$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa File: c6221ec9-feac-3a26-9d63-107653e5c3c9.roa (raw, json) Hash identifier: Npkb83R0AAgBCOw8KGwZ8ZYmu77cmEi+1SwLwbGLsOk= Subject key identifier: 75:6D:4E:87:C1:E9:64:D1:04:90:8B:05:D8:0B:88:0A:B7:A8:B3:BF Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285848E16BD039A059D7C9EB5796A0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 3356 IP address blocks: 198.112.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d0:39:a0:59:d7:c9:eb:57:96:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=cfb890a1-90c5-472d-8cba-a8c1ba5f37b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:94:f6:63:b6:2b:93:3f:06:c6:c8:f0:b0: 4b:fc:0f:3a:cc:b8:45:5d:0f:8e:0a:48:98:f4:55: 93:58:0f:b6:06:1f:58:db:2f:7b:0b:0c:fe:db:ab: 87:1c:df:79:90:c4:74:6d:c5:fd:36:be:93:a8:d2: 33:e3:49:ac:fa:a5:91:56:f1:2a:7c:d6:50:af:15: f2:e8:66:cd:de:35:f5:2f:08:db:ca:ac:bc:17:eb: 14:d9:62:af:ea:eb:45:2f:7b:54:60:08:e5:92:5b: 49:0a:cb:e4:57:f5:92:5b:6d:74:b9:31:de:a1:aa: d0:b6:ab:9d:c7:2a:dc:cf:21:f8:ab:c5:72:5e:51: dc:02:de:c4:cb:95:0e:a3:5c:aa:c1:62:be:48:44: fb:7c:d2:7b:0c:6d:0d:7e:dc:e1:94:9f:71:18:2a: 6a:db:4c:6e:76:84:bd:a9:39:26:0e:d8:fc:43:5c: f9:16:c8:ff:0b:0d:03:d1:a6:6a:90:1f:8d:02:07: 31:1c:14:fe:e1:37:0d:53:82:c4:e8:94:be:3a:89: 3e:3f:78:86:38:48:d3:29:93:75:21:e3:b7:4f:93: ab:8c:bc:e6:59:20:74:71:ce:eb:eb:c8:82:c2:2c: 2c:76:a0:30:18:2e:7c:49:ce:26:36:ec:8a:37:45: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6D:4E:87:C1:E9:64:D1:04:90:8B:05:D8:0B:88:0A:B7:A8:B3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 198.112.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:92:6d:98:02:94:72:fb:b7:4e:a4:37:f4:a7:6a:93:85:ba: c7:53:78:5b:15:b8:02:1c:18:04:20:38:3c:6a:8e:74:44:59: e9:96:e2:a4:33:36:34:95:a6:54:3e:3c:d9:57:2f:e4:3b:6d: c4:2e:d9:a3:ba:96:87:46:13:8c:79:18:72:bc:41:58:13:9a: 08:85:37:8a:77:e8:0a:22:d5:d6:37:55:de:48:87:13:60:df: 62:ce:78:d5:e5:45:36:1e:b8:93:05:94:7f:2d:74:9d:b2:39: 00:d1:71:13:38:87:66:ca:ff:06:fe:83:62:c5:9f:a4:13:c6: 74:c5:e4:6a:08:aa:be:bc:ca:8d:b1:0b:06:ef:26:14:d4:f4: 89:ca:90:49:e0:b3:02:16:49:2f:10:31:09:64:d5:a4:ca:cf: 5f:d0:89:e3:ee:fb:30:31:8c:9a:bb:a5:8d:3b:60:fe:43:41: a7:16:53:3f:7e:c9:9f:3a:d6:3d:ae:91:ec:10:99:10:0b:e6: 3c:c4:ca:70:f2:93:be:f6:6d:2f:ac:d2:25:f3:da:da:63:1d: 14:01:fb:99:17:c0:f9:cf:4b:aa:52:da:26:c9:54:be:3b:c8: 3f:0b:07:9e:c4:db:70:8f:3f:db:b1:d6:c1:59:eb:c8:af:72: 35:97:25:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9A5oFnXyetXlqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2ZiODkwYTEtOTBjNS00NzJkLThjYmEtYThjMWJhNWYzN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0SU9mO2K5M/BsbI8LBL/A86zLhFXQ+OCkiY 9FWTWA+2Bh9Y2y97Cwz+26uHHN95kMR0bcX9Nr6TqNIz40ms+qWRVvEqfNZQrxXy 6GbN3jX1Lwjbyqy8F+sU2WKv6utFL3tUYAjlkltJCsvkV/WSW210uTHeoarQtqud xyrczyH4q8VyXlHcAt7Ey5UOo1yqwWK+SET7fNJ7DG0NftzhlJ9xGCpq20xudoS9 qTkmDtj8Q1z5Fsj/Cw0D0aZqkB+NAgcxHBT+4TcNU4LE6JS+Ook+P3iGOEjTKZN1 IeO3T5OrjLzmWSB0cc7r68iCwiwsdqAwGC58Sc4mNuyKN0VDDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVtTofB6WTRBJCLBdgLiAq3qLO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzYyMjFlYzktZmVhYy0z YTI2LTlkNjMtMTA3NjUzZTVjM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxnBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuSbZgClHL7t06kN/SnapOFusdTeFsVuAIcGAQgODxqjnREWemW4qQz NjSVplQ+PNlXL+Q7bcQu2aO6lodGE4x5GHK8QVgTmgiFN4p36Aoi1dY3Vd5IhxNg 32LOeNXlRTYeuJMFlH8tdJ2yOQDRcRM4h2bK/wb+g2LFn6QTxnTF5GoIqr68yo2x CwbvJhTU9InKkEngswIWSS8QMQlk1aTKz1/QiePu+zAxjJq7pY07YP5DQacWUz9+ yZ861j2ukewQmRAL5jzEynDyk772bS+s0iXz2tpjHRQB+5kXwPnPS6pS2ibJVL47 yD8LB57E23CPP9ux1sFZ68ivcjWXJc4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:29 2025 by rpki-client