$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa File: 06356a9a-a928-3159-af92-998e04f7da3a.roa (raw, json) Hash identifier: bgwkUQdW7+1zfWuWpE4H6k3s9qAb2aXOHXsD7o9N4Dg= Subject key identifier: 27:E1:4E:9B:06:38:08:87:CA:F3:6E:01:F2:46:69:BD:53:E7:7F:21 Certificate issuer: /CN=007561fe-4b04-417a-b423-349b8b4b047d Certificate serial: 010D0C9F43285849780F11487E29847EEF8312B4 Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 19651 IP address blocks: 23.168.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:11:48:7e:29:84:7e:ef:83:12:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=a6c562b8-06b2-407a-b46c-d465018e8c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d4:0c:26:ad:1d:fb:4f:90:df:28:7f:cb:12: 8a:19:e7:25:62:fb:62:93:40:fa:f0:fd:5c:dd:c7: 39:d5:6d:51:e1:c6:e6:ae:1e:a7:e7:66:e3:cc:49: 01:96:d8:98:4a:3e:5b:ed:09:a8:ed:aa:9d:96:69: 44:28:70:9d:c0:01:c5:3c:22:18:45:21:9c:b8:24: 51:9a:e5:11:80:b0:20:ce:a3:c2:e6:64:1e:8c:51: ff:df:c0:15:63:91:9e:9a:2d:63:bf:ef:cd:47:96: 22:0e:df:54:2c:7f:75:c6:97:50:98:da:d0:24:ec: 19:5e:95:6f:a3:c7:a1:f1:d1:ba:bc:67:88:6b:91: d2:06:05:07:da:b4:09:4a:7e:d6:34:06:24:6a:e3: 43:1c:5a:e7:cb:eb:72:0c:55:22:1b:90:d5:32:c4: cc:26:12:c1:a3:fb:ca:47:7e:97:4c:8c:9e:9a:f4: 02:ae:82:ed:9d:0a:2d:d9:a5:fd:b8:c1:98:a5:5d: 01:22:7f:ec:23:9a:17:bb:d9:ac:0c:d7:2d:6a:16: 84:c9:b8:a3:60:a7:d6:77:93:07:ba:ed:7f:b7:81: 5b:c5:ef:10:e8:90:fe:88:6c:25:21:46:3d:2b:ae: 4d:0f:3a:26:14:d2:33:12:90:0a:f8:5e:4f:2a:b4: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:4E:9B:06:38:08:87:CA:F3:6E:01:F2:46:69:BD:53:E7:7F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl X509v3 Authority Key Identifier: keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer sbgp-ipAddrBlock: critical IPv4: 23.168.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:da:65:d5:34:bb:a8:fb:75:ff:59:66:e0:3c:7a:54:64:36: 73:5c:2e:24:9f:7e:a9:6a:33:d8:96:b9:11:92:14:70:87:40: 61:bc:23:74:52:83:d4:68:92:ce:89:ad:d3:ce:b7:b3:61:64: cd:8a:3e:30:44:ac:7c:41:05:fb:7d:00:35:d8:3e:07:61:bb: 2d:e2:77:b0:2b:aa:21:45:54:f6:60:94:e4:55:ff:c0:32:af: a1:3a:07:42:d0:08:01:df:8f:43:90:3b:e9:01:60:d9:77:48: 35:93:1a:0a:84:28:ea:3b:13:b3:0c:1c:1a:a2:04:e2:8c:9c: 37:c4:e2:b5:30:51:43:89:ad:bf:14:ff:f7:d0:8b:86:e4:e0: 8b:d6:f2:ff:a4:69:c3:28:f0:e8:ee:d7:e9:e7:be:67:c0:00: 55:8a:22:b2:9b:2c:44:f4:59:aa:6b:d3:01:f1:39:f0:28:13: 2a:09:20:d5:0e:cf:cf:e5:bd:c0:d3:1c:9f:a2:dd:46:1f:5c: fe:b6:a9:66:91:ad:d2:bb:1e:c8:16:ea:fe:bb:3a:6c:44:7a: a3:11:09:f2:fe:da:4a:7f:3b:ff:a2:5f:b4:7b:46:6e:ae:87: a6:03:35:96:bb:37:27:bc:9a:0c:00:c3:32:07:61:93:6b:c4: 05:b1:08:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DxFIfimEfu+DErQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA3NTYxZmUtNGIwNC00MTdhLWI0MjMtMzQ5YjhiNGIw NDdkMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk YTZjNTYyYjgtMDZiMi00MDdhLWI0NmMtZDQ2NTAxOGU4Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dQMJq0d+0+Q3yh/yxKKGeclYvtik0D68P1c 3cc51W1R4cbmrh6n52bjzEkBltiYSj5b7Qmo7aqdlmlEKHCdwAHFPCIYRSGcuCRR muURgLAgzqPC5mQejFH/38AVY5Gemi1jv+/NR5YiDt9ULH91xpdQmNrQJOwZXpVv o8eh8dG6vGeIa5HSBgUH2rQJSn7WNAYkauNDHFrny+tyDFUiG5DVMsTMJhLBo/vK R36XTIyemvQCroLtnQot2aX9uMGYpV0BIn/sI5oXu9msDNctahaEybijYKfWd5MH uu1/t4Fbxe8Q6JD+iGwlIUY9K65NDzomFNIzEpAK+F5PKrQahwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfhTpsGOAiHyvNuAfJGab1T538hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1 NjFmZS00YjA0LTQxN2EtYjQyMy0zNDliOGI0YjA0N2QvMDYzNTZhOWEtYTkyOC0z MTU5LWFmOTItOTk4ZTA0ZjdkYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDA3NTYxZmUtNGIwNC00MTdhLWI0 MjMtMzQ5YjhiNGIwNDdkLzAwNzU2MWZlLTRiMDQtNDE3YS1iNDIzLTM0OWI4YjRi MDQ3ZC5jcmwwHwYDVR0jBBgwFoAUam3UldcOa/DEVubcc/Wc40Ocg3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMDc1NjFmZS00YjA0LTQxN2EtYjQyMy0zNDli OGI0YjA0N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6gIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnaZdU0u6j7df9ZZuA8elRkNnNcLiSffqlqM9iWuRGSFHCHQGG8I3RS g9Roks6JrdPOt7NhZM2KPjBErHxBBft9ADXYPgdhuy3id7ArqiFFVPZglORV/8Ay r6E6B0LQCAHfj0OQO+kBYNl3SDWTGgqEKOo7E7MMHBqiBOKMnDfE4rUwUUOJrb8U //fQi4bk4IvW8v+kacMo8Oju1+nnvmfAAFWKIrKbLET0Wapr0wHxOfAoEyoJINUO z8/lvcDTHJ+i3UYfXP62qWaRrdK7HsgW6v67OmxEeqMRCfL+2kp/O/+iX7R7Rm6u h6YDNZa7Nye8mgwAwzIHYZNrxAWxCIU= -----END CERTIFICATE-----Generated at Mon Apr 28 10:02:39 2025 by rpki-client