$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa File: f0dab10e-4582-3cea-9c9b-95e61ade618d.roa (raw, json) Hash identifier: hpQV05tL7D3kLlcB659wqgQR+R033uosZKEnvKt89Q8= Subject key identifier: 6F:49:F5:23:3B:49:E3:C0:C5:E8:39:BD:D7:41:E8:A3:5B:72:DE:B4 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858485E35AABB417E394D07ACC500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 11178 IP address blocks: 8.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:aa:bb:41:7e:39:4d:07:ac:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=41c613ec-287d-427d-82e4-f4f16140fe15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:1b:8d:6d:5d:c6:c7:50:64:df:83:c3:80: dd:10:8e:f5:a7:29:0a:a8:bf:4d:99:c6:6c:08:f5: db:17:ad:24:1a:ea:f1:e0:4c:a6:d6:04:78:38:b6: ca:ab:8e:3c:89:ab:60:f5:63:36:9e:fb:4b:07:d4: 80:3d:b8:82:52:55:3e:11:cf:91:df:a1:c1:12:d5: a1:83:8d:e4:40:26:cc:c8:d3:53:2a:1e:34:4b:7f: 45:9a:bd:62:95:97:91:7e:22:18:b0:6b:83:57:b5: 39:da:3d:56:a9:4e:8c:91:53:b6:6b:ed:7f:ea:82: a9:94:d3:08:e1:6c:c4:2a:b1:e8:9c:b9:c7:3c:69: b6:8d:a8:53:a7:ed:dc:c7:bc:db:7c:6a:53:11:59: 97:a9:87:9b:1f:48:46:92:16:f2:d4:49:11:22:61: d8:57:5e:0b:fc:9f:5e:09:cf:f5:d1:ee:f9:6b:38: 75:0a:30:01:3e:ce:dc:34:c2:9c:cc:22:ef:1c:52: 2f:1d:49:96:de:f4:43:bb:0e:73:aa:ed:87:49:66: f5:30:87:ab:d2:cc:e8:6b:68:a9:2e:87:48:3b:4e: d3:1b:22:a1:9c:e9:73:8c:4a:97:8c:15:b4:b6:9e: 47:a6:58:47:2f:77:e8:2b:d0:05:b7:d9:c2:65:57: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:49:F5:23:3B:49:E3:C0:C5:E8:39:BD:D7:41:E8:A3:5B:72:DE:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:1d:ca:23:b6:65:37:54:c7:f1:6b:df:57:62:70:27:f5:99: 10:63:99:52:e5:7c:77:a9:a8:34:5c:02:f8:87:96:62:2f:60: 18:40:ce:14:6b:31:81:15:61:e2:30:60:aa:43:90:5d:ec:3b: 39:3d:04:dc:8c:9e:7f:d8:82:03:85:fb:d5:47:ab:b9:79:78: 49:34:91:d9:bf:32:98:63:3f:d9:c9:77:b3:b4:bf:30:aa:3d: 63:98:87:0c:a4:2c:47:0b:15:03:7f:55:0b:21:f9:95:4f:4c: ca:f8:79:e4:eb:b9:92:5f:d9:d5:72:e1:f3:a9:16:d7:12:c7: b4:16:4a:aa:6a:72:d5:9e:74:d1:5c:4d:6a:0d:00:a9:0e:47: 08:a0:22:4e:9a:0c:12:25:e6:7a:2c:40:f6:c6:6d:3f:61:1a: 34:71:10:cf:c3:b8:96:ee:91:18:d2:5b:3b:b9:b4:86:9f:3c: d8:53:8e:ab:25:bc:ef:67:5a:1d:f6:76:f1:34:04:38:10:0d: e1:d0:68:b9:5b:19:55:a6:51:64:d1:db:af:41:86:0e:d5:e3: ad:c1:ef:18:95:a6:44:fb:2c:af:b8:ce:fb:9c:20:54:28:bb: 3c:b4:af:45:05:70:d1:22:2e:0c:e6:22:02:5a:c2:3f:08:0b: 6c:5e:87:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNaq7QX45TQesxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk NDFjNjEzZWMtMjg3ZC00MjdkLTgyZTQtZjRmMTYxNDBmZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVQbjW1dxsdQZN+Dw4DdEI71pykKqL9NmcZs CPXbF60kGurx4Eym1gR4OLbKq448iatg9WM2nvtLB9SAPbiCUlU+Ec+R36HBEtWh g43kQCbMyNNTKh40S39Fmr1ilZeRfiIYsGuDV7U52j1WqU6MkVO2a+1/6oKplNMI 4WzEKrHonLnHPGm2jahTp+3cx7zbfGpTEVmXqYebH0hGkhby1EkRImHYV14L/J9e Cc/10e75azh1CjABPs7cNMKczCLvHFIvHUmW3vRDuw5zqu2HSWb1MIer0szoa2ip LodIO07TGyKhnOlzjEqXjBW0tp5HplhHL3foK9AFt9nCZVfbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9J9SM7SePAxeg5vddB6KNbct60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjBkYWIxMGUtNDU4Mi0z Y2VhLTljOWItOTVlNjFhZGU2MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQdyiO2ZTdUx/Fr31dicCf1mRBjmVLlfHepqDRcAviHlmIvYBhAzhRr MYEVYeIwYKpDkF3sOzk9BNyMnn/YggOF+9VHq7l5eEk0kdm/MphjP9nJd7O0vzCq PWOYhwykLEcLFQN/VQsh+ZVPTMr4eeTruZJf2dVy4fOpFtcSx7QWSqpqctWedNFc TWoNAKkORwigIk6aDBIl5nosQPbGbT9hGjRxEM/DuJbukRjSWzu5tIafPNhTjqsl vO9nWh32dvE0BDgQDeHQaLlbGVWmUWTR269Bhg7V463B7xiVpkT7LK+4zvucIFQo uzy0r0UFcNEiLgzmIgJawj8IC2xeh9M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:19 2025 by rpki-client