$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa File: c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa (raw, json) Hash identifier: ilHtgpoMY/QKsg2iOhJOYIcX+C8IGb7ppNU82qcfm/Y= Subject key identifier: 30:24:F7:3A:C8:B2:28:2C:F6:23:0D:9E:6F:5C:77:7E:1C:7B:30:7B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858492CB208E637ACE9B90B4EA600 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 1340 IP address blocks: 8.12.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:08:e6:37:ac:e9:b9:0b:4e:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=27bc8eaf-a3c9-4c61-8a56-0b8ddd8861cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3c:a5:c2:2a:cd:41:16:e1:a9:4e:92:ac:87: 36:c2:41:4c:2b:b5:7f:f8:8e:ef:a4:c5:e4:1d:66: 90:63:08:b6:1d:68:b1:40:3c:bf:04:98:62:a4:30: 06:f3:e7:d8:bc:0a:15:8b:8c:00:a8:4e:e8:e2:5f: 81:73:98:8e:89:81:bf:4c:8a:dc:d8:4e:46:2f:0b: 1e:61:62:3c:fc:7d:06:29:88:ac:f5:54:2e:1d:67: eb:be:8a:ee:34:da:ed:0e:8b:2f:76:57:8d:4f:e2: b3:fe:19:4c:1b:4d:51:99:92:5b:23:9c:dc:7a:e7: c4:22:77:06:4b:81:f9:9b:06:7c:c0:8b:05:76:e6: 14:8f:5d:35:3c:b7:f2:74:80:37:af:41:c9:96:b7: a2:a6:77:02:49:08:8f:b5:d1:11:ad:73:51:a7:0a: 74:a2:35:7c:56:68:2c:0a:50:da:88:bd:91:a9:30: c7:ae:d4:1d:e2:91:4f:21:68:17:29:56:7a:b1:42: 81:4e:0d:d8:c0:3d:7b:c2:65:c9:84:fc:fa:28:31: f3:59:66:a8:71:9b:cd:55:49:7d:32:fa:43:da:c7: dd:8b:86:7c:a5:43:d0:8c:04:c6:bf:dd:4e:91:20: 7a:e9:08:8c:db:d7:8f:44:96:09:7c:e5:b2:ed:94: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:24:F7:3A:C8:B2:28:2C:F6:23:0D:9E:6F:5C:77:7E:1C:7B:30:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.12.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ff:73:10:a6:d3:62:af:04:bf:8a:c1:45:7f:2c:e8:68:b2: cf:9d:56:a2:79:f5:78:b3:20:f6:62:5d:43:63:b8:e3:97:cc: 47:8f:b3:cf:56:42:e1:5b:47:70:c4:14:45:10:4d:78:a5:2e: 1b:36:c6:c4:bb:e7:63:27:95:1f:c4:12:fc:52:56:30:62:d5: 62:19:7d:a7:c6:2e:d4:d0:4e:07:ba:7e:b1:48:80:38:a3:dc: 47:48:73:b4:01:93:ec:6f:49:de:66:d4:9c:f2:ff:58:3a:51: 14:93:33:01:21:b1:39:8b:5b:13:8b:20:c9:9b:1c:ee:37:8a: 49:ab:40:65:1e:b3:e2:6e:0c:7f:75:4c:2e:91:d4:b8:c0:2d: c9:a0:f0:b3:59:60:eb:42:f2:ee:57:27:aa:d5:82:69:ab:34: 61:5e:94:9d:72:14:ab:ba:33:bb:92:54:75:61:67:d6:c1:77: b7:2f:f8:33:3a:13:51:1d:a6:c9:3a:b7:9b:83:d8:9f:f1:e6: fc:b5:89:c0:b0:e1:47:5c:17:d3:17:52:10:ef:e7:08:04:87: 49:d9:d9:0f:ec:68:c7:4a:cd:fd:45:a0:68:47:82:2e:96:88: a9:43:56:25:2e:3c:de:ca:d5:b1:c9:34:a9:02:65:9e:43:48: ab:a8:66:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssgjmN6zpuQtOpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjdiYzhlYWYtYTNjOS00YzYxLThhNTYtMGI4ZGRkODg2MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTylwirNQRbhqU6SrIc2wkFMK7V/+I7vpMXk HWaQYwi2HWixQDy/BJhipDAG8+fYvAoVi4wAqE7o4l+Bc5iOiYG/TIrc2E5GLwse YWI8/H0GKYis9VQuHWfrvoruNNrtDosvdleNT+Kz/hlMG01RmZJbI5zceufEIncG S4H5mwZ8wIsFduYUj101PLfydIA3r0HJlreipncCSQiPtdERrXNRpwp0ojV8Vmgs ClDaiL2RqTDHrtQd4pFPIWgXKVZ6sUKBTg3YwD17wmXJhPz6KDHzWWaocZvNVUl9 MvpD2sfdi4Z8pUPQjATGv91OkSB66QiM29ePRJYJfOWy7ZTPowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAk9zrIsigs9iMNnm9cd34cezB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzcwMTEzZTQtNWQ2Yi0z N2YxLWJiN2ItOGE0NDdmNDU0ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAxPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL/cxCm02KvBL+KwUV/LOhoss+dVqJ59XizIPZiXUNjuOOXzEePs89W QuFbR3DEFEUQTXilLhs2xsS752MnlR/EEvxSVjBi1WIZfafGLtTQTge6frFIgDij 3EdIc7QBk+xvSd5m1Jzy/1g6URSTMwEhsTmLWxOLIMmbHO43ikmrQGUes+JuDH91 TC6R1LjALcmg8LNZYOtC8u5XJ6rVgmmrNGFelJ1yFKu6M7uSVHVhZ9bBd7cv+DM6 E1Edpsk6t5uD2J/x5vy1icCw4UdcF9MXUhDv5wgEh0nZ2Q/saMdKzf1FoGhHgi6W iKlDViUuPN7K1bHJNKkCZZ5DSKuoZsQ= -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:33 2025 by rpki-client