$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa File: 874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa (raw, json) Hash identifier: kReZHwi6oLnP2668ocOOtQnjJcYFRkNgEz9+iRmPZQE= Subject key identifier: 8F:CB:52:E4:E0:1D:03:A8:0B:AF:91:4B:F9:76:BD:2E:60:ED:F0:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581887B1429DDC844B85600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 23.251.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:7b:14:29:dd:c8:44:b8:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4a5c6bf8-47b8-4ba4-b752-3fc362770797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:df:ff:6d:85:37:ad:85:ab:25:34:e4:bc: 30:78:1a:25:08:05:de:55:a2:de:ff:aa:ce:cc:35: 14:37:38:6e:ba:23:e1:43:59:0d:5e:d9:38:1e:6d: 6c:b9:95:db:0e:4d:a9:fa:c7:45:f2:87:94:83:e1: 0e:7b:f1:84:ef:d9:88:4f:97:bc:41:cd:b3:dc:d8: 07:a2:06:87:f8:52:e9:f5:b7:6c:b3:c0:17:cf:8c: ac:ce:93:12:17:a4:31:78:9b:bd:b9:8c:ba:b5:b3: ce:0e:5c:ab:ea:01:13:94:f4:e0:37:23:fd:fb:52: 0b:76:f5:1f:cc:00:6e:9b:24:fa:97:98:bb:4b:ec: e0:f5:5a:5c:46:50:db:9b:5c:e8:80:ea:a6:f5:e6: 53:5d:9f:83:21:35:4e:67:bf:cf:5e:2b:c7:d8:f7: 13:65:ed:65:0d:af:61:26:44:e2:fa:9c:f5:8a:04: 04:b9:15:79:6a:e3:3d:d6:59:f7:80:08:b3:61:70: 48:b8:a8:4a:7d:09:b6:75:1f:66:a4:e0:b1:70:2a: 8b:03:a3:59:98:76:e3:66:fc:dc:2c:0d:6d:a9:6b: 13:bb:13:5f:b0:af:7e:39:2a:40:7d:43:ca:f8:9c: 9f:8f:c1:f6:72:ec:eb:ab:c6:77:95:96:7d:08:51: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CB:52:E4:E0:1D:03:A8:0B:AF:91:4B:F9:76:BD:2E:60:ED:F0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:32:4c:a9:13:e9:df:f1:a4:c4:67:62:05:52:f0:90:2d:79: b2:c4:ed:05:d6:8a:87:a0:72:f6:fc:71:ae:c6:b4:20:a1:04: 19:02:f0:1f:fa:e8:2e:35:02:9d:fa:99:15:ac:c5:e6:68:1a: f9:71:13:4b:41:e2:44:88:63:61:cd:b5:6f:0b:fb:cf:a7:a2: 09:96:e7:36:f1:99:c7:83:a0:fa:a5:cc:9f:47:d9:15:64:dc: e4:77:59:1f:50:e3:f5:2e:20:f7:71:b6:87:0e:55:51:9f:be: 1f:1a:61:7c:81:7f:42:8e:a7:1d:77:45:d3:82:5d:ee:db:0d: fc:77:7a:28:e3:69:b4:41:4d:45:84:b7:b6:2a:9f:59:08:dd: 4d:87:23:e7:72:ae:0c:fb:ce:82:bc:8e:4b:50:2d:99:46:0e: 80:da:81:38:d3:c1:23:dc:c0:af:11:e6:04:ea:e0:c7:b6:65: 41:12:48:b2:47:80:47:0c:83:6e:b4:83:99:e7:d1:5d:5d:13: 22:19:ef:2e:64:90:5f:f2:42:d8:de:9a:12:65:a9:5a:04:da: 2f:28:54:b8:d9:87:99:ba:31:a0:dc:b2:ff:79:25:34:6b:67: 94:d9:9d:d6:95:f4:9a:55:c9:5d:d5:1b:02:10:a8:da:1d:8a: 45:04:e0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYh7FCndyES4VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGE1YzZiZjgtNDdiOC00YmE0LWI3NTItM2ZjMzYyNzcwNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVDf/22FN62FqyU05LwweBolCAXeVaLe/6rO zDUUNzhuuiPhQ1kNXtk4Hm1suZXbDk2p+sdF8oeUg+EOe/GE79mIT5e8Qc2z3NgH ogaH+FLp9bdss8AXz4yszpMSF6QxeJu9uYy6tbPODlyr6gETlPTgNyP9+1ILdvUf zABumyT6l5i7S+zg9VpcRlDbm1zogOqm9eZTXZ+DITVOZ7/PXivH2PcTZe1lDa9h JkTi+pz1igQEuRV5auM91ln3gAizYXBIuKhKfQm2dR9mpOCxcCqLA6NZmHbjZvzc LA1tqWsTuxNfsK9+OSpAfUPK+Jyfj8H2cuzrq8Z3lZZ9CFFHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/LUuTgHQOoC6+RS/l2vS5g7fAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODc0ZjVlNGUtZDQ1Mi0z ZGZlLThlOWItZGNmNjkyMDRhMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwyTKkT6d/xpMRnYgVS8JAtebLE7QXWioegcvb8ca7GtCChBBkC8B/6 6C41Ap36mRWsxeZoGvlxE0tB4kSIY2HNtW8L+8+nogmW5zbxmceDoPqlzJ9H2RVk 3OR3WR9Q4/UuIPdxtocOVVGfvh8aYXyBf0KOpx13RdOCXe7bDfx3eijjabRBTUWE t7Yqn1kI3U2HI+dyrgz7zoK8jktQLZlGDoDagTjTwSPcwK8R5gTq4Me2ZUESSLJH gEcMg260g5nn0V1dEyIZ7y5kkF/yQtjemhJlqVoE2i8oVLjZh5m6MaDcsv95JTRr Z5TZndaV9JpVyV3VGwIQqNodikUE4Hc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:07 2025 by rpki-client