$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f628d6fb-f2bb-33dd-8824-6296dee3e287.roa File: f628d6fb-f2bb-33dd-8824-6296dee3e287.roa (raw, json) Hash identifier: ZcYOPjkpg+u5IlmaUIrBhxylmdw0DFU24rkrob7SYLE= Subject key identifier: E7:D8:F1:E5:8E:BF:6A:2A:DB:C2:87:99:D9:15:78:C5:09:69:1E:06 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858492CB208D708CF987F80A07800 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f628d6fb-f2bb-33dd-8824-6296dee3e287.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 8.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:08:d7:08:cf:98:7f:80:a0:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f256bb86-23b5-4716-970e-20a165ae74fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:d5:4a:59:0c:fa:4d:94:11:9d:c5:6d:ae: 9a:39:2b:82:57:3e:ee:94:c9:8e:59:07:c2:ed:56: 3f:b8:a7:e1:cf:99:85:4b:23:6a:8b:5f:4e:5f:e8: 94:db:06:e4:ce:d6:7b:44:2f:c4:33:a7:05:ea:9e: 70:07:2f:85:da:11:f4:b9:76:59:7a:3c:98:4e:bc: dc:56:f6:89:fa:e8:27:eb:d6:20:63:9e:45:0b:b9: 1a:c7:99:b0:45:d6:41:03:da:cc:7f:a0:d2:10:45: 68:9c:d5:58:fc:fb:f6:bb:e1:e3:5b:cc:aa:a2:3e: f7:0c:84:c6:b1:b0:e7:61:10:c6:71:7f:cf:af:58: c4:c1:02:61:89:41:ff:f8:37:5f:9e:17:a5:aa:e4: 83:da:83:51:89:4c:03:04:fc:5f:eb:51:3a:d6:88: f8:8e:f7:05:5b:8d:60:50:a9:c4:08:e9:24:ce:a5: aa:58:45:d9:1d:bd:7b:ad:1b:16:88:a6:11:90:94: 66:7c:a5:40:f4:92:bb:8a:69:c7:ac:ff:57:ea:25: 53:f9:c4:04:ba:95:ed:b7:73:41:70:5e:3d:46:de: 8b:33:63:cf:ce:85:08:6b:a1:54:44:4f:02:70:ae: d5:24:c2:a4:7e:f3:2e:b2:86:7e:fb:20:77:90:12: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D8:F1:E5:8E:BF:6A:2A:DB:C2:87:99:D9:15:78:C5:09:69:1E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f628d6fb-f2bb-33dd-8824-6296dee3e287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b1:20:68:6f:9c:ed:f4:e2:7f:33:9e:8e:e4:6b:88:36:a8: 08:0e:aa:23:c5:84:2e:96:ad:d1:e7:dd:6c:19:5f:21:34:f4: 41:a9:76:b1:51:3f:f2:d4:0a:5f:aa:12:78:74:48:c3:83:d5: f1:0c:4d:1c:7f:3f:1f:3e:2c:5a:a5:78:ce:9b:46:86:d9:99: 25:60:78:51:99:02:5b:38:31:ab:55:2e:d4:ce:33:83:b3:94: a6:27:38:7f:83:14:1b:ee:f2:9f:45:c7:c9:92:d2:f5:9e:d0: 75:2c:d7:d6:df:23:a9:01:e3:5f:84:38:7c:34:3f:a8:92:ed: 50:97:e4:2a:cb:e0:2a:6c:97:b9:dc:00:2a:82:e5:b0:10:9c: 7e:3c:6f:39:fd:65:45:c1:89:45:66:1b:be:55:28:97:7f:83: 15:da:ee:3e:4f:0a:99:bc:8e:fb:32:2d:01:fd:d5:50:da:70: b0:b4:5f:c1:2f:6c:3c:f4:28:1a:5e:3c:b8:14:f8:18:06:f8: 5b:1b:a0:d4:6f:be:40:4b:f0:88:48:b4:0f:cc:63:09:31:1e: 33:89:6c:2d:22:e1:96:c4:af:1e:67:a2:81:e7:ef:1c:a9:9b: cb:76:17:1b:b6:aa:b5:4e:46:a9:97:33:62:e0:49:14:cb:9c: 53:8d:6a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgjXCM+Yf4CgeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjI1NmJiODYtMjNiNS00NzE2LTk3MGUtMjBhMTY1YWU3NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdTVSlkM+k2UEZ3Fba6aOSuCVz7ulMmOWQfC 7VY/uKfhz5mFSyNqi19OX+iU2wbkztZ7RC/EM6cF6p5wBy+F2hH0uXZZejyYTrzc VvaJ+ugn69YgY55FC7kax5mwRdZBA9rMf6DSEEVonNVY/Pv2u+HjW8yqoj73DITG sbDnYRDGcX/Pr1jEwQJhiUH/+DdfnhelquSD2oNRiUwDBPxf61E61oj4jvcFW41g UKnECOkkzqWqWEXZHb17rRsWiKYRkJRmfKVA9JK7imnHrP9X6iVT+cQEupXtt3NB cF49Rt6LM2PPzoUIa6FURE8CcK7VJMKkfvMusoZ++yB3kBK4XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfY8eWOv2oq28KHmdkVeMUJaR4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjYyOGQ2ZmItZjJiYi0z M2RkLTg4MjQtNjI5NmRlZTNlMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqxIGhvnO304n8zno7ka4g2qAgOqiPFhC6WrdHn3WwZXyE09EGpdrFR P/LUCl+qEnh0SMOD1fEMTRx/Px8+LFqleM6bRobZmSVgeFGZAls4MatVLtTOM4Oz lKYnOH+DFBvu8p9Fx8mS0vWe0HUs19bfI6kB41+EOHw0P6iS7VCX5CrL4Cpsl7nc ACqC5bAQnH48bzn9ZUXBiUVmG75VKJd/gxXa7j5PCpm8jvsyLQH91VDacLC0X8Ev bDz0KBpePLgU+BgG+FsboNRvvkBL8IhItA/MYwkxHjOJbC0i4ZbErx5nooHn7xyp m8t2Fxu2qrVORqmXM2LgSRTLnFONamU= -----END CERTIFICATE-----Generated at Fri Mar 14 08:04:55 2025 by rpki-client