$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa File: 8b8be658-4911-3e79-adcb-5f756862b67a.roa (raw, json) Hash identifier: aCFmBAvvxwIhw82Ff7gRvj9eDJrOnecHaGjPTH5mPS8= Subject key identifier: 36:EC:D5:C2:D4:EF:36:CC:08:67:B3:7F:C0:99:F5:3E:73:9C:81:FE Certificate issuer: /CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Certificate serial: 010D0C9F43285848CC7B9B9DDF47256F32314B80 Authority key identifier: DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 46505 IP address blocks: 23.187.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9b:9d:df:47:25:6f:32:31:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4558eff-6c26-4a17-bb9e-54377ea2aef1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=e0141df4-ed19-4c79-bc20-2dc4c1850e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:0f:ac:d3:04:85:ee:fb:0a:8c:26:e1:fb: 3c:ec:03:2d:5d:6a:2e:a3:0b:1e:af:65:28:07:50: 18:f5:86:7a:06:cb:fb:01:c0:2a:c3:f2:59:91:06: e1:14:eb:48:11:1b:af:55:d5:45:cf:00:50:1d:2c: e4:1e:8b:b4:60:c6:bc:4d:e0:2e:9d:74:11:88:08: ec:36:e1:16:34:88:11:95:c7:65:c1:e1:4c:51:13: 5a:80:f7:af:25:b8:1a:3d:18:bc:05:9f:38:74:85: fc:2a:54:11:9b:05:9d:0f:3e:e7:c8:1c:7d:e1:8e: b4:ea:94:94:27:38:d5:5d:18:0b:ea:7d:0c:1c:ae: af:0f:12:d6:f5:6f:aa:d7:02:e1:6d:29:c0:e4:e9: dc:4e:89:ee:7e:25:fa:2b:6e:c8:66:8e:4d:f9:b8: 2d:ef:51:c3:45:6d:09:ee:fe:25:ce:5a:3c:fb:08: 7c:3d:b4:10:9b:71:db:f1:06:10:13:0c:50:a7:33: dc:4b:e8:29:f3:3e:4f:29:a9:8b:53:95:61:74:3b: bb:f6:c8:01:a7:b2:45:1a:05:fc:c6:dc:42:80:5a: 09:d4:2e:d8:58:12:14:44:e8:11:a4:06:c9:0b:01: 9f:e3:62:b0:29:06:83:fe:3d:ec:90:84:3a:f8:b6: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EC:D5:C2:D4:EF:36:CC:08:67:B3:7F:C0:99:F5:3E:73:9C:81:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/8b8be658-4911-3e79-adcb-5f756862b67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1/d4558eff-6c26-4a17-bb9e-54377ea2aef1.crl X509v3 Authority Key Identifier: keyid:DC:06:EB:8D:D4:86:04:61:98:24:E0:81:39:DF:98:1A:AC:54:39:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d4558eff-6c26-4a17-bb9e-54377ea2aef1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2b:8c:52:10:7a:65:b8:a1:8c:db:62:bf:7d:ed:87:f9:d6: ce:ce:ff:95:55:21:ef:74:bc:cd:4d:a2:69:e4:99:14:53:14: f1:27:59:6d:8f:a8:14:bb:e9:a5:f3:09:b3:4c:32:bb:3a:34: 7c:df:63:9b:08:e2:4f:78:af:fc:87:ba:dc:2b:ba:e1:d7:c0: 58:f1:40:6c:c0:6e:3c:fa:68:cd:dd:c7:ec:9c:e6:a3:35:32: 27:09:45:fc:c1:c9:d1:af:a7:32:2e:87:41:6d:ab:2a:8c:25: a8:cc:dc:6f:71:2a:0f:7d:a1:4a:c4:9d:6a:8c:c8:64:6e:de: f6:65:55:40:d0:d3:bc:7c:70:8f:54:68:12:d4:0f:2c:67:e1: 24:25:be:01:d0:cd:ed:8d:b1:6b:27:c6:eb:76:e4:b3:58:8f: b3:b1:ec:04:a9:26:fb:5d:4c:04:91:30:1b:19:07:95:82:0a: de:c5:20:0a:8c:72:00:89:1d:48:a3:bc:00:0f:2c:cc:51:f6: f9:f9:52:ea:af:81:b4:85:a5:ef:6c:6f:58:28:93:1c:da:a3: 77:e1:96:17:eb:24:c4:9e:9a:49:1c:ec:b0:fc:d5:ae:e8:1b: 15:92:26:71:38:bc:57:84:63:db:f9:a2:c5:49:09:d2:8c:83: 23:22:e4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5ud30clbzIxS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NThlZmYtNmMyNi00YTE3LWJiOWUtNTQzNzdlYTJh ZWYxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZTAxNDFkZjQtZWQxOS00Yzc5LWJjMjAtMmRjNGMxODUwZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6IPrNMEhe77Cowm4fs87AMtXWouowser2Uo B1AY9YZ6Bsv7AcAqw/JZkQbhFOtIERuvVdVFzwBQHSzkHou0YMa8TeAunXQRiAjs NuEWNIgRlcdlweFMURNagPevJbgaPRi8BZ84dIX8KlQRmwWdDz7nyBx94Y606pSU JzjVXRgL6n0MHK6vDxLW9W+q1wLhbSnA5OncTonufiX6K27IZo5N+bgt71HDRW0J 7v4lzlo8+wh8PbQQm3Hb8QYQEwxQpzPcS+gp8z5PKamLU5VhdDu79sgBp7JFGgX8 xtxCgFoJ1C7YWBIUROgRpAbJCwGf42KwKQaD/j3skIQ6+LbDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbs1cLU7zbMCGezf8CZ9T5znIH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1 OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3N2VhMmFlZjEvOGI4YmU2NTgtNDkxMS0z ZTc5LWFkY2ItNWY3NTY4NjJiNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ1NThlZmYtNmMyNi00YTE3LWJi OWUtNTQzNzdlYTJhZWYxL2Q0NTU4ZWZmLTZjMjYtNGExNy1iYjllLTU0Mzc3ZWEy YWVmMS5jcmwwHwYDVR0jBBgwFoAU3AbrjdSGBGGYJOCBOd+YGqxUOXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDU1OGVmZi02YzI2LTRhMTctYmI5ZS01NDM3 N2VhMmFlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0rjFIQemW4oYzbYr997Yf51s7O/5VVIe90vM1NomnkmRRTFPEnWW2P qBS76aXzCbNMMrs6NHzfY5sI4k94r/yHutwruuHXwFjxQGzAbjz6aM3dx+yc5qM1 MicJRfzBydGvpzIuh0FtqyqMJajM3G9xKg99oUrEnWqMyGRu3vZlVUDQ07x8cI9U aBLUDyxn4SQlvgHQze2NsWsnxut25LNYj7Ox7ASpJvtdTASRMBsZB5WCCt7FIAqM cgCJHUijvAAPLMxR9vn5UuqvgbSFpe9sb1gokxzao3fhlhfrJMSemkkc7LD81a7o GxWSJnE4vFeEY9v5osVJCdKMgyMi5Eg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:14 2025 by rpki-client