$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa File: a68150d5-4385-3ac6-a10e-362c2d66a738.roa (raw, json) Hash identifier: UimXWZwDhHm/+eigl1RjbxX/FqAFlLzXr54hMF+jiGk= Subject key identifier: 3E:30:A7:60:1D:4A:16:D2:2C:72:46:33:39:3B:7A:00:8A:74:A2:4D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584838854EF24A00ADE0AE87E240 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.9.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:4e:f2:4a:00:ad:e0:ae:87:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=27ca68a8-6dd8-41bf-a69e-1f6c00cb9efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:93:b7:8d:15:f8:5e:75:7e:36:a9:cb:91: 46:e0:a9:97:48:94:ee:d9:87:15:6f:9e:f9:71:ee: a3:27:87:c5:5b:07:15:4c:4e:29:3d:05:cd:47:08: 5f:90:f6:5e:0d:a6:a4:e7:6d:65:00:4d:82:e3:43: ff:56:7d:c6:08:f4:26:cb:4d:92:3f:15:30:cb:25: f4:38:b1:7e:4c:32:b7:77:f2:9b:aa:73:40:70:a2: 11:6d:ad:ec:df:6e:19:9d:f2:a8:d9:27:50:16:b0: 48:fa:eb:6b:ff:94:5e:14:7c:e1:a2:e5:ab:0e:32: 14:ae:4d:fb:ed:99:5c:45:33:39:4a:78:e7:19:ce: 62:0a:bc:03:fd:55:f9:96:eb:0b:00:c5:f1:a5:53: 8c:59:6f:73:18:00:9d:d5:0f:16:43:82:35:dd:d2: f2:37:ce:dd:2b:8b:a3:06:e2:6b:fc:ce:a0:7e:91: 40:68:68:ce:b1:52:bc:3e:19:99:87:93:ff:08:51: 29:4a:b1:b3:b0:e6:c4:cd:17:fa:cf:ba:5e:b9:e7: d1:ad:25:8f:2b:1f:c8:16:2c:9c:c9:33:bc:0d:51: 49:29:7e:b7:02:dc:a0:28:6d:be:98:aa:7c:3f:c7: 87:90:7e:b7:7a:8e:52:3e:00:2c:d7:62:30:6b:ec: 60:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:30:A7:60:1D:4A:16:D2:2C:72:46:33:39:3B:7A:00:8A:74:A2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:76:86:69:63:55:22:2e:fe:ea:5f:e8:88:48:a2:f9:fc:b0: e1:5e:17:f7:53:0a:65:4d:74:56:a2:b8:b6:e2:14:22:9b:c3: 87:12:b0:e3:55:8f:66:eb:5f:6a:ab:f9:a3:16:b8:4d:ba:c5: d7:13:5d:fd:40:c3:c2:d3:e9:7d:83:84:6e:6d:a3:f5:f5:69: 9e:be:4b:f2:04:ae:9f:7b:af:8d:49:83:ac:4b:15:e6:9f:b5: 88:09:cf:5d:ef:77:1a:6b:68:78:3f:47:b3:e7:44:66:1c:c4: df:82:4c:f7:e3:74:37:18:6e:50:82:18:5d:40:28:01:d7:18: cc:4d:0e:91:c4:e1:9f:7b:75:7d:df:06:59:3e:ea:22:27:60: fd:88:19:60:7e:4d:6b:59:9c:cc:aa:81:ec:ea:56:28:32:43: d4:95:ec:6b:16:0e:63:41:d1:da:60:ed:91:c4:f1:33:6e:1a: 9f:ad:b4:07:bb:89:31:17:47:99:a9:ec:51:a4:fe:4d:5c:68: 02:f9:88:a4:1d:8a:5c:ca:f7:98:d3:0b:a9:04:0e:e3:29:09: 98:71:81:d7:8a:0b:f5:5c:e0:2b:b1:5c:ac:7b:fa:59:de:54: 4a:52:9b:01:4b:c5:fd:b5:b9:23:d8:00:84:04:d5:76:2a:bc: 42:52:cf:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hU7ySgCt4K6H4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk MjdjYTY4YTgtNmRkOC00MWJmLWE2OWUtMWY2YzAwY2I5ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp82Tt40V+F51fjapy5FG4KmXSJTu2YcVb575 ce6jJ4fFWwcVTE4pPQXNRwhfkPZeDaak521lAE2C40P/Vn3GCPQmy02SPxUwyyX0 OLF+TDK3d/KbqnNAcKIRba3s324ZnfKo2SdQFrBI+utr/5ReFHzhouWrDjIUrk37 7ZlcRTM5SnjnGc5iCrwD/VX5lusLAMXxpVOMWW9zGACd1Q8WQ4I13dLyN87dK4uj BuJr/M6gfpFAaGjOsVK8PhmZh5P/CFEpSrGzsObEzRf6z7peuefRrSWPKx/IFiyc yTO8DVFJKX63AtygKG2+mKp8P8eHkH63eo5SPgAs12Iwa+xglQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4wp2AdShbSLHJGMzk7egCKdKJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTY4MTUwZDUtNDM4NS0z YWM2LWExMGUtMzYyYzJkNjZhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKV2hmljVSIu/upf6IhIovn8sOFeF/dTCmVNdFaiuLbiFCKbw4cSsONV j2brX2qr+aMWuE26xdcTXf1Aw8LT6X2DhG5to/X1aZ6+S/IErp97r41Jg6xLFeaf tYgJz13vdxpraHg/R7PnRGYcxN+CTPfjdDcYblCCGF1AKAHXGMxNDpHE4Z97dX3f Blk+6iInYP2IGWB+TWtZnMyqgezqVigyQ9SV7GsWDmNB0dpg7ZHE8TNuGp+ttAe7 iTEXR5mp7FGk/k1caAL5iKQdilzK95jTC6kEDuMpCZhxgdeKC/Vc4CuxXKx7+lne VEpSmwFLxf21uSPYAIQE1XYqvEJSzx4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:50 2025 by rpki-client