$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa File: ce5601fe-e061-3205-80ed-165a3269ddb3.roa (raw, json) Hash identifier: 1JJ8SXqs6wlAQxMbwctrSfG/R56QlcDgjOiF80zblrg= Subject key identifier: 81:FD:59:65:CA:FD:FC:56:88:D8:10:18:A7:37:D0:A4:EE:99:5F:47 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858495EEEE3994E7794267B12AD00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 989 IP address blocks: 8.8.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e3:99:4e:77:94:26:7b:12:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=bee3fed1-1a34-4993-90c5-160e5a6ecebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:bb:bc:b0:4e:66:fb:4b:b6:cc:d1:9a:25: 48:84:fe:3b:97:bd:13:e6:ab:85:e7:18:9e:38:d8: eb:2f:44:d7:b6:ee:fb:75:9b:5c:40:ca:78:7f:32: d1:36:8b:66:82:a5:23:ce:52:0c:0a:6c:17:2b:39: 6c:71:db:36:d8:e4:4c:96:50:5b:5f:96:44:30:47: 12:28:40:2d:bc:03:6c:a0:81:0c:99:85:99:23:16: e3:09:06:f3:e5:5b:d1:21:5d:61:1d:14:e1:17:f1: 02:36:1f:b7:87:9c:0c:c3:b2:66:89:d1:76:5e:57: 4a:bd:c2:1b:26:14:95:1c:28:1f:ee:8b:2b:16:c8: 4b:7b:ea:ca:da:32:52:17:92:1f:00:f3:75:1d:aa: 4f:14:87:0b:d2:9a:29:2e:14:0a:da:4f:35:5d:95: 1a:7f:13:f0:60:4c:d2:d1:80:54:e0:f8:ea:d2:2e: 16:b6:b7:e8:80:c0:1a:75:e3:08:21:26:46:66:f4: 1c:e3:2b:32:0d:68:4c:b9:e6:47:c7:03:e5:ca:e9: 4d:9e:b7:01:36:3d:3f:e7:b9:5a:93:c5:5c:43:b3: 2d:ae:49:0e:c1:d3:6e:0f:e2:83:40:1f:85:4f:d4: 62:1c:70:c7:48:5b:bd:82:f8:5b:b4:47:68:b8:23: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FD:59:65:CA:FD:FC:56:88:D8:10:18:A7:37:D0:A4:EE:99:5F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ba:19:6f:96:40:e5:62:2d:3e:d7:a5:a6:a1:fd:82:df:4c: 0f:82:55:b5:48:71:69:54:2c:2d:ea:f9:b8:bb:13:67:1a:70: 9b:7c:c7:37:cc:f1:2f:0c:2f:5b:f9:a7:8d:7f:3a:e0:43:a7: 86:95:fa:f2:5f:59:e9:db:09:ec:0d:f7:01:e0:89:48:d7:2f: cb:ae:38:11:1f:f2:64:13:fa:a7:8a:c9:84:c3:88:a3:04:12: d5:75:fb:ae:ba:5d:05:c2:90:9e:1a:f9:13:b3:4a:d1:69:d7: 80:32:01:c2:2d:53:11:51:dd:af:14:38:b4:50:00:d2:65:57: 92:f2:15:1b:d1:d5:c1:bd:9b:03:be:8a:a6:6b:85:3c:78:d5: e9:1c:34:95:40:cf:9c:5f:db:ec:88:ae:e9:bd:85:f3:aa:d0: ef:18:c7:db:f2:3e:d3:d5:0f:b8:4d:84:01:fb:e3:03:11:22: 34:7d:00:62:15:12:10:48:0a:e6:c8:bd:3f:c1:2c:59:83:5f: ea:1b:8b:6e:5a:82:79:a5:83:d5:14:c0:41:06:30:b1:0a:2c: 61:97:79:f2:13:00:bd:78:8e:c6:c4:3d:51:c7:cf:7b:22:67: 5e:f5:7e:de:7c:0f:4e:3d:28:53:18:d7:47:fc:6b:cc:28:60: 73:00:77:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uOZTneUJnsSrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YmVlM2ZlZDEtMWEzNC00OTkzLTkwYzUtMTYwZTVhNmVjZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygW7vLBOZvtLtszRmiVIhP47l70T5quF5xie ONjrL0TXtu77dZtcQMp4fzLRNotmgqUjzlIMCmwXKzlscds22ORMllBbX5ZEMEcS KEAtvANsoIEMmYWZIxbjCQbz5VvRIV1hHRThF/ECNh+3h5wMw7JmidF2XldKvcIb JhSVHCgf7osrFshLe+rK2jJSF5IfAPN1HapPFIcL0popLhQK2k81XZUafxPwYEzS 0YBU4Pjq0i4WtrfogMAadeMIISZGZvQc4ysyDWhMueZHxwPlyulNnrcBNj0/57la k8VcQ7MtrkkOwdNuD+KDQB+FT9RiHHDHSFu9gvhbtEdouCNcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIH9WWXK/fxWiNgQGKc30KTumV9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2U1NjAxZmUtZTA2MS0z MjA1LTgwZWQtMTY1YTMyNjlkZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi6GW+WQOViLT7Xpaah/YLfTA+CVbVIcWlULC3q+bi7E2cacJt8xzfM 8S8ML1v5p41/OuBDp4aV+vJfWenbCewN9wHgiUjXL8uuOBEf8mQT+qeKyYTDiKME EtV1+666XQXCkJ4a+ROzStFp14AyAcItUxFR3a8UOLRQANJlV5LyFRvR1cG9mwO+ iqZrhTx41ekcNJVAz5xf2+yIrum9hfOq0O8Yx9vyPtPVD7hNhAH74wMRIjR9AGIV EhBICubIvT/BLFmDX+obi25agnmlg9UUwEEGMLEKLGGXefITAL14jsbEPVHHz3si Z171ft58D049KFMY10f8a8woYHMAdxc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:02 2025 by rpki-client