$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/86d660b1-eaa6-3963-8beb-66a2a5817230.roa File: 86d660b1-eaa6-3963-8beb-66a2a5817230.roa (raw, json) Hash identifier: kBHrIcIr5kjJ31Bd3ouFwfRy4E59+ocLJbgk8wtiKO4= Subject key identifier: D1:81:06:2E:38:47:C2:57:0B:4B:DE:FD:29:D9:52:FB:1A:85:4B:C7 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584940394FB564AC84AAEADDD628 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/86d660b1-eaa6-3963-8beb-66a2a5817230.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 273237 IP address blocks: 8.243.181.0/24 maxlen: 24 8.243.182.0/24 maxlen: 24 204.199.139.0/24 maxlen: 24 204.199.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4f:b5:64:ac:84:aa:ea:dd:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=d350b63f-2263-4732-ac5d-2c055ba999c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:02:fe:e6:c3:e9:79:d2:a3:02:3a:52:f8: 10:1e:06:f6:28:c3:d8:69:c2:a3:45:30:ad:d4:3d: 2f:e5:89:8c:f2:c7:fb:f8:f4:cc:67:0f:30:7e:14: aa:9f:4b:a2:60:c6:92:52:32:85:99:6b:8d:15:47: 37:03:ed:0a:64:af:ac:e0:50:88:2e:9a:36:a4:07: 00:f9:27:2f:d8:79:ef:6f:a4:00:4f:b4:2d:de:30: e4:2e:44:06:ab:b8:8b:53:04:7b:6b:3b:44:85:f9: 01:51:25:a7:3d:0c:c7:43:4f:0c:13:30:4e:38:56: 68:6d:5c:9e:1d:af:e9:7c:34:14:6a:f6:4d:0d:59: 8a:7d:b3:2f:cb:35:f6:29:c0:25:e6:27:c3:77:25: 2f:cd:d7:0f:38:2a:65:1f:d8:3e:b8:2f:2d:5e:48: 23:27:8f:5b:78:86:2e:d5:48:a0:3b:fb:98:d0:b4: 09:53:46:1e:f2:8b:52:ad:59:13:8c:22:6d:5b:2e: d6:b3:c2:dc:86:87:87:ca:17:31:35:aa:f1:59:a4: 34:47:ee:f4:cd:30:db:bf:01:b6:58:29:ae:bf:0f: 8f:e1:47:2f:23:1a:a0:08:f5:41:d3:4b:5c:3b:6c: 3b:84:d9:4e:90:ae:ca:4d:a6:65:e6:68:4a:6b:fd: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:81:06:2E:38:47:C2:57:0B:4B:DE:FD:29:D9:52:FB:1A:85:4B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/86d660b1-eaa6-3963-8beb-66a2a5817230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 8.243.181.0-8.243.182.255 204.199.139.0-204.199.140.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:74:a3:5e:17:b7:33:f8:9d:39:c9:5c:4e:05:b2:71:56:45: 8f:cd:3c:16:9c:2e:08:41:d1:8f:2e:95:43:f6:29:be:7e:ab: be:83:d9:99:34:57:d6:81:39:96:e1:f2:b6:01:b7:0d:12:1d: a2:c7:67:bd:1b:6f:2c:be:5c:a6:ee:41:91:62:5d:06:69:22: 7d:e1:80:55:e8:ce:0b:d2:e3:f1:34:89:1d:9a:a9:6c:b0:b9: 49:40:cb:f5:e2:20:5f:6f:f7:4b:76:6b:ce:03:ae:27:04:d9: ad:2a:61:a3:39:b7:dd:a7:44:19:09:61:00:1e:16:85:e0:41: 5f:bb:24:e3:94:1d:6c:b8:c2:15:f2:a7:05:46:3d:0b:41:8d: 26:2d:68:92:de:46:d0:3c:39:56:42:0e:51:08:57:78:cd:26: ba:7a:75:84:91:c0:e9:9a:fc:c7:07:f0:85:bf:a3:89:9f:39: fb:fa:f5:c1:48:02:9a:72:b1:e7:6d:3b:fd:2b:b3:fa:1c:6a: 61:73:db:8d:62:00:d8:2b:c6:48:9f:35:73:fe:2a:2a:35:74: 39:db:08:ba:ac:05:07:c9:0b:7f:45:f7:6d:88:aa:fb:04:33: f5:96:45:b3:26:0f:a4:13:94:1b:ca:72:9d:ec:98:f0:78:7d: c4:f8:59:f8 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWElAOU+1ZKyEqurd1igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZDM1MGI2M2YtMjI2My00NzMyLWFjNWQtMmMwNTViYTk5OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSIC/ubD6XnSowI6UvgQHgb2KMPYacKjRTCt 1D0v5YmM8sf7+PTMZw8wfhSqn0uiYMaSUjKFmWuNFUc3A+0KZK+s4FCILpo2pAcA +Scv2Hnvb6QAT7Qt3jDkLkQGq7iLUwR7aztEhfkBUSWnPQzHQ08MEzBOOFZobVye Ha/pfDQUavZNDVmKfbMvyzX2KcAl5ifDdyUvzdcPOCplH9g+uC8tXkgjJ49beIYu 1UigO/uY0LQJU0Ye8otSrVkTjCJtWy7Ws8LchoeHyhcxNarxWaQ0R+70zTDbvwG2 WCmuvw+P4UcvIxqgCPVB00tcO2w7hNlOkK7KTaZl5mhKa/2VDwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNGBBi44R8JXC0ve/SnZUvsahUvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvODZkNjYwYjEtZWFhNi0z OTYzLThiZWItNjZhMmE1ODE3MjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAAI87UD BAAI87YwDAMEAMzHiwMEAMzHjDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBodKNeF7cz+J05yVxOBbJxVkWP zTwWnC4IQdGPLpVD9im+fqu+g9mZNFfWgTmW4fK2AbcNEh2ix2e9G28svlym7kGR Yl0GaSJ94YBV6M4L0uPxNIkdmqlssLlJQMv14iBfb/dLdmvOA64nBNmtKmGjObfd p0QZCWEAHhaF4EFfuyTjlB1suMIV8qcFRj0LQY0mLWiS3kbQPDlWQg5RCFd4zSa6 enWEkcDpmvzHB/CFv6OJnzn7+vXBSAKacrHnbTv9K7P6HGphc9uNYgDYK8ZInzVz /ioqNXQ52wi6rAUHyQt/RfdtiKr7BDP1lkWzJg+kE5QbynKd7JjweH3E+Fn4 -----END CERTIFICATE-----Generated at Mon Apr 7 09:31:36 2025 by rpki-client