$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa File: 7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa (raw, json) Hash identifier: qtIALecLQ79rCGZIIvfsgZXuPdt+Nwaqii5e1fAxw0o= Subject key identifier: 3C:39:5F:19:D2:0E:07:75:01:F6:98:48:06:8B:49:C4:25:ED:A4:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581708E725F7B14C0A8B900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 23.251.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:70:8e:72:5f:7b:14:c0:a8:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9b4bfc31-367c-48a6-b710-70f230105aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:16:c5:d1:ac:5c:6d:41:37:d9:0b:14:22: f4:67:6a:38:8d:c7:f9:97:18:4c:63:af:83:ce:27: 1f:49:93:96:07:c8:dc:ab:98:f4:f0:aa:71:17:52: b4:97:fa:1e:3f:46:0c:4f:2a:d2:c1:48:0f:19:3d: 55:4f:9b:b7:c3:49:89:f0:f0:d9:cf:af:b0:a8:b6: 04:e9:07:ca:f3:5a:f9:10:f7:d0:2d:6f:b7:8d:a2: aa:a2:33:c8:e1:d6:8c:0d:88:ad:34:da:51:53:31: 40:2c:9f:78:06:e6:1a:da:b1:06:d3:f6:db:ba:9e: 05:ed:27:63:a3:d2:fe:29:6f:0b:cd:1e:06:bc:5a: 47:aa:db:aa:22:34:af:65:ff:51:25:43:a2:a1:21: b7:a2:97:fd:83:38:2c:d8:da:f9:0b:76:f2:d5:f0: af:f9:27:da:f4:ce:33:4d:4c:a6:f6:47:57:15:0a: 51:ee:39:78:b1:d4:17:be:eb:f6:ef:a5:61:b4:da: 16:ea:94:b4:40:9d:79:2b:33:7c:17:ab:21:28:fb: 34:61:91:15:43:26:30:5d:00:32:6b:52:c5:2a:93: 9d:3d:fc:22:f6:db:25:24:32:f9:35:55:d6:23:b7: 36:ce:c7:1b:8b:0c:05:dc:90:53:88:d3:9c:da:bc: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:39:5F:19:D2:0E:07:75:01:F6:98:48:06:8B:49:C4:25:ED:A4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:97:63:7f:ca:22:02:9c:e1:15:e3:e5:7b:3a:2c:56:03:10: 1c:43:48:8d:a2:4e:19:a3:0f:0e:8b:15:94:93:93:72:df:3e: fd:75:a4:d9:a9:31:4a:12:98:f3:62:df:cf:58:ac:f3:88:07: 00:e2:e7:64:4c:2a:47:bf:a4:af:19:5b:50:55:43:87:9d:02: e6:da:cf:44:fa:18:03:35:a6:d1:e8:c3:5b:74:69:88:a1:04: 67:93:85:b4:02:f7:47:de:5b:7e:5e:7f:2e:3a:46:bb:f6:5b: 69:6b:bb:1f:84:ce:90:0c:bb:63:7e:91:50:4e:75:01:44:e1: 52:88:10:70:0d:60:ff:83:17:0b:c1:30:05:58:98:14:0c:4c: a0:57:5a:72:3a:13:63:1c:fa:eb:76:ff:c4:4c:01:b0:11:0d: 50:5b:43:61:f8:f6:c6:b6:e5:14:28:f1:3a:30:b9:b9:0c:35: 87:23:e8:f4:99:cc:0f:32:7c:e9:7c:23:40:f5:51:d4:4b:32: 6d:09:3c:83:5d:ad:f2:96:49:bb:2e:f6:f7:e9:4b:d2:39:f5: 83:c1:95:0b:ae:d2:36:40:c7:a6:25:97:2c:29:be:fb:34:5f: 63:fa:f4:0a:c5:c0:3d:e4:ff:93:35:ab:12:4c:58:8c:78:23: ee:10:f3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXCOcl97FMCouQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWI0YmZjMzEtMzY3Yy00OGE2LWI3MTAtNzBmMjMwMTA1YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNkWxdGsXG1BN9kLFCL0Z2o4jcf5lxhMY6+D zicfSZOWB8jcq5j08KpxF1K0l/oeP0YMTyrSwUgPGT1VT5u3w0mJ8PDZz6+wqLYE 6QfK81r5EPfQLW+3jaKqojPI4daMDYitNNpRUzFALJ94BuYa2rEG0/bbup4F7Sdj o9L+KW8LzR4GvFpHqtuqIjSvZf9RJUOioSG3opf9gzgs2Nr5C3by1fCv+Sfa9M4z TUym9kdXFQpR7jl4sdQXvuv276VhtNoW6pS0QJ15KzN8F6shKPs0YZEVQyYwXQAy a1LFKpOdPfwi9tslJDL5NVXWI7c2zscbiwwF3JBTiNOc2rxBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw5XxnSDgd1AfaYSAaLScQl7aRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzcwOWY4ZGUtYWYwYy0z ZWU5LTk2NWMtN2EzZTVlZDJiMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2XY3/KIgKc4RXj5Xs6LFYDEBxDSI2iThmjDw6LFZSTk3LfPv11pNmp MUoSmPNi389YrPOIBwDi52RMKke/pK8ZW1BVQ4edAubaz0T6GAM1ptHow1t0aYih BGeThbQC90feW35efy46Rrv2W2lrux+EzpAMu2N+kVBOdQFE4VKIEHANYP+DFwvB MAVYmBQMTKBXWnI6E2Mc+ut2/8RMAbARDVBbQ2H49sa25RQo8TowubkMNYcj6PSZ zA8yfOl8I0D1UdRLMm0JPINdrfKWSbsu9vfpS9I59YPBlQuu0jZAx6Yllywpvvs0 X2P69ArFwD3k/5M1qxJMWIx4I+4Q8/0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:10:38 2025 by rpki-client