$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/08f394a8-6260-398e-94d1-75b9910bab37.roa File: 08f394a8-6260-398e-94d1-75b9910bab37.roa (raw, json) Hash identifier: TxAo2tPbZW5P7wUT73N9LCqL5tHOfDfM6Q8Uh/3UZu0= Subject key identifier: 7C:65:CB:80:B3:E9:0E:0F:4A:D1:A0:DC:1B:4B:14:FC:35:24:F4:A0 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584944692BD98E1B9B49B9FB9C40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/08f394a8-6260-398e-94d1-75b9910bab37.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 394161 IP address blocks: 8.244.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:2b:d9:8e:1b:9b:49:b9:fb:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=6e3940bc-acc6-40b3-8289-674ceeeccec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:80:2d:45:27:0d:5b:a0:ab:6e:71:42:27: ad:5a:b9:83:96:d1:6d:44:eb:d7:0d:e5:6d:eb:f3: 74:57:83:7a:e2:3e:44:4e:41:b7:2a:f0:f9:eb:e8: fc:70:77:27:2f:0d:66:45:8a:22:e7:59:e1:c7:4c: ff:a9:93:a6:d2:9d:4a:7d:05:0d:75:79:d7:b8:1c: 91:ab:52:d6:13:29:bb:c0:3a:0f:2c:86:9c:c6:dd: cf:e5:c9:18:14:47:03:76:e8:81:24:b4:c9:4c:f9: 47:32:99:aa:f7:d0:2e:ca:3e:d0:53:50:b2:45:65: 01:79:52:5a:6f:68:ff:2a:9d:1a:67:6f:2c:ce:71: 95:59:61:1b:70:b0:5d:6f:5e:ef:55:21:c2:8c:91: 0f:a3:d6:14:3b:d8:be:4b:7a:2c:b6:6f:04:6d:a8: 64:e3:20:2d:1d:a1:9d:29:dd:19:bc:03:ae:cf:b0: 11:9d:cd:f5:a6:66:b6:44:a7:f0:eb:55:e4:6b:c9: 9c:53:5e:de:6a:53:31:a1:cc:ec:28:96:81:11:35: 5a:ed:68:0d:69:1f:0f:6d:c6:9a:3c:2f:c4:c7:4d: de:9c:a5:07:f9:84:44:cd:25:1a:2a:85:49:c2:7f: 9f:e9:71:f1:13:53:85:c3:f8:0d:1d:33:69:b7:59: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:65:CB:80:B3:E9:0E:0F:4A:D1:A0:DC:1B:4B:14:FC:35:24:F4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/08f394a8-6260-398e-94d1-75b9910bab37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.244.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:49:e0:08:ff:d5:24:2f:3f:b6:2a:77:ed:16:17:47:0b:93: 2a:c7:22:c6:dd:b3:2a:19:1c:02:37:74:a7:9c:41:36:2d:28: 6a:24:2b:4a:22:52:04:2b:3b:55:58:79:4b:56:a0:7f:6c:78: 9f:ca:00:b7:07:1f:b5:eb:ff:de:e4:a2:94:cb:b0:a1:50:bc: a7:af:e5:d0:7c:17:fc:dd:bf:27:5c:34:58:f4:39:38:06:6c: 6f:d8:cf:96:43:9a:0b:a3:bb:4b:da:44:d9:91:5d:70:09:39: f8:c0:29:fc:83:5f:f8:12:64:45:c4:27:31:0f:bd:b2:2f:7f: f9:e5:74:16:c9:ec:17:d0:01:92:c3:9d:26:03:79:f8:d7:fd: a1:82:ce:1f:93:a3:b5:28:1c:8d:39:ba:5f:4b:42:d6:c8:cc: be:59:9e:66:81:55:3c:a7:d2:78:7a:27:c5:a2:8c:62:3c:c4: 45:e4:41:80:70:82:6b:16:36:e6:ab:c6:cf:11:83:7b:ae:70: 3c:8e:9c:c7:52:40:11:3d:e4:49:f5:74:54:41:22:ea:b8:ad: f6:74:c5:ca:58:77:6f:7d:bb:9b:fd:75:b0:ad:2b:ba:42:0e: e9:8a:d6:c9:ce:18:31:34:34:70:5e:87:15:e1:9e:8d:4b:0a: a0:e6:b6:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaSvZjhubSbn7nEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NmUzOTQwYmMtYWNjNi00MGIzLTgyODktNjc0Y2VlZWNjZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5SALUUnDVugq25xQietWrmDltFtROvXDeVt 6/N0V4N64j5ETkG3KvD56+j8cHcnLw1mRYoi51nhx0z/qZOm0p1KfQUNdXnXuByR q1LWEym7wDoPLIacxt3P5ckYFEcDduiBJLTJTPlHMpmq99Auyj7QU1CyRWUBeVJa b2j/Kp0aZ28sznGVWWEbcLBdb17vVSHCjJEPo9YUO9i+S3ostm8Ebahk4yAtHaGd Kd0ZvAOuz7ARnc31pma2RKfw61Xka8mcU17ealMxoczsKJaBETVa7WgNaR8Pbcaa PC/Ex03enKUH+YREzSUaKoVJwn+f6XHxE1OFw/gNHTNpt1kUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxly4Cz6Q4PStGg3BtLFPw1JPSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDhmMzk0YTgtNjI2MC0z OThlLTk0ZDEtNzViOTkxMGJhYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACPSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFJ4Aj/1SQvP7Yqd+0WF0cLkyrHIsbdsyoZHAI3dKecQTYtKGokK0oi UgQrO1VYeUtWoH9seJ/KALcHH7Xr/97kopTLsKFQvKev5dB8F/zdvydcNFj0OTgG bG/Yz5ZDmguju0vaRNmRXXAJOfjAKfyDX/gSZEXEJzEPvbIvf/nldBbJ7BfQAZLD nSYDefjX/aGCzh+To7UoHI05ul9LQtbIzL5ZnmaBVTyn0nh6J8WijGI8xEXkQYBw gmsWNuarxs8Rg3uucDyOnMdSQBE95En1dFRBIuq4rfZ0xcpYd299u5v9dbCtK7pC DumK1snOGDE0NHBehxXhno1LCqDmthY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:03 2025 by rpki-client