$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa File: 912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa (raw, json) Hash identifier: +IbVyoSi7CMV20fCS4gXdtsoNOl6tPkgzzj0S9mFFWU= Subject key identifier: 57:24:50:D9:55:52:52:2B:05:B4:1F:A8:FD:12:91:AC:6E:8C:38:02 Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F4328584917DC39590E25C0D8BB9A1780 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16563 IP address blocks: 208.86.96.0/23 maxlen: 23 208.86.96.0/24 maxlen: 24 208.86.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:39:59:0e:25:c0:d8:bb:9a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=e861306e-e17f-4115-a7d4-6bd09d80bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:fb:35:84:d4:93:57:9d:15:83:54:3c:20: 74:e4:a2:6e:d3:dc:53:35:bf:21:35:19:9f:d3:7e: fc:55:9f:29:16:ba:cf:72:f7:d0:a7:ed:10:ce:61: b6:19:f8:96:61:27:81:98:8c:ae:1d:33:d8:75:b7: fa:9b:f4:6f:d7:17:5d:62:0e:5c:9d:f5:83:f1:42: 26:b1:92:a9:c0:64:ab:18:0d:10:a2:7c:be:e3:e1: 6e:fa:bb:c2:44:12:60:f4:24:b1:4b:8f:e5:4a:6e: f0:74:73:4f:b1:dd:25:da:a5:d7:35:3f:a6:76:c0: d2:db:18:30:a2:36:b0:96:87:65:4f:a3:0d:1f:f0: 79:a5:32:1c:a6:eb:16:7d:4e:d3:8c:af:65:46:5a: f7:52:7a:2e:e9:14:5c:db:79:95:86:76:83:bb:cd: 3a:13:7c:d2:05:d2:ed:e9:86:77:7c:09:52:73:b9: 21:b2:5a:d9:bc:6e:eb:9b:dd:e4:4b:47:31:e8:d0: ae:38:92:66:27:63:38:d5:61:8f:6e:e4:1e:07:44: fb:4f:b0:81:1c:41:7a:9b:01:81:3a:e5:4e:33:23: 2f:d2:8c:65:9b:cc:28:76:58:5e:63:e3:93:b1:c7: 0a:fa:3e:ae:6b:64:57:7c:ef:ab:78:9f:89:f3:af: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:50:D9:55:52:52:2B:05:B4:1F:A8:FD:12:91:AC:6E:8C:38:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:df:ab:98:62:f7:cf:6d:b9:fc:59:25:b4:59:5f:be:c4:99: 47:52:48:96:a5:c7:05:c6:ff:9f:51:3a:a2:b9:e5:7e:4f:fd: c2:14:dd:34:db:84:4d:3c:7a:88:13:28:76:5a:e1:46:83:d4: f4:cd:04:fd:bf:0b:6c:32:10:05:1f:07:26:ce:23:0b:4c:01: f5:06:36:cc:ee:7c:1a:8a:b9:f0:19:92:ac:8e:b6:f8:fe:16: 48:31:fb:df:a2:3a:2f:e8:1a:60:f7:2c:d5:8d:23:5d:00:61: 05:ea:20:91:52:4f:c4:5d:aa:d4:71:9f:79:0f:24:5c:eb:93: c7:c0:3b:7b:3d:e4:4c:4d:28:9b:71:ee:d0:b9:a6:d0:2a:23: 26:48:82:7c:82:15:c2:d9:b2:0d:c2:fb:fa:12:20:a7:86:a8: e2:fa:ae:ee:9c:2c:fa:9e:6e:d5:68:79:26:33:60:ad:50:13: 41:63:89:15:fd:c8:a6:16:16:43:c6:bb:01:de:26:9e:c4:c6: c3:98:df:dd:1d:f4:65:d3:66:25:5a:90:30:1d:aa:eb:5e:e2: c8:f8:49:78:89:bd:eb:c3:2f:51:a1:aa:92:21:dd:86:e1:ed: 83:1e:61:d6:17:8c:69:b5:a8:7c:10:d0:61:1c:d8:69:c6:4e: 20:ae:46:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DlZDiXA2LuaF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTg2MTMwNmUtZTE3Zi00MTE1LWE3ZDQtNmJkMDlkODBiZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVv7NYTUk1edFYNUPCB05KJu09xTNb8hNRmf 0378VZ8pFrrPcvfQp+0QzmG2GfiWYSeBmIyuHTPYdbf6m/Rv1xddYg5cnfWD8UIm sZKpwGSrGA0Qony+4+Fu+rvCRBJg9CSxS4/lSm7wdHNPsd0l2qXXNT+mdsDS2xgw ojawlodlT6MNH/B5pTIcpusWfU7TjK9lRlr3Unou6RRc23mVhnaDu806E3zSBdLt 6YZ3fAlSc7khslrZvG7rm93kS0cx6NCuOJJmJ2M41WGPbuQeB0T7T7CBHEF6mwGB OuVOMyMv0oxlm8wodlheY+OTsccK+j6ua2RXfO+reJ+J86/VpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFckUNlVUlIrBbQfqP0SkaxujDgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvOTEyZjVlYWEtOWE5ZC0z ZDhiLTgwMTItMTA2OTBjOWU1MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbfq5hi989tufxZJbRZX77EmUdSSJalxwXG/59ROqK55X5P/cIU3TTb hE08eogTKHZa4UaD1PTNBP2/C2wyEAUfBybOIwtMAfUGNszufBqKufAZkqyOtvj+ Fkgx+9+iOi/oGmD3LNWNI10AYQXqIJFST8RdqtRxn3kPJFzrk8fAO3s95ExNKJtx 7tC5ptAqIyZIgnyCFcLZsg3C+/oSIKeGqOL6ru6cLPqebtVoeSYzYK1QE0FjiRX9 yKYWFkPGuwHeJp7ExsOY390d9GXTZiVakDAdqute4sj4SXiJvevDL1GhqpIh3Ybh 7YMeYdYXjGm1qHwQ0GEc2GnGTiCuRv0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:53:19 2025 by rpki-client