$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5df81b66-53fe-38fc-8743-ca6965667d1e.roa File: 5df81b66-53fe-38fc-8743-ca6965667d1e.roa (raw, json) Hash identifier: s6otGKkwBnkK2BPnlP+hwUrnR2Hv2ayklJ4Atjg00Eg= Subject key identifier: 72:47:39:5A:8E:D9:D9:F8:A4:81:A3:20:B6:78:E8:63:45:E6:D2:50 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849B149F5CD833B74CE29145D80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5df81b66-53fe-38fc-8743-ca6965667d1e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 31775 IP address blocks: 8.9.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f5:cd:83:3b:74:ce:29:14:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4f06428a-6ae0-4c8a-a75b-6398e1c36712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:02:11:33:d7:e3:f3:47:eb:03:3b:37:03: e7:8b:b3:05:2c:3b:02:73:ad:db:87:29:56:66:ef: 48:1b:2a:9f:c5:ad:54:15:d2:99:a5:36:8f:da:f8: c5:5a:2e:69:16:db:79:7e:76:60:0c:69:2b:87:a7: 66:0a:1a:a0:21:8d:db:f4:4a:7b:4e:c6:c4:0c:13: 13:78:fb:a2:fe:a5:97:cb:93:c8:c6:a9:8b:7d:94: 55:52:ef:44:ae:ff:d2:d4:03:a7:6e:13:e2:93:1f: 19:bf:76:80:1e:66:e2:ef:79:8f:d6:0f:ce:89:2d: 24:6b:70:8c:2d:6f:10:cc:29:36:25:36:c4:5a:2f: 6e:53:b0:73:aa:68:a8:7f:b2:de:ec:6b:89:7e:5f: a7:64:68:06:75:6f:b1:84:3e:7e:f6:b1:a2:70:fe: 60:4f:f0:55:36:96:9d:6b:c4:e6:38:a2:2f:6c:d5: 13:29:b3:df:f5:51:83:77:4d:dd:e9:62:34:34:2e: c9:14:4d:9b:a0:bd:46:c5:80:56:54:44:1f:d7:e6: 79:8c:7e:e5:ea:55:2b:47:91:cb:69:d6:98:9d:eb: 66:23:dc:5a:9a:59:41:1c:36:c2:95:cd:c1:31:1e: 81:2e:fa:4a:29:e6:d4:06:ea:af:00:1b:ad:76:cf: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:39:5A:8E:D9:D9:F8:A4:81:A3:20:B6:78:E8:63:45:E6:D2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5df81b66-53fe-38fc-8743-ca6965667d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:48:96:1f:6f:7b:3c:1a:ef:ae:d9:fa:4f:69:42:07:80:6b: 77:5c:db:48:8a:ac:9e:6a:fc:2c:cc:b6:6e:62:ff:92:15:d6: 64:be:28:4c:98:c7:5f:90:a5:22:e1:63:97:b1:48:a6:be:97: 8a:eb:25:5d:4b:4f:49:cc:b0:54:66:84:e4:2f:d2:e5:78:44: 2d:e4:1a:86:6f:59:bc:76:21:d4:48:37:05:04:be:4d:13:c4: b8:a0:4e:83:e7:23:02:cf:ab:a4:c0:33:9f:71:98:d2:56:70: 7f:13:fc:b0:fa:35:ed:0c:01:4d:3d:46:97:66:f2:e6:0d:05: 73:51:ac:5f:7a:38:78:5f:33:af:7b:bf:2e:2a:eb:42:19:db: 11:08:45:fd:2c:ab:f6:da:c5:96:2f:77:e1:60:c7:9d:79:4a: e8:51:42:09:c2:fa:14:c0:30:74:3a:b4:04:49:9a:f8:38:6e: 1b:ba:3a:5a:de:87:3e:cd:6d:f4:db:12:58:4d:db:b5:07:2e: 41:bb:61:a0:8b:af:5e:be:a9:16:68:8b:58:3c:d1:2e:85:63: 32:54:ec:29:92:02:96:40:a3:aa:60:08:ee:4d:43:c4:52:03: b1:2d:1d:75:30:69:86:52:f2:cb:2f:2b:8d:f0:4b:7c:19:bf: a9:5e:8d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfXNgzt0zikUXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGYwNjQyOGEtNmFlMC00YzhhLWE3NWItNjM5OGUxYzM2NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ECETPX4/NH6wM7NwPni7MFLDsCc63bhylW Zu9IGyqfxa1UFdKZpTaP2vjFWi5pFtt5fnZgDGkrh6dmChqgIY3b9Ep7TsbEDBMT ePui/qWXy5PIxqmLfZRVUu9Erv/S1AOnbhPikx8Zv3aAHmbi73mP1g/OiS0ka3CM LW8QzCk2JTbEWi9uU7Bzqmiof7Le7GuJfl+nZGgGdW+xhD5+9rGicP5gT/BVNpad a8TmOKIvbNUTKbPf9VGDd03d6WI0NC7JFE2boL1GxYBWVEQf1+Z5jH7l6lUrR5HL adaYnetmI9xamllBHDbClc3BMR6BLvpKKebUBuqvAButds/FfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJHOVqO2dn4pIGjILZ46GNF5tJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWRmODFiNjYtNTNmZS0z OGZjLTg3NDMtY2E2OTY1NjY3ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECAlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNIlh9vezwa767Z+k9pQgeAa3dc20iKrJ5q/CzMtm5i/5IV1mS+KEyY x1+QpSLhY5exSKa+l4rrJV1LT0nMsFRmhOQv0uV4RC3kGoZvWbx2IdRINwUEvk0T xLigToPnIwLPq6TAM59xmNJWcH8T/LD6Ne0MAU09Rpdm8uYNBXNRrF96OHhfM697 vy4q60IZ2xEIRf0sq/baxZYvd+Fgx515SuhRQgnC+hTAMHQ6tARJmvg4bhu6Olre hz7NbfTbElhN27UHLkG7YaCLr16+qRZoi1g80S6FYzJU7CmSApZAo6pgCO5NQ8RS A7EtHXUwaYZS8ssvK43wS3wZv6lejTo= -----END CERTIFICATE-----Generated at Sat May 10 21:48:07 2025 by rpki-client