$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa File: 69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa (raw, json) Hash identifier: IEFFE1+VsHkin6koLvW2nLZbmOUF/H9tMLnDvwU07OQ= Subject key identifier: 9C:02:FA:08:7C:61:7E:0A:B2:3D:DF:02:F3:D1:8F:F1:A4:DE:F8:6F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858493C094022361D99308F195A80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 3356 IP address blocks: 207.83.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:40:22:36:1d:99:30:8f:19:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=9884c31c-5ec4-4b0e-ba70-bda8c9238ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:23:ae:e7:38:8c:3c:71:bb:74:56:9a:0d: ec:18:d3:13:cb:ed:66:1d:d1:5c:30:a7:cb:4a:49: e4:d6:af:7a:1f:ae:8d:53:ef:dc:35:93:7f:a5:e1: 30:9f:f5:cd:1e:98:b6:f4:f8:ce:e2:f4:cd:45:4d: db:82:a9:86:71:4f:31:90:9e:a1:c1:7a:d6:ae:09: 1e:27:53:17:18:7a:b4:f1:9e:1a:7e:7c:6c:54:36: 0b:00:d2:37:a5:23:33:a2:fb:36:2f:b6:8b:1d:c0: 65:11:3b:53:e8:71:36:4c:65:54:8a:5d:eb:2a:a0: 82:b5:eb:ca:78:f7:47:1d:8d:0b:58:fc:bd:7c:73: cc:05:8a:b4:56:52:be:9e:ba:d9:5d:99:93:d8:43: cf:f6:eb:be:17:47:d5:f7:77:40:ee:65:2b:ac:f1: 25:c7:44:17:5c:d7:17:23:fd:54:ea:c2:21:1d:66: d1:53:81:2e:eb:2d:c2:8c:b0:9e:aa:75:49:33:e8: 8a:a7:33:3f:1a:a3:fc:87:c2:42:1d:44:78:60:88: 98:05:9f:b7:0b:61:28:5d:7b:88:0e:40:18:80:31: cd:f8:9e:9a:d2:62:eb:f8:48:59:f9:24:f5:5b:43: 82:1d:12:23:75:c2:02:47:a6:50:23:10:46:70:73: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:FA:08:7C:61:7E:0A:B2:3D:DF:02:F3:D1:8F:F1:A4:DE:F8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.83.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ea:ee:f2:03:f0:17:02:dc:cc:38:e7:ec:69:a4:c2:30:0a: 78:0e:99:ec:3c:04:41:03:1d:af:e9:7f:94:cb:0c:1a:b0:7b: 10:32:30:d5:a7:ff:83:ee:0f:cb:d0:91:9d:d9:61:a5:ae:c6: b2:81:7c:45:88:a3:c0:91:73:73:9e:a7:52:23:ee:c6:1b:98: 27:a9:77:28:d2:2e:1a:de:35:a0:cc:98:fa:7e:45:b0:e8:26: 12:78:38:d4:4d:d8:60:63:61:d2:49:05:d1:f1:39:e5:c8:7b: b1:45:04:4c:e6:09:74:e9:3e:05:0c:56:b2:df:57:b3:0e:8b: c7:c3:41:f9:81:20:41:e4:5c:bd:26:8e:e3:7f:e5:f5:d5:38: f9:82:50:62:24:51:fe:cc:cb:5c:3b:5c:bb:58:b6:6a:c6:08: 99:57:19:66:a2:3e:8a:ef:a2:c9:49:bd:7f:64:cb:02:84:f8: 55:d6:c5:41:eb:4c:21:1f:05:33:49:51:78:33:4d:0e:63:2c: 4e:58:4b:cc:65:2a:0f:33:4c:c0:6d:07:20:52:ac:ef:fc:06: 6c:41:f3:cb:1e:10:8a:a9:4e:15:4d:01:26:1f:1e:5b:9c:07: a0:45:af:7e:7d:73:d2:4f:b8:ea:64:09:10:57:56:f3:bc:c6: 42:2a:07:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUAiNh2ZMI8ZWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTg4NGMzMWMtNWVjNC00YjBlLWJhNzAtYmRhOGM5MjM4ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0jruc4jDxxu3RWmg3sGNMTy+1mHdFcMKfL Sknk1q96H66NU+/cNZN/peEwn/XNHpi29PjO4vTNRU3bgqmGcU8xkJ6hwXrWrgke J1MXGHq08Z4afnxsVDYLANI3pSMzovs2L7aLHcBlETtT6HE2TGVUil3rKqCCtevK ePdHHY0LWPy9fHPMBYq0VlK+nrrZXZmT2EPP9uu+F0fV93dA7mUrrPElx0QXXNcX I/1U6sIhHWbRU4Eu6y3CjLCeqnVJM+iKpzM/GqP8h8JCHUR4YIiYBZ+3C2EoXXuI DkAYgDHN+J6a0mLr+EhZ+ST1W0OCHRIjdcICR6ZQIxBGcHOw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwC+gh8YX4Ksj3fAvPRj/Gk3vhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjk0OTRkOGUtOTZmMy0z MDk3LTlhYjMtZjVmMDFmOGI0Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz1MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/q7vID8BcC3Mw45+xppMIwCngOmew8BEEDHa/pf5TLDBqwexAyMNWn /4PuD8vQkZ3ZYaWuxrKBfEWIo8CRc3Oep1Ij7sYbmCepdyjSLhreNaDMmPp+RbDo JhJ4ONRN2GBjYdJJBdHxOeXIe7FFBEzmCXTpPgUMVrLfV7MOi8fDQfmBIEHkXL0m juN/5fXVOPmCUGIkUf7My1w7XLtYtmrGCJlXGWaiPorvoslJvX9kywKE+FXWxUHr TCEfBTNJUXgzTQ5jLE5YS8xlKg8zTMBtByBSrO/8BmxB88seEIqpThVNASYfHluc B6BFr359c9JPuOpkCRBXVvO8xkIqB2U= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:46 2025 by rpki-client