$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa File: f0dab10e-4582-3cea-9c9b-95e61ade618d.roa (raw, json) Hash identifier: WZRapWbkxjA/V09PnZScm2yxN+GgHRq0XkO879Qxtgg= Subject key identifier: 91:A0:67:F5:7F:76:7A:A1:07:D4:0F:D2:33:15:81:C4:8C:0B:D5:C5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858493ED3C9A0027DB436B2D24000 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 11178 IP address blocks: 8.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:c9:a0:02:7d:b4:36:b2:d2:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=f3d07bd8-e570-498f-a14c-4a5c75debed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:36:6d:d5:5b:36:86:e8:d6:2b:98:b0:0c: 33:41:3e:36:f1:9d:77:4b:94:5e:a2:47:34:d6:dc: fb:cb:b8:85:8a:4d:34:bd:6d:ed:3f:82:52:0d:b2: a8:dc:74:0f:5e:9f:24:46:bb:0c:c6:01:00:3a:4f: d7:4b:13:68:51:98:96:0e:43:84:ff:18:d3:cc:ea: 41:09:28:21:27:01:35:f7:1e:8a:e3:94:45:31:53: ce:1d:46:88:2b:99:66:61:9a:29:93:ea:c7:75:e9: a5:3d:a1:d9:dd:7c:60:81:75:d9:5b:00:2b:04:37: f7:59:12:b6:c1:97:67:4c:1f:b0:65:a2:2f:cd:4f: 76:c0:07:bf:90:ea:c7:1c:65:e6:99:85:18:46:21: 69:49:cc:b5:c1:ee:14:1e:77:bf:fd:f8:f0:c7:68: d0:15:08:7d:4b:de:65:4d:80:13:68:a8:bd:70:98: 88:91:20:16:e4:15:de:26:5c:89:a2:0a:f2:92:de: 79:ff:1b:0e:21:2d:27:82:60:ef:1c:c0:4c:9a:ca: 17:33:d6:d3:07:a5:74:09:46:2a:fb:d8:30:66:ed: 6f:a6:e0:bb:8b:8e:80:4a:aa:ec:45:5e:04:80:bc: ae:0c:fb:47:6e:6e:c5:12:65:31:90:66:ea:68:99: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A0:67:F5:7F:76:7A:A1:07:D4:0F:D2:33:15:81:C4:8C:0B:D5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fc:ab:fc:95:6b:c2:68:43:60:7b:8c:5b:cf:7a:75:8a:50: fb:95:1a:a0:9c:2b:10:d5:d2:15:e7:68:e1:ea:74:35:cc:9c: 9c:50:86:a6:22:0d:c1:d9:10:48:5b:c5:75:79:b8:3f:e4:b1: 17:40:01:1b:e6:15:4a:3b:c9:c4:5f:a9:95:cd:90:87:94:e5: 85:c7:de:c3:8c:f4:7a:db:86:07:56:85:88:a2:e5:53:65:15: c7:bc:5c:cb:6a:6d:fc:64:84:65:d5:75:47:2c:5d:96:b7:15: 14:76:ac:2c:f5:cd:a4:ee:d2:78:b3:3b:15:00:64:d7:f1:46: ae:44:83:df:6e:42:a9:63:65:76:ec:d8:5c:b5:3b:3e:2b:c0: d9:e8:46:2a:f9:6f:87:e6:45:20:d7:bf:ea:8e:f1:53:ff:1a: 29:b0:b2:ac:b1:ee:45:0a:f4:a9:de:c8:4d:a5:a6:1c:18:72: 5a:3d:24:32:46:7e:04:55:f9:2d:ae:8e:5b:e7:ae:ca:3e:4c: 1b:02:3f:5d:9d:67:81:1d:c6:4f:8f:b2:25:38:5c:ad:68:dc: f6:6a:7d:c0:ba:e8:ff:5e:38:fb:14:a2:9c:0d:72:a4:d2:ec: e9:34:03:7f:af:2c:5b:65:30:f3:27:2b:a0:bc:d5:57:94:fa: 35:ab:67:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+08mgAn20NrLSQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZjNkMDdiZDgtZTU3MC00OThmLWExNGMtNGE1Yzc1ZGViZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzg2bdVbNobo1iuYsAwzQT428Z13S5Reokc0 1tz7y7iFik00vW3tP4JSDbKo3HQPXp8kRrsMxgEAOk/XSxNoUZiWDkOE/xjTzOpB CSghJwE19x6K45RFMVPOHUaIK5lmYZopk+rHdemlPaHZ3XxggXXZWwArBDf3WRK2 wZdnTB+wZaIvzU92wAe/kOrHHGXmmYUYRiFpScy1we4UHne//fjwx2jQFQh9S95l TYATaKi9cJiIkSAW5BXeJlyJogrykt55/xsOIS0ngmDvHMBMmsoXM9bTB6V0CUYq +9gwZu1vpuC7i46ASqrsRV4EgLyuDPtHbm7FEmUxkGbqaJnabwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGgZ/V/dnqhB9QP0jMVgcSMC9XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjBkYWIxMGUtNDU4Mi0z Y2VhLTljOWItOTVlNjFhZGU2MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn8q/yVa8JoQ2B7jFvPenWKUPuVGqCcKxDV0hXnaOHqdDXMnJxQhqYi DcHZEEhbxXV5uD/ksRdAARvmFUo7ycRfqZXNkIeU5YXH3sOM9HrbhgdWhYii5VNl Fce8XMtqbfxkhGXVdUcsXZa3FRR2rCz1zaTu0nizOxUAZNfxRq5Eg99uQqljZXbs 2Fy1Oz4rwNnoRir5b4fmRSDXv+qO8VP/Gimwsqyx7kUK9KneyE2lphwYclo9JDJG fgRV+S2ujlvnrso+TBsCP12dZ4Edxk+PsiU4XK1o3PZqfcC66P9eOPsUopwNcqTS 7Ok0A3+vLFtlMPMnK6C81VeU+jWrZxQ= -----END CERTIFICATE-----Generated at Tue Apr 29 00:03:12 2025 by rpki-client