$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0e9b753-6ae0-3f20-a450-d83c4f413193.roa File: f0e9b753-6ae0-3f20-a450-d83c4f413193.roa (raw, json) Hash identifier: rj+WCii0xLWdNsaNiG5AOUJtDXxf7IRUc/lMenGY49s= Subject key identifier: 89:62:48:5C:43:93:A0:90:3D:DD:9F:10:A3:5C:50:8A:29:3E:7F:6C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858485F9AE440FFF3AEAA33D7F7E0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0e9b753-6ae0-3f20-a450-d83c4f413193.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 20166 IP address blocks: 8.39.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e4:40:ff:f3:ae:aa:33:d7:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=cde1a56f-0e2b-4ebe-9f45-dbed82b4c72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:f9:a0:87:61:76:b0:47:9d:24:d9:78:dd: b2:cb:07:da:70:1c:c3:94:61:aa:cb:b5:2b:52:42: e9:c1:4b:9c:84:98:86:dc:8a:b2:85:1c:51:8b:89: 5a:aa:d7:6c:4d:73:ce:8d:4e:cd:5d:fe:08:c4:46: 65:65:ae:15:e3:69:b0:18:a2:96:79:41:e6:0a:ec: e3:59:a7:29:49:e5:37:97:4d:5c:62:44:78:62:66: 4d:c2:f0:54:1c:69:33:1f:46:48:21:12:a1:2e:62: 46:e9:8b:d8:9b:ec:9d:1c:b5:39:a3:22:51:d9:9c: db:b0:0d:0b:7f:cf:02:cd:84:67:6d:1b:22:2f:22: 9c:c2:43:2f:f9:93:20:93:aa:2b:85:45:98:de:9b: bc:35:fb:d9:60:a3:4e:96:14:09:66:76:97:6d:22: 19:e0:b4:e3:20:37:aa:1e:e9:90:21:49:4e:13:22: b7:4a:24:43:33:a1:3a:f4:60:43:8c:07:e1:0d:d3: 70:5c:b5:38:15:79:8a:9c:f3:a2:7f:1e:dd:9a:d7: 39:e1:fa:6a:0b:28:67:c9:88:bf:45:8a:e5:88:54: 8b:e3:7d:38:d2:28:d8:44:61:ea:6e:31:45:b2:47: 8b:a6:d6:90:b4:bc:c6:f8:39:15:ef:58:79:ad:b6: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:62:48:5C:43:93:A0:90:3D:DD:9F:10:A3:5C:50:8A:29:3E:7F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0e9b753-6ae0-3f20-a450-d83c4f413193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d0:12:45:7b:d0:ed:86:69:cd:c9:d0:6b:65:46:48:f5:8c: 47:d5:a1:c0:ed:bf:4c:ab:09:7a:40:4e:47:aa:bd:e4:03:3f: c7:87:e0:8c:00:a9:25:9e:b9:43:c3:b2:3a:ff:7e:5d:7d:f1: 89:66:0c:ad:b8:dc:ed:35:ec:9f:ca:6e:29:4c:89:59:a8:14: 5f:a6:2c:1e:5a:cb:38:3b:39:2c:67:1c:bf:3b:ff:11:5b:c6: bd:07:14:32:94:d1:f7:02:cd:32:8a:72:d2:11:23:3e:11:7a: f7:9b:11:89:3a:49:3e:82:e3:d9:cb:0d:a7:13:23:3b:f8:f4: 7e:db:f6:3b:d2:d0:8a:01:50:fd:ae:bf:05:c7:fd:5b:d3:97: f7:07:d9:95:22:d5:fe:a4:d7:af:fd:ff:0a:e1:9c:59:b4:7f: 0d:fe:8c:11:b1:84:f7:5e:20:ff:d3:30:4c:eb:10:e7:24:82: 52:10:66:c3:57:e5:50:b6:62:ea:7a:62:84:16:04:5a:35:6f: 07:ac:71:20:88:33:f3:9e:d1:38:e6:92:91:24:87:01:07:93: d4:ef:14:05:f9:30:8f:44:f8:a1:32:a7:07:a7:a9:6a:91:a3: a3:a1:65:3c:3e:67:84:24:1f:3a:27:a0:e2:cf:32:25:7a:c7: 28:b1:0c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuRA//OuqjPX9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2RlMWE1NmYtMGUyYi00ZWJlLTlmNDUtZGJlZDgyYjRjNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJv5oIdhdrBHnSTZeN2yywfacBzDlGGqy7Ur UkLpwUuchJiG3IqyhRxRi4laqtdsTXPOjU7NXf4IxEZlZa4V42mwGKKWeUHmCuzj WacpSeU3l01cYkR4YmZNwvBUHGkzH0ZIIRKhLmJG6YvYm+ydHLU5oyJR2ZzbsA0L f88CzYRnbRsiLyKcwkMv+ZMgk6orhUWY3pu8NfvZYKNOlhQJZnaXbSIZ4LTjIDeq HumQIUlOEyK3SiRDM6E69GBDjAfhDdNwXLU4FXmKnPOifx7dmtc54fpqCyhnyYi/ RYrliFSL43040ijYRGHqbjFFskeLptaQtLzG+DkV71h5rbY1sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIliSFxDk6CQPd2fEKNcUIopPn9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjBlOWI3NTMtNmFlMC0z ZjIwLWE0NTAtZDgzYzRmNDEzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCcPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXQEkV70O2Gac3J0GtlRkj1jEfVocDtv0yrCXpATkeqveQDP8eH4IwA qSWeuUPDsjr/fl198YlmDK243O017J/KbilMiVmoFF+mLB5ayzg7OSxnHL87/xFb xr0HFDKU0fcCzTKKctIRIz4RevebEYk6ST6C49nLDacTIzv49H7b9jvS0IoBUP2u vwXH/VvTl/cH2ZUi1f6k16/9/wrhnFm0fw3+jBGxhPdeIP/TMEzrEOckglIQZsNX 5VC2Yup6YoQWBFo1bwescSCIM/Oe0TjmkpEkhwEHk9TvFAX5MI9E+KEypwenqWqR o6OhZTw+Z4QkHzonoOLPMiV6xyixDPQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:09 2025 by rpki-client