$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa File: 39dd6475-e512-3d33-a668-8df455daedf3.roa (raw, json) Hash identifier: XzWSkg04B6PLyyYYgPm4Fw/pkpA+bJGHA/NFqGlKQgc= Subject key identifier: CB:09:CE:A1:3E:50:2B:83:AE:02:2B:2D:83:CF:88:52:27:09:FE:B8 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F432858488AE09A36715E5E11E605B7F0 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 46841 IP address blocks: 104.153.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:9a:36:71:5e:5e:11:e6:05:b7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=0f8930db-1be4-4934-96b6-121a419b5e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:d8:98:13:7c:7f:c5:85:27:3d:90:f1:fb: 9a:b5:75:5f:67:16:f4:e5:4c:10:a9:b2:b6:f3:35: ac:66:f5:98:34:f8:df:1b:97:3e:02:2d:8f:1b:1a: a2:69:4e:e8:78:ea:a3:90:22:63:35:d4:00:7e:ff: 89:64:31:29:4f:63:6e:ee:81:6e:f2:07:cc:8e:70: 8b:f2:8c:76:f8:90:9e:00:a8:e7:c4:c3:a2:25:ed: 4d:d1:bd:85:90:5c:9b:8b:65:4e:1e:dc:ab:f3:65: 2a:86:21:20:9a:99:3a:47:4d:59:e8:2a:61:a1:10: b1:35:bc:2f:06:99:bd:13:f6:e4:5a:79:41:75:78: 7b:16:81:ad:4d:72:b0:73:92:77:11:3d:0d:75:53: 4e:93:be:a0:ef:74:f1:77:95:a1:0b:7e:42:5a:86: 21:ec:74:04:ef:46:95:ed:be:7a:a4:e9:80:b6:6b: 2a:9c:28:5a:bf:55:c7:7c:c5:e9:77:14:a4:a9:5d: ec:66:85:c5:89:6b:b4:ab:b5:18:95:78:d1:64:47: 49:8d:2a:89:6c:e2:9a:44:69:55:9f:42:fb:b8:b8: 9f:ed:65:d4:26:f0:8c:f5:4f:66:3c:94:8e:ff:c1: 96:7f:d9:2f:89:61:fa:cc:c4:49:0d:c0:9f:25:b0: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:09:CE:A1:3E:50:2B:83:AE:02:2B:2D:83:CF:88:52:27:09:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/39dd6475-e512-3d33-a668-8df455daedf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.153.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:5b:72:2a:88:45:a2:b8:1d:f1:8e:50:8c:76:bd:8a:ac:3f: 1e:5a:0f:0d:39:31:ef:6a:03:6b:19:be:49:ab:28:78:a9:29: b9:91:06:10:fb:f0:d3:16:1f:14:df:20:11:a0:72:5f:63:dd: 19:3c:ee:24:1d:a1:55:9f:ad:7e:cd:7c:79:98:8e:37:49:7c: 95:38:8d:91:5f:a7:35:6b:b8:8a:16:96:8d:19:19:84:6e:cd: 75:82:b1:c4:5d:32:71:63:58:44:f1:bd:86:f6:d2:7d:8b:26: fd:ce:89:57:ab:a5:aa:d7:51:52:a6:a0:0f:fc:38:68:c5:86: af:d4:3a:74:57:5a:bd:51:b5:f2:02:50:ba:e1:23:8d:93:76: 5d:96:d4:9a:fe:c8:ae:78:0e:87:25:95:58:47:4e:1d:3e:48: b3:eb:07:65:89:26:b4:01:17:2e:37:4c:08:b6:04:91:47:c2: 51:a5:5d:44:34:8e:20:20:32:97:d5:96:6b:b9:ff:4f:fd:38: a7:71:30:2c:d4:b3:7d:71:c0:3e:c8:84:0c:66:4f:d0:a9:10: 79:23:99:d8:94:d3:75:18:32:c8:8f:f3:09:78:f5:3d:d3:7a: 03:d5:10:0b:e5:54:26:b0:b8:48:df:a4:4f:5e:8c:61:e3:c4: df:65:f5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4Jo2cV5eEeYFt/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk MGY4OTMwZGItMWJlNC00OTM0LTk2YjYtMTIxYTQxOWI1ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8PYmBN8f8WFJz2Q8fuatXVfZxb05UwQqbK2 8zWsZvWYNPjfG5c+Ai2PGxqiaU7oeOqjkCJjNdQAfv+JZDEpT2Nu7oFu8gfMjnCL 8ox2+JCeAKjnxMOiJe1N0b2FkFybi2VOHtyr82UqhiEgmpk6R01Z6CphoRCxNbwv Bpm9E/bkWnlBdXh7FoGtTXKwc5J3ET0NdVNOk76g73Txd5WhC35CWoYh7HQE70aV 7b56pOmAtmsqnChav1XHfMXpdxSkqV3sZoXFiWu0q7UYlXjRZEdJjSqJbOKaRGlV n0L7uLif7WXUJvCM9U9mPJSO/8GWf9kviWH6zMRJDcCfJbAVgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsJzqE+UCuDrgIrLYPPiFInCf64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMzlkZDY0NzUtZTUxMi0z ZDMzLWE2NjgtOGRmNDU1ZGFlZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVbciqIRaK4HfGOUIx2vYqsPx5aDw05Me9qA2sZvkmrKHipKbmRBhD7 8NMWHxTfIBGgcl9j3Rk87iQdoVWfrX7NfHmYjjdJfJU4jZFfpzVruIoWlo0ZGYRu zXWCscRdMnFjWETxvYb20n2LJv3OiVerparXUVKmoA/8OGjFhq/UOnRXWr1RtfIC ULrhI42Tdl2W1Jr+yK54DocllVhHTh0+SLPrB2WJJrQBFy43TAi2BJFHwlGlXUQ0 jiAgMpfVlmu5/0/9OKdxMCzUs31xwD7IhAxmT9CpEHkjmdiU03UYMsiP8wl49T3T egPVEAvlVCawuEjfpE9ejGHjxN9l9XA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:35 2025 by rpki-client