$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json) Hash identifier: p9md1bff3H/Fe/JfcvgInRboJ3yb+eKredGC9XVyXLY= Subject key identifier: 45:F0:EA:D6:0A:7E:24:5E:71:FD:BD:C5:DC:CF:FB:44:C6:DD:CF:0A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC299C27C93EA8A0864880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.9.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:29:9c:27:c9:3e:a8:a0:86:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=8b17c1d2-bf82-435f-8c8b-1263803d9fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:bd:53:8d:63:40:76:7f:09:ec:2c:69:cc: 5f:24:01:0f:af:1a:07:ce:15:90:c7:73:a6:84:70: f4:52:57:b7:17:63:f8:d6:52:0e:63:ab:f8:5a:be: cc:4c:f3:ac:26:53:8c:b5:25:29:1c:81:78:fd:5a: e4:dd:32:bb:31:4e:02:95:19:55:c2:18:65:b4:24: f8:90:fe:ef:e2:a8:c3:6c:61:73:87:ce:26:6a:88: d3:21:2e:d8:d5:b6:e3:c6:7e:02:8e:30:2a:2e:32: 76:af:5e:3b:63:dc:d3:ae:07:b1:15:ee:86:72:72: 63:e6:84:a2:28:d8:f7:e0:13:ae:51:83:73:bd:af: a1:04:83:67:29:b9:9e:a8:5c:cf:48:40:e2:82:7f: fd:25:a1:cf:c8:f7:06:b9:69:52:28:a7:97:90:c0: cb:d1:e1:c1:83:c8:9d:e6:42:ef:9c:b5:e1:8b:2c: 31:59:a8:02:4e:b6:c6:68:c3:c1:cf:0b:bf:ac:52: eb:0f:df:ce:6e:b8:ec:63:87:73:6e:56:74:f1:d3: a3:8a:21:a4:fb:77:dd:66:1a:21:1c:18:72:f7:ff: 94:4c:a9:ed:05:c6:db:b6:6b:0d:36:00:a3:b5:33: 03:e5:90:09:0e:71:27:b5:af:1e:10:98:56:d9:28: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F0:EA:D6:0A:7E:24:5E:71:FD:BD:C5:DC:CF:FB:44:C6:DD:CF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ad:45:b1:27:aa:d9:36:9d:68:d6:cf:b5:dd:65:a9:75:73: 67:fb:7b:ef:7e:e0:2a:3e:d2:18:c5:84:01:06:dd:b5:e7:50: 94:09:96:04:e9:1d:3c:d1:db:93:c3:18:9f:69:66:fd:b6:94: 7d:eb:87:e8:ed:e3:c3:fb:c3:c4:27:5e:dc:ad:7b:08:ac:db: f5:1c:40:ff:38:fc:ea:39:cd:a9:6d:db:ff:98:4e:03:0c:49: fb:0d:bb:76:ab:3a:90:ee:7d:41:42:02:23:56:2e:8b:32:75: 01:fd:50:77:c9:17:a4:65:86:7c:10:04:97:54:dc:e2:92:a2: e8:64:be:25:8e:e1:00:b3:93:3a:1b:dc:c7:b6:67:6b:9c:f5: 12:76:64:db:a8:5a:9e:d7:1d:cb:06:1e:16:f7:b5:86:37:83: a8:21:cb:a7:b3:6b:36:75:44:4d:98:cc:84:c8:4b:24:96:3e: c2:9b:02:19:3c:c1:26:05:3f:e3:01:09:ea:06:56:7d:89:19: 66:28:88:df:30:98:b6:0d:94:62:21:30:30:ff:b7:eb:38:61: be:3c:36:30:e9:36:4b:c1:69:35:ab:03:3e:0f:d3:96:14:3b: b8:61:14:bf:15:ba:2f:10:fa:05:be:25:3a:8e:0a:df:aa:7f: 2b:53:96:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CmcJ8k+qKCGSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OGIxN2MxZDItYmY4Mi00MzVmLThjOGItMTI2MzgwM2Q5ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7i9U41jQHZ/CewsacxfJAEPrxoHzhWQx3Om hHD0Ule3F2P41lIOY6v4Wr7MTPOsJlOMtSUpHIF4/Vrk3TK7MU4ClRlVwhhltCT4 kP7v4qjDbGFzh84maojTIS7Y1bbjxn4CjjAqLjJ2r147Y9zTrgexFe6GcnJj5oSi KNj34BOuUYNzva+hBINnKbmeqFzPSEDign/9JaHPyPcGuWlSKKeXkMDL0eHBg8id 5kLvnLXhiywxWagCTrbGaMPBzwu/rFLrD9/ObrjsY4dzblZ08dOjiiGk+3fdZhoh HBhy9/+UTKntBcbbtmsNNgCjtTMD5ZAJDnEnta8eEJhW2Sii4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXw6tYKfiRecf29xdzP+0TG3c8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ2NTg3OTQtNTZkNy0z YjM4LTgzNzMtODAzYjk0MTRhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACtRbEnqtk2nWjWz7XdZal1c2f7e+9+4Co+0hjFhAEG3bXnUJQJlgTp HTzR25PDGJ9pZv22lH3rh+jt48P7w8QnXtytewis2/UcQP84/Oo5zalt2/+YTgMM SfsNu3arOpDufUFCAiNWLosydQH9UHfJF6RlhnwQBJdU3OKSouhkviWO4QCzkzob 3Me2Z2uc9RJ2ZNuoWp7XHcsGHhb3tYY3g6ghy6ezazZ1RE2YzITISySWPsKbAhk8 wSYFP+MBCeoGVn2JGWYoiN8wmLYNlGIhMDD/t+s4Yb48NjDpNkvBaTWrAz4P05YU O7hhFL8Vui8Q+gW+JTqOCt+qfytTlos= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:30 2025 by rpki-client