$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa File: 9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa (raw, json) Hash identifier: ub3PpI+5UbVrqobWrerqZdZIQ3OdpxDaHDk3S85U29s= Subject key identifier: B8:F5:FF:4D:78:8F:E4:03:28:10:0D:E3:1F:D3:9A:39:83:24:F6:BA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584913AC1C4B5F7526BC6895D100 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 209 IP address blocks: 64.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1c:4b:5f:75:26:bc:68:95:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=07822af8-316d-4dbc-a46d-9c1d25b5072b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f2:c9:61:38:ac:c1:10:57:6e:92:ef:65:51: 5a:6c:90:4e:f7:ec:71:3d:82:01:0c:fb:01:51:2a: 8b:86:28:15:c9:78:38:95:92:ba:d2:15:80:07:cd: 1f:43:94:f5:77:7b:5f:be:3f:f3:54:82:14:08:a9: 92:54:81:51:84:be:c1:ce:09:7e:da:ea:6f:2d:b3: 34:01:11:ed:39:9b:e2:cc:e9:d4:10:45:54:d2:fd: 0c:db:00:0a:51:39:bb:c4:90:0b:48:eb:ad:ae:2a: b0:a3:62:19:7d:96:ee:a2:a4:66:2c:b4:89:50:1c: 62:40:df:af:f8:be:73:55:ed:a0:c9:cc:eb:57:ed: 5d:e2:d0:23:e0:42:b9:30:da:69:45:32:cd:0f:e6: 61:3b:67:03:af:f2:bf:14:90:84:89:8a:50:a5:ea: 54:86:ca:06:02:43:4b:89:a2:92:b5:f2:94:94:71: 18:01:ae:46:1d:cb:a5:82:8e:92:c5:ef:dc:db:44: 2e:53:3e:34:97:0d:38:96:52:a2:ca:f5:a9:75:b7: ba:7a:78:24:6f:64:da:86:01:56:f4:36:1c:2d:8f: 74:d9:0d:18:87:0f:89:98:f7:7d:88:11:b1:60:4a: 78:52:f3:5a:5d:1b:aa:8d:0f:46:05:bf:e2:8e:89: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:FF:4D:78:8F:E4:03:28:10:0D:E3:1F:D3:9A:39:83:24:F6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f8:e5:4a:58:71:cc:fd:15:00:8b:4c:cb:d5:f9:92:88:60: ba:33:8e:06:56:9e:c7:24:3d:02:c6:00:e9:fe:23:a7:f6:9f: 85:fd:91:a5:1e:90:6b:49:04:e8:fb:7b:4a:95:e4:01:c2:55: ed:59:c7:76:de:98:5a:ef:cf:36:6e:91:27:fb:73:29:d8:ef: e3:7e:96:11:c2:87:61:36:ed:a0:ac:9c:ec:15:cc:43:c7:e3: b1:9b:f4:f5:7f:11:4b:47:e3:e4:cb:cc:85:43:fb:e9:78:17: 84:e5:1b:31:f0:3b:9b:a1:13:1e:84:83:6d:2c:e8:ab:e3:db: 30:4b:0e:30:71:ad:ea:59:9f:1f:7d:97:75:01:f0:df:60:9d: 66:2e:32:bc:27:e3:ac:8d:71:be:19:c0:36:a7:77:3a:cf:06: ac:a2:70:6b:48:fa:1a:6c:98:55:9c:84:81:94:fe:24:25:bf: e2:13:60:0c:5e:db:c2:a5:15:eb:c8:46:7c:f2:1f:d1:50:0d: 86:5d:9b:b0:ce:0e:e3:47:16:a1:25:9e:56:db:23:a8:ef:60: 96:03:18:ad:a4:b5:d2:99:71:72:eb:4c:67:d0:bd:79:31:7f: 4a:37:28:90:65:6a:48:f9:b8:07:c3:4d:43:80:4f:42:4f:67: a3:87:bd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBxLX3UmvGiV0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MDc4MjJhZjgtMzE2ZC00ZGJjLWE0NmQtOWMxZDI1YjUwNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPLJYTiswRBXbpLvZVFabJBO9+xxPYIBDPsB USqLhigVyXg4lZK60hWAB80fQ5T1d3tfvj/zVIIUCKmSVIFRhL7Bzgl+2upvLbM0 ARHtOZvizOnUEEVU0v0M2wAKUTm7xJALSOutriqwo2IZfZbuoqRmLLSJUBxiQN+v +L5zVe2gyczrV+1d4tAj4EK5MNppRTLND+ZhO2cDr/K/FJCEiYpQpepUhsoGAkNL iaKStfKUlHEYAa5GHculgo6Sxe/c20QuUz40lw04llKiyvWpdbe6engkb2TahgFW 9DYcLY902Q0Yhw+JmPd9iBGxYEp4UvNaXRuqjQ9GBb/ijok4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj1/014j+QDKBAN4x/TmjmDJPa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOWJlYzc2OGMtZGE4YS0z OTRhLTljNmYtMmNlZTcwMjVkZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB345UpYccz9FQCLTMvV+ZKIYLozjgZWnsckPQLGAOn+I6f2n4X9kaUe kGtJBOj7e0qV5AHCVe1Zx3bemFrvzzZukSf7cynY7+N+lhHCh2E27aCsnOwVzEPH 47Gb9PV/EUtH4+TLzIVD++l4F4TlGzHwO5uhEx6Eg20s6Kvj2zBLDjBxrepZnx99 l3UB8N9gnWYuMrwn46yNcb4ZwDandzrPBqyicGtI+hpsmFWchIGU/iQlv+ITYAxe 28KlFevIRnzyH9FQDYZdm7DODuNHFqElnlbbI6jvYJYDGK2ktdKZcXLrTGfQvXkx f0o3KJBlakj5uAfDTUOAT0JPZ6OHvbs= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:33 2025 by rpki-client