$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/940fad0d-da37-370a-9174-48ca36654663.roa File: 940fad0d-da37-370a-9174-48ca36654663.roa (raw, json) Hash identifier: rniyir3mHi/myuEmsEvqUP7KxSVMOE5p/pQqYQ9s66Q= Subject key identifier: 6A:64:0B:93:0D:81:C0:11:47:1F:A2:1E:97:4D:BB:8F:27:55:AB:67 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849B149F5DEDA94F97398409700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/940fad0d-da37-370a-9174-48ca36654663.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 31775 IP address blocks: 8.47.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f5:de:da:94:f9:73:98:40:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a9d5af7c-126c-4cd1-8347-502a3e2d6cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:02:96:67:82:16:3a:a2:12:0f:2a:6f:aa: 29:d2:76:74:e1:e3:84:6a:1f:97:c3:ed:1f:cf:6f: 5c:d6:4e:7e:89:14:4d:4e:36:0d:ec:41:0d:5c:97: b3:0e:e8:77:6d:ac:f4:4e:eb:1f:bd:be:9f:86:39: 91:5e:be:45:e3:c0:1e:8c:4a:40:83:33:4e:d3:6e: d9:ae:2a:f5:15:f1:e8:68:cf:17:40:9c:db:5b:04: 21:41:e3:1e:d7:56:13:ec:e7:8a:1a:59:f2:a2:e7: 1b:85:00:52:10:0e:7d:b6:26:1c:b7:e6:c3:d5:97: 08:38:26:6b:84:2d:7a:5f:14:41:8e:5e:d2:b8:ab: 6c:79:c1:01:97:52:bd:80:f1:c7:4d:1f:16:31:40: b6:5b:14:03:0e:72:a2:40:ef:c9:6e:8e:f1:e0:01: 42:54:49:15:79:cb:a2:26:af:47:5e:62:bc:f5:6d: 08:53:73:94:cb:b2:13:ae:e0:04:38:13:95:fc:a2: 25:0b:dd:b4:b0:96:38:ed:f1:d3:ae:e0:8f:81:9e: 42:a0:a8:51:c4:9c:80:69:14:eb:db:eb:28:cc:a7: 10:f9:66:0f:70:2d:c2:4b:3e:7a:ac:de:bc:e6:d6: 17:0d:48:c4:24:dd:7b:c5:69:3d:b5:d1:7c:0c:b7: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:0B:93:0D:81:C0:11:47:1F:A2:1E:97:4D:BB:8F:27:55:AB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/940fad0d-da37-370a-9174-48ca36654663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.47.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e3:ff:99:58:21:46:f3:8e:60:7e:ca:7f:12:3a:71:2b:b3: 74:1c:6d:26:06:6b:b9:e9:30:1f:f1:c1:de:e3:74:52:35:ac: 39:9e:4f:86:60:b8:98:3c:2b:fd:74:17:e2:fc:73:32:37:c6: a4:87:71:3c:dd:0a:36:35:db:cb:4a:86:40:24:21:c9:d0:95: f8:7d:a3:d8:c1:77:a4:be:7f:f2:5c:58:76:93:95:ac:69:32: b1:9b:c6:61:8e:2f:b1:5e:f0:9c:d4:ec:de:1b:b6:da:09:2c: f4:70:7d:88:1c:38:a4:f4:5e:96:45:61:f1:ce:50:a3:28:50: 01:a9:de:fe:fd:ad:94:54:67:1f:21:d9:b8:ec:eb:a2:ce:dd: 67:a1:5b:c1:46:9a:4d:d9:ff:1c:86:6e:69:40:93:b1:cc:30: a0:51:93:a6:4f:23:3d:7e:b8:49:a6:f9:e3:21:24:be:b3:9a: ad:c3:33:f9:41:4a:3b:17:92:62:be:d6:ef:00:f7:54:6b:a0: 62:c8:73:1f:23:ee:53:66:c0:ae:93:eb:3a:45:95:48:4c:18: 05:0a:97:a3:78:99:0c:d5:68:3d:d1:98:b9:02:c8:0d:23:e0: c3:8f:54:82:ff:f4:e2:71:b1:d1:8f:41:64:5f:7d:d5:9f:06: 32:8d:64:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfXe2pT5c5hAlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTlkNWFmN2MtMTI2Yy00Y2QxLTgzNDctNTAyYTNlMmQ2Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvoClmeCFjqiEg8qb6op0nZ04eOEah+Xw+0f z29c1k5+iRRNTjYN7EENXJezDuh3baz0Tusfvb6fhjmRXr5F48AejEpAgzNO027Z rir1FfHoaM8XQJzbWwQhQeMe11YT7OeKGlnyoucbhQBSEA59tiYct+bD1ZcIOCZr hC16XxRBjl7SuKtsecEBl1K9gPHHTR8WMUC2WxQDDnKiQO/Jbo7x4AFCVEkVecui Jq9HXmK89W0IU3OUy7ITruAEOBOV/KIlC920sJY47fHTruCPgZ5CoKhRxJyAaRTr 2+sozKcQ+WYPcC3CSz56rN685tYXDUjEJN17xWk9tdF8DLe5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpkC5MNgcARRx+iHpdNu48nVatnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTQwZmFkMGQtZGEzNy0z NzBhLTkxNzQtNDhjYTM2NjU0NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCC9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHj/5lYIUbzjmB+yn8SOnErs3QcbSYGa7npMB/xwd7jdFI1rDmeT4Zg uJg8K/10F+L8czI3xqSHcTzdCjY128tKhkAkIcnQlfh9o9jBd6S+f/JcWHaTlaxp MrGbxmGOL7Fe8JzU7N4bttoJLPRwfYgcOKT0XpZFYfHOUKMoUAGp3v79rZRUZx8h 2bjs66LO3WehW8FGmk3Z/xyGbmlAk7HMMKBRk6ZPIz1+uEmm+eMhJL6zmq3DM/lB SjsXkmK+1u8A91RroGLIcx8j7lNmwK6T6zpFlUhMGAUKl6N4mQzVaD3RmLkCyA0j 4MOPVIL/9OJxsdGPQWRffdWfBjKNZLE= -----END CERTIFICATE-----Generated at Thu May 1 11:39:11 2025 by rpki-client