$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa File: 86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa (raw, json) Hash identifier: ek2JPQPN5ha2DWksTR6+8h4moJ1PiSIKhsc1U8h61G0= Subject key identifier: 0A:8C:94:51:19:ED:4E:EC:37:D5:62:93:AA:7D:C7:08:B4:D1:F6:9B Certificate issuer: /CN=86b37376-2d1b-4536-b941-7858431c5839 Certificate serial: 010D0C9F43285848D7A64C6E16CDC4170D1FFA80 Authority key identifier: FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 30115 IP address blocks: 104.166.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4c:6e:16:cd:c4:17:0d:1f:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b37376-2d1b-4536-b941-7858431c5839 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=c4de74b7-eb41-4f31-a6a8-c09bffb3ff21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:6f:16:57:e7:34:9c:01:3e:e1:d2:e6:24: ff:e7:10:85:ca:c6:67:bc:3b:2d:c4:5e:4a:65:d8: ac:0a:33:a8:99:2c:9f:c4:cc:8c:c2:ed:ab:d3:14: 86:15:7a:71:32:2c:68:f4:5c:6f:45:4f:46:86:f0: dc:f4:6b:8d:73:64:6f:37:6b:83:a3:2b:11:58:1b: b4:81:46:b0:56:02:a7:26:2f:5b:19:84:88:25:c5: 22:7b:f8:a8:a4:56:12:18:35:41:26:b4:ee:4e:c7: f6:98:96:79:72:c3:97:ab:68:86:46:fe:3c:2f:96: fa:70:89:28:b3:af:4b:b3:4a:82:b8:40:79:2c:ed: ab:9e:f1:c2:bb:c9:03:82:6c:89:44:56:8e:e4:16: 58:c9:8b:c0:35:f5:b7:2f:b1:85:7b:08:d8:f8:fa: c7:ba:e0:a5:57:a9:75:19:6f:63:44:21:d9:52:87: e8:38:05:d1:cf:45:9b:85:c9:41:0f:fe:5c:8d:98: 9f:9c:67:c6:95:6b:29:9a:d6:a0:92:48:06:6b:4b: e4:a5:49:35:52:81:6e:8d:7f:32:42:90:f6:78:5d: 71:22:10:49:7d:b6:56:c1:22:aa:4e:64:4e:71:83: 3b:3b:70:d8:82:d2:ec:b4:d6:a3:7b:f6:97:93:e3: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8C:94:51:19:ED:4E:EC:37:D5:62:93:AA:7D:C7:08:B4:D1:F6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl X509v3 Authority Key Identifier: keyid:FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer sbgp-ipAddrBlock: critical IPv4: 104.166.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ed:7a:bd:6b:d8:e6:20:cc:39:de:69:52:3d:fc:79:d2:64: 54:bf:5b:6e:4b:ef:ce:5d:e3:64:f8:05:cb:1b:43:2c:6b:04: 31:7a:1a:d0:8b:ce:26:51:de:5c:db:c6:75:59:69:1d:6c:31: c9:b2:ef:69:ac:ce:da:94:14:56:28:52:d0:3f:4e:3e:fa:77: 91:ac:4e:55:d7:35:30:80:c8:dc:be:3e:7d:61:e3:a9:27:36: e1:6f:b7:e1:a7:79:af:91:4c:13:4f:37:f9:5c:c1:de:dc:6c: b6:36:dc:29:6c:94:58:69:a5:4b:d6:6f:b4:8a:c9:0e:fc:2c: 6d:99:38:03:70:97:14:41:2f:ae:ce:a9:45:26:87:9b:1f:da: 66:ca:65:6b:c2:4f:83:07:f8:dd:08:f6:65:26:2f:54:a0:3f: fd:02:69:a3:40:21:dc:86:00:99:b2:06:9b:23:1c:f1:04:ea: 80:4b:9b:15:6d:78:61:9f:be:e4:28:b7:9e:ff:9a:d0:45:a7: 16:3f:bc:61:83:74:60:8b:62:fb:c8:90:66:d7:a8:b5:18:fc: 02:8b:bb:77:d1:b5:fc:75:bb:e6:4a:f9:0a:93:e4:53:b8:e0: 32:dc:11:61:1b:14:ad:d3:6a:00:dc:22:f7:5b:08:82:90:b3: 29:cd:43:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkxuFs3EFw0f+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzczNzYtMmQxYi00NTM2LWI5NDEtNzg1ODQzMWM1 ODM5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk YzRkZTc0YjctZWI0MS00ZjMxLWE2YTgtYzA5YmZmYjNmZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7RvFlfnNJwBPuHS5iT/5xCFysZnvDstxF5K ZdisCjOomSyfxMyMwu2r0xSGFXpxMixo9FxvRU9GhvDc9GuNc2RvN2uDoysRWBu0 gUawVgKnJi9bGYSIJcUie/iopFYSGDVBJrTuTsf2mJZ5csOXq2iGRv48L5b6cIko s69Ls0qCuEB5LO2rnvHCu8kDgmyJRFaO5BZYyYvANfW3L7GFewjY+PrHuuClV6l1 GW9jRCHZUofoOAXRz0WbhclBD/5cjZifnGfGlWspmtagkkgGa0vkpUk1UoFujX8y QpD2eF1xIhBJfbZWwSKqTmROcYM7O3DYgtLstNaje/aXk+NVHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqMlFEZ7U7sN9Vik6p9xwi00fabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NmIz NzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMxYzU4MzkvODZjNzc3ZjgtMGFmZC0z Y2I0LTlhZmUtNzJlOGZlNjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODZiMzczNzYtMmQxYi00NTM2LWI5 NDEtNzg1ODQzMWM1ODM5Lzg2YjM3Mzc2LTJkMWItNDUzNi1iOTQxLTc4NTg0MzFj NTgzOS5jcmwwHwYDVR0jBBgwFoAU/Zeqz6JXzqQ9oYPgyfe+yRagiYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4 NDMxYzU4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7ter1r2OYgzDneaVI9/HnSZFS/W25L785d42T4BcsbQyxrBDF6GtCL ziZR3lzbxnVZaR1sMcmy72msztqUFFYoUtA/Tj76d5GsTlXXNTCAyNy+Pn1h46kn NuFvt+Gnea+RTBNPN/lcwd7cbLY23ClslFhppUvWb7SKyQ78LG2ZOANwlxRBL67O qUUmh5sf2mbKZWvCT4MH+N0I9mUmL1SgP/0CaaNAIdyGAJmyBpsjHPEE6oBLmxVt eGGfvuQot57/mtBFpxY/vGGDdGCLYvvIkGbXqLUY/AKLu3fRtfx1u+ZK+QqT5FO4 4DLcEWEbFK3TagDcIvdbCIKQsynNQxo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:35:59 2025 by rpki-client