$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa File: dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa (raw, json) Hash identifier: eAYHGtmP9eKLX1uneHZ9o+epB5qETwDyWcfc0u8wAU0= Subject key identifier: DE:C8:97:25:45:0F:48:3C:4C:8D:9B:B9:ED:70:F9:E0:25:A5:6B:80 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849071BE6DF0163F929E9382580 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 5744 IP address blocks: 151.207.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e6:df:01:63:f9:29:e9:38:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=4dcefe3f-8fa4-41cc-81d0-e952db1ac205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d8:36:a5:eb:7b:c5:4b:d9:79:dc:ff:3b:5a: c1:d2:e8:8a:6d:d8:6f:6f:ba:04:89:84:ed:bb:c1: 86:98:83:81:41:31:dd:8c:5a:72:ac:ce:7e:2c:c8: af:aa:03:5e:a7:d9:7a:70:25:9c:8f:c7:cf:b0:d8: 2b:3b:f6:dc:f0:01:56:3c:bf:c3:fc:b7:fe:2a:71: 11:a9:27:72:e3:bf:a1:e5:5a:97:56:5c:13:8f:fb: 36:99:b9:87:78:8c:48:26:73:2e:e0:c9:c7:f7:3e: ab:61:58:8e:97:3d:a3:82:1c:94:b3:c3:3b:5f:0b: d9:ea:08:34:ad:c9:dd:a3:61:31:a6:33:d4:91:ca: 2c:66:d5:c3:8b:d1:d1:7d:c9:a5:5f:be:63:71:da: 55:cc:b6:b2:12:57:0f:07:89:3a:c9:0a:d3:4d:a1: a4:9f:31:38:76:3a:21:42:34:22:ac:1d:2b:49:b5: 32:88:ca:dd:ba:aa:3d:cc:5a:0c:24:bd:f9:73:5d: 2b:1a:bb:7d:d7:24:b9:5e:9e:6c:36:08:99:c5:c3: 05:2e:d6:8b:af:3b:55:30:46:99:88:51:59:61:5a: b4:37:34:b0:b9:35:34:4e:0a:a2:37:57:97:94:05: 42:80:e1:75:2a:9c:89:07:6c:1b:30:37:17:df:39: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C8:97:25:45:0F:48:3C:4C:8D:9B:B9:ED:70:F9:E0:25:A5:6B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:57:30:27:08:1f:39:b3:fb:bb:0b:f2:33:1d:a2:c1:22:ca: 6a:de:6f:18:4c:6a:b2:50:38:f0:8c:ca:da:8d:d8:c7:7a:4d: e7:4a:0b:3e:1a:70:b4:81:fc:2c:80:1c:e4:61:0b:ec:4e:2d: 14:9b:08:7a:f5:2e:98:3e:f1:14:a1:0d:90:31:6f:5a:c9:37: c4:32:b7:cd:bb:6b:8d:77:ea:4c:6e:38:9c:f0:88:f6:d9:8f: 55:c6:74:16:00:24:d9:a9:0d:c8:c7:a7:6f:cc:19:ae:2f:1f: f9:78:4a:86:f4:2d:13:d8:c4:ce:b1:81:e1:b9:9f:e3:a7:2d: 7d:b4:cf:f0:b2:35:4b:57:28:d0:4d:7d:2e:9b:53:5e:cc:31: d0:da:19:b4:06:4e:34:17:fd:a7:06:b3:37:58:31:be:1e:a1: b7:fb:44:2a:d9:5d:09:61:a0:e7:c4:ed:11:36:ce:88:8b:7c: c8:7c:c3:a2:85:6f:5a:71:f5:dd:e6:0e:ad:77:82:20:50:81: 5f:22:7e:db:35:ba:62:f4:4c:de:3d:84:d7:19:43:8c:98:6d: 0f:d2:c3:12:f7:0f:c0:79:52:f5:80:a0:92:9d:0f:93:ab:b8: b4:01:69:7d:b1:c0:d9:f0:01:f9:a0:a6:ef:c4:7e:5d:23:59: 33:1e:ab:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+bfAWP5Kek4JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NGRjZWZlM2YtOGZhNC00MWNjLTgxZDAtZTk1MmRiMWFjMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9g2pet7xUvZedz/O1rB0uiKbdhvb7oEiYTt u8GGmIOBQTHdjFpyrM5+LMivqgNep9l6cCWcj8fPsNgrO/bc8AFWPL/D/Lf+KnER qSdy47+h5VqXVlwTj/s2mbmHeIxIJnMu4MnH9z6rYViOlz2jghyUs8M7XwvZ6gg0 rcndo2ExpjPUkcosZtXDi9HRfcmlX75jcdpVzLayElcPB4k6yQrTTaGknzE4djoh QjQirB0rSbUyiMrduqo9zFoMJL35c10rGrt91yS5Xp5sNgiZxcMFLtaLrztVMEaZ iFFZYVq0NzSwuTU0TgqiN1eXlAVCgOF1KpyJB2wbMDcX3zmSLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7IlyVFD0g8TI2bue1w+eAlpWuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQyM2EyOTctOTA5MC0z YjJkLTkzMTQtMWVjMzJmY2FmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdXMCcIHzmz+7sL8jMdosEiymrebxhMarJQOPCMytqN2Md6TedKCz4a cLSB/CyAHORhC+xOLRSbCHr1Lpg+8RShDZAxb1rJN8Qyt827a4136kxuOJzwiPbZ j1XGdBYAJNmpDcjHp2/MGa4vH/l4Sob0LRPYxM6xgeG5n+OnLX20z/CyNUtXKNBN fS6bU17MMdDaGbQGTjQX/acGszdYMb4eobf7RCrZXQlhoOfE7RE2zoiLfMh8w6KF b1px9d3mDq13giBQgV8ifts1umL0TN49hNcZQ4yYbQ/SwxL3D8B5UvWAoJKdD5Or uLQBaX2xwNnwAfmgpu/Efl0jWTMeq+E= -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:50 2025 by rpki-client