$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/88ddf522-21ea-3db0-b9a5-0d8b7144721b.roa File: 88ddf522-21ea-3db0-b9a5-0d8b7144721b.roa (raw, json) Hash identifier: ET4crr0avs1/MRW1glDa+5w1CCBvpaEBTs1kmNc6DtQ= Subject key identifier: 4E:62:5B:4A:52:33:A4:42:F9:CB:1E:35:4C:E0:1B:B8:73:CE:FF:52 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858487FB5DCDA51496A269EE12F80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/88ddf522-21ea-3db0-b9a5-0d8b7144721b.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 989 IP address blocks: 8.36.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:dc:da:51:49:6a:26:9e:e1:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=966a9832-cae7-406e-8ee9-5e5a953dec69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:0a:29:34:46:82:c3:fc:70:12:41:0c:bd: fe:b2:48:4d:9f:c7:be:fd:e0:3e:b9:99:d2:f7:f5: 16:a4:40:be:25:c0:c1:b5:25:dc:bf:ec:fa:ed:74: b6:10:59:cc:2d:82:d7:c8:ce:ef:57:7a:8c:4a:ac: 3b:c8:74:d9:2a:9c:ea:1e:43:e7:31:d0:20:16:8d: 13:8b:46:b8:41:9c:4f:6a:01:a5:f7:14:3b:d9:d7: 10:af:07:21:ba:b6:70:0d:0e:34:2e:73:5a:bf:16: 26:0f:fc:09:07:09:94:1e:8c:b1:15:ac:5d:78:0e: c2:c9:e0:b4:b5:42:1f:3e:05:70:a9:ff:69:1c:d9: 3b:18:4f:ab:88:d8:1e:51:56:f1:17:ae:58:b6:dc: 9b:72:ac:97:b8:3b:2c:ae:f6:c9:5d:15:e7:42:e0: 3f:9f:6a:fc:ac:da:b9:ec:ea:7e:af:50:6c:21:19: 6d:9c:89:c4:c1:68:79:10:94:69:2e:09:bd:5a:df: c4:2b:64:51:53:df:21:ef:12:1e:ac:d6:32:f7:71: a4:c6:19:51:06:75:0a:69:38:1d:ea:50:87:a8:ce: 0b:a9:d5:0b:8f:98:5a:47:f4:c1:53:57:18:66:0c: 8a:0c:89:e4:44:fb:83:3d:d5:ea:eb:dd:b9:93:c2: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:62:5B:4A:52:33:A4:42:F9:CB:1E:35:4C:E0:1B:B8:73:CE:FF:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/88ddf522-21ea-3db0-b9a5-0d8b7144721b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:88:2f:7d:28:11:39:15:6b:c1:19:e5:06:d7:d3:84:c8:98: b4:25:4c:aa:36:df:b3:c2:20:83:e8:59:b2:92:0f:7c:a5:01: 36:9d:a3:d7:03:2a:3d:81:be:ce:e8:b4:bb:bd:5d:56:15:43: e7:f7:9a:83:5b:7b:db:08:87:9c:17:0f:61:6c:6d:39:21:3e: db:09:fb:92:e5:a0:c5:95:4a:ff:c0:0c:9d:85:56:48:66:52: 44:88:68:57:3b:f4:8f:de:ea:8b:7c:61:5a:36:e0:fc:d1:8b: 7e:2e:d9:95:9a:8b:75:c5:2b:79:ae:2a:4b:0a:e4:eb:83:05: 64:12:15:93:5c:e3:0e:75:03:01:37:8b:40:4e:cd:8f:36:5f: af:cb:fe:bb:cc:14:b1:1e:b7:b9:f3:42:24:31:ac:e6:d7:94: d1:71:8a:4e:24:52:57:3f:e8:e5:f0:27:0b:01:18:19:21:69: 72:4b:b2:d8:e6:e6:30:1a:5b:6f:ba:56:77:4f:b6:a8:f7:46: 8d:68:7a:3a:48:91:c9:2a:ee:a3:17:80:12:ce:97:95:95:69: ec:8c:6a:70:68:53:3b:69:6c:cc:81:c9:3f:f9:58:45:4e:c2: 7a:1f:1d:7e:fa:b3:78:e4:0e:98:09:14:35:fe:ff:fb:70:b4: f0:6a:43:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdzaUUlqJp7hL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk OTY2YTk4MzItY2FlNy00MDZlLThlZTktNWU1YTk1M2RlYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpMKKTRGgsP8cBJBDL3+skhNn8e+/eA+uZnS 9/UWpEC+JcDBtSXcv+z67XS2EFnMLYLXyM7vV3qMSqw7yHTZKpzqHkPnMdAgFo0T i0a4QZxPagGl9xQ72dcQrwchurZwDQ40LnNavxYmD/wJBwmUHoyxFaxdeA7CyeC0 tUIfPgVwqf9pHNk7GE+riNgeUVbxF65YttybcqyXuDssrvbJXRXnQuA/n2r8rNq5 7Op+r1BsIRltnInEwWh5EJRpLgm9Wt/EK2RRU98h7xIerNYy93GkxhlRBnUKaTgd 6lCHqM4LqdULj5haR/TBU1cYZgyKDInkRPuDPdXq6925k8LUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5iW0pSM6RC+cseNUzgG7hzzv9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODhkZGY1MjItMjFlYS0z ZGIwLWI5YTUtMGQ4YjcxNDQ3MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqIL30oETkVa8EZ5QbX04TImLQlTKo237PCIIPoWbKSD3ylATado9cD Kj2Bvs7otLu9XVYVQ+f3moNbe9sIh5wXD2FsbTkhPtsJ+5LloMWVSv/ADJ2FVkhm UkSIaFc79I/e6ot8YVo24PzRi34u2ZWai3XFK3muKksK5OuDBWQSFZNc4w51AwE3 i0BOzY82X6/L/rvMFLEet7nzQiQxrObXlNFxik4kUlc/6OXwJwsBGBkhaXJLstjm 5jAaW2+6VndPtqj3Ro1oejpIkckq7qMXgBLOl5WVaeyManBoUztpbMyByT/5WEVO wnofHX76s3jkDpgJFDX+//twtPBqQ2o= -----END CERTIFICATE-----Generated at Fri Mar 14 11:15:18 2025 by rpki-client