$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa File: ff7898c3-7996-33eb-8215-9ca64f698bd9.roa (raw, json) Hash identifier: E8Ap4EFEFY6zv/8eijgYmX5SUKvSIK4Rhs4W2B6T02U= Subject key identifier: 6B:5B:C5:5A:DA:4F:CE:88:D0:21:26:0E:DA:EF:16:B5:48:F6:D8:6D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858490881624DAD833513F784E400 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 19905 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:62:4d:ad:83:35:13:f7:84:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=72fe41fb-c9c0-4fef-9940-982bb3ff54fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:9e:f6:1d:18:0a:e3:2e:19:4d:cb:5b:94: bb:a0:2b:b9:91:2d:18:79:f4:6f:17:6d:54:8d:67: 6c:8b:bb:ba:ba:35:7a:a8:d3:63:3d:c0:5b:a3:b4: f0:c1:52:21:07:ae:3e:21:de:d9:7c:25:4b:1a:bd: e3:ae:a4:25:62:da:75:ab:21:41:b1:d8:01:72:32: 78:1b:33:1a:91:8c:4e:aa:42:5f:73:a4:7b:fb:99: 62:91:05:37:14:15:ac:4a:20:4b:59:d0:b8:c7:7a: 87:0a:7d:00:a0:e9:d7:7d:8e:95:76:fd:bc:9e:b1: 08:96:3d:d6:6c:0b:78:e7:f0:5a:87:3e:8f:d1:03: da:3f:63:a8:05:2c:90:b0:1d:e3:08:06:62:b1:44: 98:9e:6e:89:4f:06:aa:18:1a:77:88:8f:ab:fa:81: 6b:7f:fb:9e:28:fd:b4:e2:03:b9:0f:c0:2d:1d:bf: 05:ac:f2:83:c8:bb:ed:9e:75:53:af:cf:cb:12:d2: 45:b5:5e:db:f9:e4:a8:a0:fc:1c:f2:6f:8a:aa:e6: 3a:42:aa:7a:4e:04:a8:46:b7:93:ef:c3:bc:7f:b5: 90:d2:55:18:2e:ba:02:b4:1b:8c:7e:df:43:ae:ff: 3b:48:e8:5a:6c:5c:bd:16:b7:7a:c2:bf:12:94:28: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5B:C5:5A:DA:4F:CE:88:D0:21:26:0E:DA:EF:16:B5:48:F6:D8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ff7898c3-7996-33eb-8215-9ca64f698bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ec:01:30:30:ce:bc:e8:15:b6:7f:2c:fe:bd:0e:bb:6a:9f: 6e:b9:db:82:87:c1:97:ee:00:8e:60:88:02:65:e4:b0:37:19: 1a:49:a6:17:ff:2f:71:f9:2b:79:31:da:29:1e:33:5b:2a:7a: 01:c9:36:f3:6f:59:43:b8:15:88:ff:ee:41:61:24:cb:df:6a: f3:5c:e6:21:0e:c8:bc:6b:74:c6:d0:ce:c8:98:8d:a0:6a:5e: 1f:5d:15:56:0e:5d:1f:cd:f2:08:25:44:7a:76:ca:eb:e5:95: 41:6c:fd:31:85:9a:d7:c7:0e:ea:2d:a3:ed:24:c6:28:aa:29: dd:7f:12:54:c3:4d:bf:77:04:da:b7:c3:52:27:18:e3:b6:7e: 1c:b4:a4:d0:fa:29:fa:ed:2f:b4:2e:ae:f3:b3:5b:9d:17:97: 98:77:ef:61:1b:0a:d2:de:a7:9f:f4:a0:0e:1f:ef:bd:94:d1: 86:85:18:6f:a9:8c:5a:55:10:13:5f:57:23:81:7d:4f:41:9e: 87:05:aa:95:c2:22:92:47:a9:0f:61:fc:b8:e5:d6:3f:fb:c7: 64:9d:14:98:8c:50:27:8e:84:fe:ed:8d:b1:82:a5:40:f1:e4: 0f:98:dd:d2:58:4d:a0:9a:e8:e9:db:88:91:c8:99:a3:57:2d: d0:1d:7e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWJNrYM1E/eE5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NzJmZTQxZmItYzljMC00ZmVmLTk5NDAtOTgyYmIzZmY1NGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJue9h0YCuMuGU3LW5S7oCu5kS0YefRvF21U jWdsi7u6ujV6qNNjPcBbo7TwwVIhB64+Id7ZfCVLGr3jrqQlYtp1qyFBsdgBcjJ4 GzMakYxOqkJfc6R7+5likQU3FBWsSiBLWdC4x3qHCn0AoOnXfY6Vdv28nrEIlj3W bAt45/Bahz6P0QPaP2OoBSyQsB3jCAZisUSYnm6JTwaqGBp3iI+r+oFrf/ueKP20 4gO5D8AtHb8FrPKDyLvtnnVTr8/LEtJFtV7b+eSooPwc8m+KquY6Qqp6TgSoRreT 78O8f7WQ0lUYLroCtBuMft9Drv87SOhabFy9Frd6wr8SlCjDeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtbxVraT86I0CEmDtrvFrVI9thtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmY3ODk4YzMtNzk5Ni0z M2ViLTgyMTUtOWNhNjRmNjk4YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXsATAwzrzoFbZ/LP69Drtqn26524KHwZfuAI5giAJl5LA3GRpJphf/ L3H5K3kx2ikeM1sqegHJNvNvWUO4FYj/7kFhJMvfavNc5iEOyLxrdMbQzsiYjaBq Xh9dFVYOXR/N8gglRHp2yuvllUFs/TGFmtfHDuoto+0kxiiqKd1/ElTDTb93BNq3 w1InGOO2fhy0pND6KfrtL7QurvOzW50Xl5h372EbCtLep5/0oA4f772U0YaFGG+p jFpVEBNfVyOBfU9BnocFqpXCIpJHqQ9h/Ljl1j/7x2SdFJiMUCeOhP7tjbGCpUDx 5A+Y3dJYTaCa6OnbiJHImaNXLdAdfkE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:36 2025 by rpki-client