$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa File: 0b303bc2-150d-317d-a5b8-89981f88cbe7.roa (raw, json) Hash identifier: YtbMPyg3i2QPnaVzRnLeeKXSMRBOtib8gUt7RAdAuYM= Subject key identifier: 70:E0:B0:34:CF:79:AE:9D:C1:96:95:5E:B9:30:86:C2:F9:12:38:EA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849D165152599E1C00AB82F5EC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 6461 IP address blocks: 8.44.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:15:25:99:e1:c0:0a:b8:2f:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=b47dcb9d-1b30-46c2-9319-0c80b4c0afb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:ad:f5:c4:41:7a:45:11:2d:d5:72:88:02: e0:00:c1:4d:54:70:da:be:2e:93:0d:91:b6:bd:d6: 43:05:46:6f:20:e5:ad:50:f9:e6:a0:cb:6c:99:44: 40:fd:29:15:47:aa:95:0d:f6:f8:05:52:4b:35:08: cb:39:df:33:e9:ba:30:81:f2:57:a1:e0:51:d5:14: 9e:a1:c1:ac:86:c2:d4:54:69:71:7f:24:c8:8b:5e: cd:10:87:94:81:b8:4e:a7:a2:e2:09:61:ec:37:b7: 84:0e:78:08:02:dd:c6:ad:44:91:3b:fa:66:a4:da: 0b:cf:64:90:e3:4f:ae:26:a1:f0:1b:6b:5a:80:13: 24:4c:33:87:89:08:22:82:96:4a:9e:37:6b:f3:01: 9a:eb:56:a8:b2:e1:86:6e:d8:4c:65:ef:1b:43:b4: b3:46:f7:57:1c:ec:3e:f4:97:59:ce:f7:93:b9:de: af:b8:13:b9:87:94:e9:70:73:2a:41:34:8e:29:15: bf:03:31:d1:3c:12:a0:01:b9:1a:e5:ca:47:96:99: 53:bd:17:cc:1c:c7:b6:56:04:0d:92:a9:b7:e3:66: 62:76:56:24:e0:e0:5c:a7:0c:27:da:4b:dc:59:b5: 64:e7:70:37:e6:81:d8:36:53:13:eb:32:79:b3:3e: 74:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:B0:34:CF:79:AE:9D:C1:96:95:5E:B9:30:86:C2:F9:12:38:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.44.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:99:cc:c4:75:61:37:91:b6:ef:b0:f3:b6:92:69:65:f4:1d: 36:21:5e:1a:03:75:36:d9:f0:a7:af:dd:06:c4:14:d1:d7:84: 0a:2e:10:ec:a7:ee:d9:4c:fa:6c:b5:9e:d7:b2:e7:2b:63:bf: 15:97:d8:28:bb:ee:ba:fc:d5:06:8b:d3:17:d6:1c:21:01:69: a1:7b:50:f7:3b:ef:1a:d5:38:c2:a7:2f:2d:0d:94:ed:d7:1c: 62:25:4d:f5:47:52:52:c3:b2:fc:9c:3f:76:58:cb:41:d9:ba: f3:bd:15:9c:81:30:f6:24:1e:cf:a5:04:1f:e9:bf:2b:b3:03: cf:88:3b:f9:17:6e:ff:7a:f8:89:69:2f:5f:a7:96:3c:cd:59: 03:b6:48:8f:38:4c:9e:51:cf:ef:52:58:1e:d4:5c:38:bc:4b: 06:65:87:80:05:c5:6d:b7:88:43:23:ee:1c:cc:53:8c:e5:80: 02:4b:71:1f:73:8e:e9:64:15:18:07:5a:05:d6:30:71:e4:b1: fa:63:08:8e:09:58:9a:a1:ce:af:35:70:26:ad:b4:bd:df:54: a3:a8:92:76:68:20:e6:fa:5b:7f:db:37:3d:41:a7:f3:6f:35: e0:7a:ee:27:6d:0e:e4:d3:cf:e4:00:c9:48:c2:e1:67:26:ca: 31:4e:c2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRUlmeHACrgvXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YjQ3ZGNiOWQtMWIzMC00NmMyLTkzMTktMGM4MGI0YzBhZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1St9cRBekURLdVyiALgAMFNVHDavi6TDZG2 vdZDBUZvIOWtUPnmoMtsmURA/SkVR6qVDfb4BVJLNQjLOd8z6bowgfJXoeBR1RSe ocGshsLUVGlxfyTIi17NEIeUgbhOp6LiCWHsN7eEDngIAt3GrUSRO/pmpNoLz2SQ 40+uJqHwG2tagBMkTDOHiQgigpZKnjdr8wGa61aosuGGbthMZe8bQ7SzRvdXHOw+ 9JdZzveTud6vuBO5h5TpcHMqQTSOKRW/AzHRPBKgAbka5cpHlplTvRfMHMe2VgQN kqm342ZidlYk4OBcpwwn2kvcWbVk53A35oHYNlMT6zJ5sz50NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDgsDTPea6dwZaVXrkwhsL5EjjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMGIzMDNiYzItMTUwZC0z MTdkLWE1YjgtODk5ODFmODhjYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCyLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCZzMR1YTeRtu+w87aSaWX0HTYhXhoDdTbZ8Kev3QbEFNHXhAouEOyn 7tlM+my1ntey5ytjvxWX2Ci77rr81QaL0xfWHCEBaaF7UPc77xrVOMKnLy0NlO3X HGIlTfVHUlLDsvycP3ZYy0HZuvO9FZyBMPYkHs+lBB/pvyuzA8+IO/kXbv96+Ilp L1+nljzNWQO2SI84TJ5Rz+9SWB7UXDi8SwZlh4AFxW23iEMj7hzMU4zlgAJLcR9z julkFRgHWgXWMHHksfpjCI4JWJqhzq81cCattL3fVKOoknZoIOb6W3/bNz1Bp/Nv NeB67idtDuTTz+QAyUjC4WcmyjFOwpU= -----END CERTIFICATE-----Generated at Tue Jul 1 13:10:30 2025 by rpki-client