7: 52:62:47:1d:db:de:92:96:4a:1e:10:4e:93:60:fc: 4d:c3:04:0c:6d:78:cd:63:48:0b:d2:dd:12:28:a9: ea:70:88:b0:a9:59:8f:ac:3f:95:3a:2e:c9:01:9a: 70:a9:7b:36:54:81:81:48:be:2f:f3:a3:fb:75:42: e1:37:10:8c:b2:eb:d3:15:43:76:e9:72:5a:b0:cb: 30:92:1a:34:72:8a:71:f9:ca:42:74:f2:8b:23:53: 68:ce:8e:37:e5:17:56:a9:38:a9:93:93:18:ce:ad: 19:52:95:92:d1:db:d5:a6:3b:67:1d:43:b2:ff:80: 43:1e:51:ae:16:18:ac:7d:61:05:07:e0:ff:a5:13: 35:0b:cb:8d:a5:f1:d2:43:86:9b:3d:85:9f:8d:06: 0a:38:bd:0c:2d:c1:9e:cc:9f:7e:5a:fe:c6:dd:60: 94:99:c0:45:99:16:e1:f2:e8:2b:e8:0d:b7:09:5f: 96:1e:6a:dd:d6:eb:41:9f:82:b7:f1:89:93:aa:02: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:0C:86:E3:90:42:5C:6F:5D:EE:EF:14:2F:8F:88:2A:F8:5B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 216.54.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c0:1e:7c:1c:bd:c6:3c:8a:79:c0:e7:77:27:fc:9e:e0:15: a4:bc:8c:68:1f:4a:14:80:77:d2:eb:a3:8b:8d:ae:fb:84:fc: 58:b0:94:1e:20:c1:ca:5a:a9:ce:61:b0:1b:d3:27:60:56:82: 9b:c7:f8:48:8b:95:0a:4c:2f:c3:f0:ed:39:b4:89:ee:e4:27: 72:b9:d4:dc:d8:b3:ff:52:dc:0f:35:1a:f3:56:93:4d:5e:45: 92:4f:be:12:fd:f6:62:ac:9e:c2:a9:35:81:15:f4:cc:c7:a0: ea:ef:44:69:26:b6:f4:9c:9a:cc:c1:94:c7:14:e9:31:9f:b1: 74:01:6d:46:5a:8a:d3:52:31:07:24:4b:30:5f:92:fa:de:1a: 06:dc:e4:26:c9:c4:48:89:05:79:7c:24:5f:57:18:d4:a2:9b: 95:a1:6c:ed:51:b1:c1:d0:e0:0f:55:ee:a1:7b:20:8e:ff:db: bd:ba:14:fe:56:c2:6f:af:b3:7b:21:11:bd:1f:30:56:30:dc: ad:7c:ae:d9:1e:b1:32:9c:4d:5d:50:67:96:8e:f7:4b:59:28: ae:40:08:bc:07:1f:74:d2:96:0f:64:e4:7c:91:b7:0d:69:9a: e4:e4:97:5e:16:23:69:27:22:e2:ce:01:b2:3f:19:e7:11:af: c3:c8:f7:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBS7tom8VyDL04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OTY3NzE5YTYtMmE4Mi00ZWJiLTk0MGEtODc2NGI0OTc1MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXOIbTBAVYdBOztcDNXFFsN1e5KfChevZr+Q r+7epAK1s1fy7g0vLSX43eoJiaSwmxF2XNYKrsTfXadSYkcd296SlkoeEE6TYPxN wwQMbXjNY0gL0t0SKKnqcIiwqVmPrD+VOi7JAZpwqXs2VIGBSL4v86P7dULhNxCM suvTFUN26XJasMswkho0copx+cpCdPKLI1Nozo435RdWqTipk5MYzq0ZUpWS0dvV pjtnHUOy/4BDHlGuFhisfWEFB+D/pRM1C8uNpfHSQ4abPYWfjQYKOL0MLcGezJ9+ Wv7G3WCUmcBFmRbh8ugr6A23CV+WHmrd1utBn4K38YmTqgKQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtyDIbjkEJcb13u7xQvj4gq+FtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdlNWRjMDUtZDRmNC0z NzdlLWExMTItMzMxZTAyMzA0ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvAHnwcvcY8innA53cn/J7gFaS8jGgfShSAd9Lro4uNrvuE/FiwlB4g wcpaqc5hsBvTJ2BWgpvH+EiLlQpML8Pw7Tm0ie7kJ3K51NzYs/9S3A81GvNWk01e RZJPvhL99mKsnsKpNYEV9MzHoOrvRGkmtvScmszBlMcU6TGfsXQBbUZaitNSMQck SzBfkvreGgbc5CbJxEiJBXl8JF9XGNSim5WhbO1RscHQ4A9V7qF7II7/2726FP5W wm+vs3shEb0fMFYw3K18rtkesTKcTV1QZ5aO90tZKK5ACLwHH3TSlg9k5HyRtw1p muTkl14WI2knIuLOAbI/GecRr8PI9xE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:30 2025 by rpki-client