$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa File: bcda651f-6a0b-32f4-8858-9ce12ed25332.roa (raw, json) Hash identifier: Me8hIh4hrTjBSYz1dVMSYeZQzwqIbk6gnDOXtzWrCWc= Subject key identifier: 2B:C9:2A:37:20:E2:9E:A0:AA:7A:3D:AD:CD:23:2D:B0:8D:E8:83:A7 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC29CBD8E95E30F90CF8A0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 8.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:29:cb:d8:e9:5e:30:f9:0c:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=634081d5-ac94-4ab8-b721-f37296a82c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:cf:e5:23:01:c2:36:75:df:9d:fa:bd:30: 14:b2:bf:6b:36:aa:51:3d:35:ff:48:15:e4:0b:7b: 81:68:16:13:a5:53:5f:e6:e5:9a:60:75:2f:e1:83: c8:77:65:a0:b1:d3:2a:77:d2:5f:02:93:bd:84:ac: 14:79:65:c3:7d:e8:e3:1a:f2:31:77:cd:a7:70:4b: 8c:f6:0f:ed:2d:22:c3:79:2a:e7:d7:42:6a:a4:34: ee:cd:5e:e8:b7:20:c0:19:30:5c:fc:70:f8:ef:24: f7:37:2d:60:86:83:5e:fd:ef:b8:86:cf:56:b4:aa: ce:0e:90:48:7c:69:2b:91:d1:fc:72:7e:fb:ab:e6: 3b:3d:b0:93:c1:3e:7b:3c:81:de:92:1a:eb:4d:2c: 29:7b:69:d7:33:ea:78:c6:a4:0d:13:4c:ca:e0:fc: eb:d1:7d:7d:c6:f5:92:16:7f:26:77:ec:d0:45:54: d5:18:a8:56:92:12:c2:88:7b:9d:32:62:2e:09:7e: 54:dc:0d:6e:6a:be:61:be:3c:0e:2f:10:a0:3c:49: 61:af:f7:d0:68:3e:76:be:b7:ea:ad:66:b6:98:67: d5:ab:ea:1c:8d:4d:bf:b2:4c:63:15:1d:67:a9:e8: 1f:01:27:3f:a6:18:27:94:d2:61:23:5f:f0:68:d4: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:2A:37:20:E2:9E:A0:AA:7A:3D:AD:CD:23:2D:B0:8D:E8:83:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:7b:5d:cb:e0:0e:f8:b3:64:1f:b8:df:10:e1:3c:be:77:ee: 08:ac:3c:71:fa:04:f5:99:32:e8:35:48:d3:bb:0c:d3:46:aa: ac:f2:34:02:9e:af:aa:75:85:54:75:de:d1:5f:69:bb:09:fe: 76:88:c1:37:d9:8d:e8:b0:2a:67:f1:68:90:90:aa:fa:a0:a4: c8:61:d4:d4:f1:d9:50:74:ed:f9:5a:44:59:50:3e:cd:85:d4: e9:1d:01:7d:f7:34:e7:31:01:36:f4:f6:ba:b1:eb:68:3c:94: 29:62:dd:52:d6:20:a4:f6:ca:17:4a:99:70:72:2a:05:69:af: d8:68:bd:a0:bb:34:d0:b6:5c:fa:21:06:3e:27:19:da:16:0d: 8f:c1:ea:11:cd:52:d7:b2:d7:dd:54:69:c6:58:97:f3:11:fd: f5:77:5f:86:52:2e:b9:20:38:5e:af:76:d8:f0:3c:5f:3a:68: 4d:f1:9e:16:c1:f5:4a:3a:0e:f4:4c:b8:9a:a9:43:15:ee:80: 3a:2b:75:74:98:6e:f6:05:0b:ee:68:4f:bf:0f:1c:b8:c8:cf: f5:9c:83:94:85:5c:06:33:f7:44:66:ed:d7:e9:df:3c:78:53: 5a:ef:b0:f4:a4:bf:51:5c:6f:3a:e1:f2:16:f5:50:d4:94:d6: 12:3e:4d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CnL2OleMPkM+KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NjM0MDgxZDUtYWM5NC00YWI4LWI3MjEtZjM3Mjk2YTgyYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxfP5SMBwjZ13536vTAUsr9rNqpRPTX/SBXk C3uBaBYTpVNf5uWaYHUv4YPId2WgsdMqd9JfApO9hKwUeWXDfejjGvIxd82ncEuM 9g/tLSLDeSrn10JqpDTuzV7otyDAGTBc/HD47yT3Ny1ghoNe/e+4hs9WtKrODpBI fGkrkdH8cn77q+Y7PbCTwT57PIHekhrrTSwpe2nXM+p4xqQNE0zK4Pzr0X19xvWS Fn8md+zQRVTVGKhWkhLCiHudMmIuCX5U3A1uar5hvjwOLxCgPElhr/fQaD52vrfq rWa2mGfVq+ocjU2/skxjFR1nqegfASc/phgnlNJhI1/waNSW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvJKjcg4p6gqno9rc0jLbCN6IOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmNkYTY1MWYtNmEwYi0z MmY0LTg4NTgtOWNlMTJlZDI1MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI97XcvgDvizZB+43xDhPL537gisPHH6BPWZMug1SNO7DNNGqqzyNAKe r6p1hVR13tFfabsJ/naIwTfZjeiwKmfxaJCQqvqgpMhh1NTx2VB07flaRFlQPs2F 1OkdAX33NOcxATb09rqx62g8lCli3VLWIKT2yhdKmXByKgVpr9hovaC7NNC2XPoh Bj4nGdoWDY/B6hHNUtey191UacZYl/MR/fV3X4ZSLrkgOF6vdtjwPF86aE3xnhbB 9Uo6DvRMuJqpQxXugDordXSYbvYFC+5oT78PHLjIz/Wcg5SFXAYz90Rm7dfp3zx4 U1rvsPSkv1Fcbzrh8hb1UNSU1hI+TYc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:21 2025 by rpki-client