$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa File: a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa (raw, json) Hash identifier: n5xil6GjnB4EXmbtBX9gRdYPVm30HaRD90Jyk+obecI= Subject key identifier: D9:BB:C8:59:A6:EA:A5:18:E0:39:60:6D:70:CF:6D:DE:23:10:34:8A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849F715125F951342F55111FC00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 20473 IP address blocks: 8.9.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:12:5f:95:13:42:f5:51:11:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=c4a7b4b3-d9f7-4b1e-945a-a91a00253d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ac:ea:7a:14:fe:8a:50:98:69:34:51:b2:f3: ce:1b:f7:bd:98:c9:51:6a:78:d8:20:c0:9d:26:7b: 67:cc:19:22:e1:80:e3:eb:87:1e:e2:3d:5e:cf:6e: 44:74:a6:2c:0e:69:7b:51:a3:bf:18:63:d9:cf:0f: f3:92:41:45:9d:14:f5:24:71:e5:f0:95:5b:61:40: 6c:0d:e7:05:1c:64:1d:2e:d9:dd:3c:6d:85:74:91: d1:5e:3a:5c:4a:ed:93:18:e1:2d:ca:2f:24:20:e3: d1:5f:b6:bc:69:27:21:3f:15:1e:14:ee:72:1f:d9: 59:b7:6b:55:89:d2:6b:ef:88:9d:ac:55:48:3a:10: 0c:8b:9a:6b:55:cb:35:99:9a:4c:7f:ab:ca:cd:3c: 84:0f:d7:14:f0:68:00:32:d4:b2:33:7a:d3:98:e9: 86:fa:06:21:f5:28:4e:6a:f3:34:17:55:d1:56:a7: 64:6e:fd:8a:1c:3c:1d:90:4b:87:56:d5:ae:23:ea: da:53:97:42:49:ad:0c:88:4a:e3:43:8e:4d:14:66: a4:bc:90:67:4f:68:46:95:93:32:39:91:d7:6b:fe: 82:a8:05:16:e9:e1:22:ba:c8:b1:f1:16:ce:30:22: b2:ab:be:23:c7:8b:ce:bd:13:68:ed:a5:6e:3c:20: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:C8:59:A6:EA:A5:18:E0:39:60:6D:70:CF:6D:DE:23:10:34:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:cc:a9:5a:13:0b:3d:19:ce:a1:e8:62:78:a7:4f:6c:6e:11: 7e:5f:26:63:cf:ce:c9:5a:4e:b7:e4:e2:94:50:1d:1c:61:c6: 27:32:f7:ef:ec:a2:84:74:98:37:3d:11:1a:92:40:34:ca:11: 17:57:c0:d2:e0:5e:51:12:ee:ff:0e:4b:2c:96:ed:f9:08:c7: 85:60:a5:8c:09:37:39:e1:2c:55:9b:36:1b:8e:0c:3f:ed:d6: e8:e6:9b:3e:22:b2:30:1e:c0:91:73:58:94:da:eb:d4:40:79: 7b:1f:59:e8:9c:66:87:61:38:e7:08:cd:bd:94:ee:56:24:aa: 09:36:ae:92:b6:19:ff:95:26:30:b7:13:bd:bb:57:c2:70:2f: b8:7d:47:a3:bb:e6:7a:ac:a9:24:7b:b1:10:c6:d1:f4:fb:f9: b1:de:ff:b7:03:df:f2:c6:b9:88:64:ea:e1:86:96:df:61:d9: 19:97:96:6c:9c:c2:2f:20:77:06:13:04:c3:86:87:9d:a4:be: 52:c0:a4:9b:ee:ad:f3:1e:40:50:ee:05:8e:26:e9:46:a8:45: 4b:5f:5a:f6:57:51:c7:ca:23:a3:21:e7:0b:7a:9f:fc:e7:e7: 65:77:eb:2c:9a:26:af:aa:e9:f6:03:ea:9f:2e:2e:ad:d7:a6: a7:01:7d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRJflRNC9VER/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YzRhN2I0YjMtZDlmNy00YjFlLTk0NWEtYTkxYTAwMjUzZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qzqehT+ilCYaTRRsvPOG/e9mMlRanjYIMCd JntnzBki4YDj64ce4j1ez25EdKYsDml7UaO/GGPZzw/zkkFFnRT1JHHl8JVbYUBs DecFHGQdLtndPG2FdJHRXjpcSu2TGOEtyi8kIOPRX7a8aSchPxUeFO5yH9lZt2tV idJr74idrFVIOhAMi5prVcs1mZpMf6vKzTyED9cU8GgAMtSyM3rTmOmG+gYh9ShO avM0F1XRVqdkbv2KHDwdkEuHVtWuI+raU5dCSa0MiErjQ45NFGakvJBnT2hGlZMy OZHXa/6CqAUW6eEiusix8RbOMCKyq74jx4vOvRNo7aVuPCAmrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm7yFmm6qUY4DlgbXDPbd4jEDSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTBlYzE4OGQtYmI2Ny0z ZDdjLWJiZmYtZWRhNWM0NjY5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXMqVoTCz0ZzqHoYninT2xuEX5fJmPPzslaTrfk4pRQHRxhxicy9+/s ooR0mDc9ERqSQDTKERdXwNLgXlES7v8OSyyW7fkIx4VgpYwJNznhLFWbNhuODD/t 1ujmmz4isjAewJFzWJTa69RAeXsfWeicZodhOOcIzb2U7lYkqgk2rpK2Gf+VJjC3 E727V8JwL7h9R6O75nqsqSR7sRDG0fT7+bHe/7cD3/LGuYhk6uGGlt9h2RmXlmyc wi8gdwYTBMOGh52kvlLApJvurfMeQFDuBY4m6UaoRUtfWvZXUcfKI6Mh5wt6n/zn 52V36yyaJq+q6fYD6p8uLq3XpqcBfdo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:21:23 2025 by rpki-client