$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa File: 4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa (raw, json) Hash identifier: JcZN3R4xhcwzPs03sLw1rcTdcpqsLrNRjj0p8YGgi2A= Subject key identifier: 08:6A:73:02:B2:F0:AE:B1:5A:F5:72:01:03:0C:61:60:35:35:66:E7 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F43285848FEBBD6420EC3DEFD8208FA00 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa Signing time: Tue 25 Feb 2025 02:00:39 +0000 ROA not before: Tue 25 Feb 2025 02:00:39 +0000 ROA not after: Mon 26 May 2025 01:00:39 +0000 asID: 14549 IP address blocks: 208.86.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:bb:d6:42:0e:c3:de:fd:82:08:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Feb 25 02:00:39 2025 GMT Not After : May 26 01:00:39 2025 GMT Subject: CN=167c5c65-79f3-4ee1-9949-6b3038c315f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:49:2c:45:0e:24:ec:1c:9c:f8:42:ce:a0: 59:60:11:b1:f6:2d:76:49:5a:d5:ec:07:56:64:34: 9a:45:dd:6b:b1:8d:ae:6b:98:de:45:fe:8f:0c:1c: 37:bb:19:cd:86:97:02:c1:64:27:34:3f:79:7f:88: 2d:c1:93:92:05:e6:5d:1b:76:0d:24:ba:be:83:35: 34:19:f1:5c:c2:ce:94:db:bb:1b:dd:e7:6c:0c:b4: c2:53:73:fd:e7:e1:ff:2a:23:5d:67:8a:cc:a3:33: 28:4d:4d:99:20:5b:04:cf:3b:b6:45:6a:d3:c3:f0: 0a:0a:70:a8:da:d1:ef:f6:f6:f9:46:a5:cf:28:1c: d0:bf:2a:d2:e6:8b:21:c1:7a:65:a8:a1:06:56:12: 7a:5b:e6:60:9f:5a:a1:40:57:8e:79:16:12:f8:9a: d0:bf:93:af:fc:18:1c:06:ba:29:58:af:d3:85:37: fd:78:a4:d2:56:34:64:13:14:b6:9f:d4:de:67:1d: 45:76:4e:74:1a:26:b5:96:0d:e0:97:6e:7a:8c:1d: b2:12:e6:a9:9f:26:2b:67:5f:3e:c5:18:60:6a:31: c9:64:92:7c:5d:ef:7d:d8:12:58:ec:b5:44:73:5c: 7a:b1:1e:ee:f2:23:01:ad:c2:b9:05:e7:55:4c:e2: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6A:73:02:B2:F0:AE:B1:5A:F5:72:01:03:0C:61:60:35:35:66:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 208.86.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1e:95:98:eb:16:1c:96:91:a5:b4:db:77:63:bc:66:7a:eb: 4e:a6:36:54:32:a2:a7:51:6d:ff:28:93:00:8e:ff:b6:e7:b7: 8d:be:54:29:93:f8:eb:86:6b:bd:05:98:86:4d:8f:63:08:c5: b2:99:a5:c0:ae:7a:04:a2:78:46:94:7a:4f:76:a4:f6:52:bb: 35:47:2a:63:5b:08:10:39:f1:34:fa:5a:96:10:0a:f5:96:4d: 78:71:36:88:ed:de:6d:0c:ad:ec:92:29:fa:07:79:f9:93:62: 7c:dc:b2:47:a0:58:0f:0a:5f:f6:92:1f:01:e2:9c:1c:9a:3e: 73:9a:78:6a:83:8a:ed:af:b3:1b:6b:06:c2:5b:e9:ef:38:03: e8:22:f4:ad:78:f8:50:2e:92:2e:9f:19:f4:12:aa:04:51:e7: 56:cb:e4:c3:b8:24:92:60:d8:5c:a3:a9:87:1d:b8:61:6f:18: f1:e9:70:b4:14:43:87:89:a1:02:10:ce:83:2c:8e:d6:14:98: f2:90:40:ca:db:f6:12:7b:9e:bb:09:28:19:11:08:7e:00:0a: 03:99:54:0f:1c:cd:20:39:9c:5b:ea:7e:5f:07:16:17:9e:20: ad:a1:01:a9:b2:10:78:c8:2d:25:c6:eb:1b:13:ce:70:0e:ca: 4b:38:f1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+u9ZCDsPe/YII+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk MTY3YzVjNjUtNzlmMy00ZWUxLTk5NDktNmIzMDM4YzMxNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqNJLEUOJOwcnPhCzqBZYBGx9i12SVrV7AdW ZDSaRd1rsY2ua5jeRf6PDBw3uxnNhpcCwWQnND95f4gtwZOSBeZdG3YNJLq+gzU0 GfFcws6U27sb3edsDLTCU3P95+H/KiNdZ4rMozMoTU2ZIFsEzzu2RWrTw/AKCnCo 2tHv9vb5RqXPKBzQvyrS5oshwXplqKEGVhJ6W+Zgn1qhQFeOeRYS+JrQv5Ov/Bgc BropWK/ThTf9eKTSVjRkExS2n9TeZx1Fdk50Gia1lg3gl256jB2yEuapnyYrZ18+ xRhgajHJZJJ8Xe992BJY7LVEc1x6sR7u8iMBrcK5BedVTOIuXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhqcwKy8K6xWvVyAQMMYWA1NWbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvNGNlMTAxZGYtOTFhNy0z YjM2LWJhN2EtNTUxMTJmYzY3ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAelZjrFhyWkaW023djvGZ6606mNlQyoqdRbf8okwCO/7bnt42+VCmT +OuGa70FmIZNj2MIxbKZpcCuegSieEaUek92pPZSuzVHKmNbCBA58TT6WpYQCvWW TXhxNojt3m0MreySKfoHefmTYnzcskegWA8KX/aSHwHinByaPnOaeGqDiu2vsxtr BsJb6e84A+gi9K14+FAuki6fGfQSqgRR51bL5MO4JJJg2FyjqYcduGFvGPHpcLQU Q4eJoQIQzoMsjtYUmPKQQMrb9hJ7nrsJKBkRCH4ACgOZVA8czSA5nFvqfl8HFhee IK2hAamyEHjILSXG6xsTznAOyks48bg= -----END CERTIFICATE-----Generated at Sat Apr 12 11:53:22 2025 by rpki-client