$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa File: 87c708cc-aab6-358e-a4e7-4226a4708aa3.roa (raw, json) Hash identifier: cn7WrNfvtT9QZFg7a0sBdkOP1aZPgiNx8W5PYZhvB4E= Subject key identifier: 59:64:0C:CB:2B:DC:7E:55:74:58:67:B2:30:60:F4:F5:ED:DA:4D:16 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858496FAF167434949C9E098CEF80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 13315 IP address blocks: 199.94.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:16:74:34:94:9c:9e:09:8c:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=82d6855e-306c-4d1a-8274-91e95c37c930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:66:d1:b2:80:88:18:38:00:78:fd:9b:fb: d1:09:07:49:15:c1:08:c8:61:8e:70:a7:5a:ff:6e: 4e:ba:66:9a:4b:e8:75:6a:62:34:b9:06:20:72:ba: 02:14:35:b8:bd:e7:29:10:4c:f2:b7:70:0f:3f:69: 0a:58:cf:b0:ec:72:42:f4:ec:52:82:a8:c8:60:a8: 82:92:ac:eb:4c:23:10:10:20:67:ac:b2:80:17:e9: 8c:f0:c4:1c:32:52:18:0e:3d:84:24:bb:13:16:5a: 8f:9e:88:fa:4a:a3:19:f5:8a:46:fa:67:5d:67:dd: 35:0c:1f:58:69:61:c6:e8:7b:8c:d3:89:8d:63:16: 53:74:ab:03:49:bb:c0:70:f2:82:70:ed:03:f8:e9: d2:ce:ba:de:38:2d:ab:a2:b0:1a:ef:64:1a:dc:52: 1f:60:85:52:d3:41:f0:dd:9b:d9:8e:e5:52:e5:b6: 86:6e:e9:3a:97:ac:2c:e8:af:4c:a7:0e:83:48:71: 2f:ce:96:66:44:db:7a:55:d5:fc:83:39:03:a8:2f: 3a:fd:c0:f0:a6:62:4f:9b:3b:80:93:e7:d2:08:61: 11:28:bb:a1:60:59:3e:db:11:3f:53:49:e1:67:37: fc:7e:ca:5d:32:b8:a8:12:d0:3e:b7:a9:06:c5:ff: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:0C:CB:2B:DC:7E:55:74:58:67:B2:30:60:F4:F5:ED:DA:4D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.94.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e8:55:88:d9:c9:4f:87:ef:c4:7b:49:71:13:cc:4a:85:34: 58:54:52:71:a5:3d:2a:cd:67:71:c3:99:77:6d:3d:09:5f:98: 9d:00:d3:2c:f2:c1:aa:4e:88:5d:95:e0:28:a8:a2:2a:07:58: 2f:64:0b:e1:ec:76:94:3b:85:d6:c5:15:f8:76:60:67:4a:fa: 55:26:69:2b:e1:83:55:ba:85:f3:c6:91:3b:7c:c6:23:72:99: 48:3e:a5:23:c8:56:8e:98:5b:e0:a5:e5:85:3a:17:22:43:d9: f6:70:64:c5:2e:ff:b2:ab:d5:34:36:26:b3:1d:fd:39:ee:c3: d2:d4:23:af:eb:8d:e3:43:7d:73:42:d0:02:e4:bb:06:50:8a: b0:bf:e2:55:c7:20:a2:00:0c:51:84:04:29:f7:53:56:9b:8e: 6b:dc:3e:ef:c1:77:b0:1e:c2:bc:05:0f:d7:58:75:7c:56:51: 80:5f:3d:af:b6:b1:dd:a1:08:b0:c2:8c:2a:cf:c4:f9:38:24: a9:40:9e:86:e6:98:cc:40:5f:ad:b0:5d:d8:94:3c:67:b0:bf: 65:1c:dd:28:a2:17:dd:c1:93:80:19:6b:e7:9c:f5:7a:e7:20: 3e:3d:e9:e8:59:3a:8b:41:c6:d9:3d:55:29:cd:db:f9:64:fa: b0:3e:df:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxZ0NJScngmM74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ODJkNjg1NWUtMzA2Yy00ZDFhLTgyNzQtOTFlOTVjMzdjOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vBm0bKAiBg4AHj9m/vRCQdJFcEIyGGOcKda /25OumaaS+h1amI0uQYgcroCFDW4vecpEEzyt3APP2kKWM+w7HJC9OxSgqjIYKiC kqzrTCMQECBnrLKAF+mM8MQcMlIYDj2EJLsTFlqPnoj6SqMZ9YpG+mddZ901DB9Y aWHG6HuM04mNYxZTdKsDSbvAcPKCcO0D+OnSzrreOC2rorAa72Qa3FIfYIVS00Hw 3ZvZjuVS5baGbuk6l6ws6K9Mpw6DSHEvzpZmRNt6VdX8gzkDqC86/cDwpmJPmzuA k+fSCGERKLuhYFk+2xE/U0nhZzf8fspdMrioEtA+t6kGxf8CqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlkDMsr3H5VdFhnsjBg9PXt2k0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdjNzA4Y2MtYWFiNi0z NThlLWE0ZTctNDIyNmE0NzA4YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx14gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPoVYjZyU+H78R7SXETzEqFNFhUUnGlPSrNZ3HDmXdtPQlfmJ0A0yzy wapOiF2V4CiooioHWC9kC+HsdpQ7hdbFFfh2YGdK+lUmaSvhg1W6hfPGkTt8xiNy mUg+pSPIVo6YW+Cl5YU6FyJD2fZwZMUu/7Kr1TQ2JrMd/Tnuw9LUI6/rjeNDfXNC 0ALkuwZQirC/4lXHIKIADFGEBCn3U1abjmvcPu/Bd7AewrwFD9dYdXxWUYBfPa+2 sd2hCLDCjCrPxPk4JKlAnobmmMxAX62wXdiUPGewv2Uc3SiiF93Bk4AZa+ec9Xrn ID496ehZOotBxtk9VSnN2/lk+rA+314= -----END CERTIFICATE-----Generated at Sun Apr 27 16:54:02 2025 by rpki-client