$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa File: 5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa (raw, json) Hash identifier: JptMFjsCzh6T+x4AlG3LWReLIZtQ6N+yv7bDlHrlWOg= Subject key identifier: 57:10:4F:3F:5E:0F:6D:B6:2A:98:C5:46:1D:03:F1:C4:4F:B6:7F:AA Certificate issuer: /CN=b12072dc-8b29-49de-800e-2439a1f4bf97 Certificate serial: 010D0C9F43285849287E6B8D2DDB120997C37800 Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 399737 IP address blocks: 23.165.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:6b:8d:2d:db:12:09:97:c3:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=3f56ff4c-074e-49bb-81db-5dd2579b3c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:58:17:7f:01:8f:a7:fa:36:c1:d3:f2:06: 52:77:df:6b:22:89:b3:2a:3c:56:9f:14:36:ad:59: 1a:6c:d2:62:69:ba:97:e4:0d:b4:f3:3d:d0:90:84: ad:4c:64:46:95:55:fa:cb:02:d5:aa:dc:86:c9:70: 89:7e:4d:a9:42:1a:24:b2:30:c1:28:7c:e3:23:c5: 65:6b:49:38:44:23:41:77:e6:aa:45:5d:69:3d:b6: 9e:d8:35:b0:c5:c9:37:bd:86:12:46:58:d1:f1:82: 71:3e:ea:90:fa:5f:fc:20:8c:b9:9f:f5:c6:64:e3: 5e:57:99:a5:15:ad:46:42:30:b4:36:88:7c:df:17: 5f:26:b3:72:ee:6c:34:5f:4b:65:c6:a2:6d:b1:fe: 97:b8:7b:77:1c:7b:ad:81:6b:d6:42:f7:e2:ff:4b: 51:fa:cc:54:5a:b3:6b:64:64:2f:e7:30:15:01:d4: 26:18:8b:04:cd:d2:f7:9b:fe:28:ec:f7:41:3b:fb: cd:c6:53:14:42:43:b8:7d:83:de:e0:31:ff:02:fb: dc:09:28:55:47:67:9b:bb:3b:2b:01:cd:77:a7:0e: df:7d:08:75:f5:05:03:6b:d1:53:92:63:21:8e:71: 1c:71:e0:ea:26:50:82:7e:c0:13:e4:68:c8:70:c4: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:10:4F:3F:5E:0F:6D:B6:2A:98:C5:46:1D:03:F1:C4:4F:B6:7F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl X509v3 Authority Key Identifier: keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer sbgp-ipAddrBlock: critical IPv4: 23.165.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:13:45:1d:17:32:be:d1:54:9a:9d:4f:0c:22:11:96:00:41: 30:d3:8e:ba:a2:eb:ec:ae:e6:f1:1a:f1:58:5b:82:f9:cd:7b: 7d:2b:bd:7f:6a:06:c6:04:e2:38:44:32:3a:f3:31:59:fb:19: 75:91:fe:da:0e:be:0a:80:c2:95:d2:9e:7b:16:58:0b:93:53: b7:ec:78:18:90:b3:a9:32:95:16:3e:d4:f7:da:9d:0c:46:ff: 33:b9:d7:6b:ce:36:38:df:f2:5e:54:a5:8d:f4:9d:00:64:f8: 0f:9b:29:7e:c4:83:9e:24:42:e4:f5:e4:42:a7:f4:d6:e3:11: 7a:85:21:56:06:75:61:6d:e6:f0:df:06:46:ff:76:cb:61:ec: 1e:71:f9:69:8f:d6:1b:2f:25:7c:ea:87:14:fd:1c:15:e0:1f: 41:d6:05:cd:5e:50:65:c3:65:3e:ac:aa:88:e0:b5:f7:a8:5f: 40:c2:92:07:76:a1:9f:4c:7d:de:f1:40:0a:72:1d:e1:3f:63: cc:6b:b2:d5:b4:3d:81:e0:a8:07:45:7d:5d:13:87:2e:90:e3: 93:56:31:ef:56:fe:14:c4:b0:77:fa:48:4e:99:a9:70:bf:18: 61:11:6c:56:bb:30:be:b5:ff:62:a4:10:c0:9b:36:14:8f:8f: 53:1f:ab:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmuNLdsSCZfDeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjEyMDcyZGMtOGIyOS00OWRlLTgwMGUtMjQzOWExZjRi Zjk3MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2Y1NmZmNGMtMDc0ZS00OWJiLTgxZGItNWRkMjU3OWIzYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DJYF38Bj6f6NsHT8gZSd99rIomzKjxWnxQ2 rVkabNJiabqX5A208z3QkIStTGRGlVX6ywLVqtyGyXCJfk2pQhoksjDBKHzjI8Vl a0k4RCNBd+aqRV1pPbae2DWwxck3vYYSRljR8YJxPuqQ+l/8IIy5n/XGZONeV5ml Fa1GQjC0Noh83xdfJrNy7mw0X0tlxqJtsf6XuHt3HHutgWvWQvfi/0tR+sxUWrNr ZGQv5zAVAdQmGIsEzdL3m/4o7PdBO/vNxlMUQkO4fYPe4DH/AvvcCShVR2ebuzsr Ac13pw7ffQh19QUDa9FTkmMhjnEcceDqJlCCfsAT5GjIcMSedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcQTz9eD222KpjFRh0D8cRPtn+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iMTIw NzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFmNGJmOTcvNTk3NGU3ZTAtNjZjMS0z NmEwLWEwNzItZTViYzllNmJiODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjEyMDcyZGMtOGIyOS00OWRlLTgw MGUtMjQzOWExZjRiZjk3L2IxMjA3MmRjLThiMjktNDlkZS04MDBlLTI0MzlhMWY0 YmY5Ny5jcmwwHwYDVR0jBBgwFoAUbbEzuUq4UQp9SSdwpGFXfTla9GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iMTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5 YTFmNGJmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8TRR0XMr7RVJqdTwwiEZYAQTDTjrqi6+yu5vEa8VhbgvnNe30rvX9q BsYE4jhEMjrzMVn7GXWR/toOvgqAwpXSnnsWWAuTU7fseBiQs6kylRY+1PfanQxG /zO512vONjjf8l5UpY30nQBk+A+bKX7Eg54kQuT15EKn9NbjEXqFIVYGdWFt5vDf Bkb/dsth7B5x+WmP1hsvJXzqhxT9HBXgH0HWBc1eUGXDZT6sqojgtfeoX0DCkgd2 oZ9Mfd7xQApyHeE/Y8xrstW0PYHgqAdFfV0Thy6Q45NWMe9W/hTEsHf6SE6ZqXC/ GGERbFa7ML61/2KkEMCbNhSPj1Mfqyo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:16 2025 by rpki-client