$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc730107-467c-3f67-a0af-d11f8c435742.roa File: dc730107-467c-3f67-a0af-d11f8c435742.roa (raw, json) Hash identifier: 3AbunKb0NbfX8atcEH4hwWPnuOaqj7LxqItIUWEbV88= Subject key identifier: 72:A6:13:48:5A:15:5A:20:B6:27:CC:77:71:D9:3D:6F:8F:4E:11:03 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC24BB2E4DCEC1CA138280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc730107-467c-3f67-a0af-d11f8c435742.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.6.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:24:bb:2e:4d:ce:c1:ca:13:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=c1cee67d-6fe1-44b5-98f7-32f660bc516a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:7d:84:c3:b7:de:fb:f9:67:e5:ac:64:b6: a6:98:25:f4:7b:90:f3:40:68:3e:e6:48:0c:de:7c: 9f:3e:62:d9:03:7b:e6:5a:ac:e6:10:98:3a:02:19: e5:49:bd:a9:d9:10:05:08:a3:32:1f:70:2b:9a:e2: 5c:4b:0c:86:b1:b3:cb:fb:81:e2:f3:b2:a3:53:4c: 0b:fb:9d:35:25:7a:8e:b2:1d:67:d2:50:71:4d:af: 1d:c7:6a:e9:65:4e:ef:bd:98:23:4a:04:17:5b:88: 93:ca:c7:21:2b:5e:3a:5d:5a:eb:16:4d:1b:dd:d5: 31:fd:f7:57:4c:65:39:b8:8f:0d:ff:6d:c9:fd:34: e8:41:46:25:5c:3e:d2:bf:0f:52:3e:17:05:59:0f: 0b:49:b1:b9:90:fa:a1:4d:af:43:74:6c:2a:3b:34: 70:ae:b8:49:d8:ac:92:06:b7:69:70:bc:48:19:c9: 31:6b:ec:0b:c9:1f:5a:78:36:2c:2c:6b:13:c7:ff: 56:b2:d6:f3:81:18:a6:fe:20:36:67:41:ad:cd:27: c6:2e:0c:35:39:67:a5:52:22:85:6a:02:45:ba:ba: 09:c8:78:ef:d6:08:66:87:c2:54:a9:69:1c:1b:2a: a2:7c:dc:d0:65:ef:7d:ac:70:31:38:3a:09:b4:b3: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:13:48:5A:15:5A:20:B6:27:CC:77:71:D9:3D:6F:8F:4E:11:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc730107-467c-3f67-a0af-d11f8c435742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.6.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8a:85:36:35:9e:6b:34:4b:c0:5a:1e:3d:91:a7:06:5c:88: 7b:fd:fe:95:2f:e6:15:c5:23:b5:28:44:ba:cd:4e:fe:26:3c: 2c:50:cb:af:7b:8f:aa:10:d6:47:da:8e:18:73:09:69:5d:d0: 3b:db:41:08:c9:78:d7:77:44:2b:d7:11:2e:a4:2b:fe:bb:cc: 4f:95:25:62:81:cf:da:ee:bf:75:b8:1a:f4:dc:72:2e:2f:d7: 0f:79:7a:2b:78:5b:28:7c:e7:ed:c3:e6:e6:03:e8:b9:10:d0: 79:71:a4:9f:d3:e0:14:08:7e:a3:f4:79:98:18:d3:25:96:23: a2:d7:23:71:8b:cd:e5:18:7d:0d:85:a4:cc:a3:41:22:59:56: d2:a4:c3:4f:23:9a:b0:ff:89:27:99:5a:ff:5f:e5:a7:5a:20: 03:08:c9:01:57:8d:b2:0f:c9:26:3e:e7:3f:3a:58:7a:e7:85: 48:bb:bd:1d:68:0c:3c:4c:28:57:95:ff:ed:e3:45:06:28:90: 7e:70:f9:23:04:44:fa:34:36:d0:a1:2b:33:1f:89:11:8a:a2: 97:17:c4:b5:35:6d:16:cf:61:ab:65:85:6d:93:81:44:18:17: 5a:9c:ae:5b:0b:62:66:a3:0d:13:2b:9d:39:8f:62:6d:43:60: 0a:cd:83:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CS7Lk3OwcoTgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YzFjZWU2N2QtNmZlMS00NGI1LTk4ZjctMzJmNjYwYmM1MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqct9hMO33vv5Z+WsZLammCX0e5DzQGg+5kgM 3nyfPmLZA3vmWqzmEJg6AhnlSb2p2RAFCKMyH3ArmuJcSwyGsbPL+4Hi87KjU0wL +501JXqOsh1n0lBxTa8dx2rpZU7vvZgjSgQXW4iTyschK146XVrrFk0b3dUx/fdX TGU5uI8N/23J/TToQUYlXD7Svw9SPhcFWQ8LSbG5kPqhTa9DdGwqOzRwrrhJ2KyS BrdpcLxIGckxa+wLyR9aeDYsLGsTx/9WstbzgRim/iA2Z0GtzSfGLgw1OWelUiKF agJFuroJyHjv1ghmh8JUqWkcGyqifNzQZe99rHAxODoJtLNq0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKmE0haFVogtifMd3HZPW+PThEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGM3MzAxMDctNDY3Yy0z ZjY3LWEwYWYtZDExZjhjNDM1NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOKhTY1nms0S8BaHj2RpwZciHv9/pUv5hXFI7UoRLrNTv4mPCxQy697 j6oQ1kfajhhzCWld0DvbQQjJeNd3RCvXES6kK/67zE+VJWKBz9ruv3W4GvTcci4v 1w95eit4Wyh85+3D5uYD6LkQ0HlxpJ/T4BQIfqP0eZgY0yWWI6LXI3GLzeUYfQ2F pMyjQSJZVtKkw08jmrD/iSeZWv9f5adaIAMIyQFXjbIPySY+5z86WHrnhUi7vR1o DDxMKFeV/+3jRQYokH5w+SMERPo0NtChKzMfiRGKopcXxLU1bRbPYatlhW2TgUQY F1qcrlsLYmajDRMrnTmPYm1DYArNgxA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:52 2025 by rpki-client