$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa File: 9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa (raw, json) Hash identifier: J84/JnTpRYQlaWhv0ZDAhI8USJM4pXXVGtTzmRJBENg= Subject key identifier: 57:28:88:B5:F9:BA:78:28:3F:BF:42:E0:5F:C3:55:47:B4:11:BC:B5 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F432858488AE09A5C63D93A5E51338D00 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 46841 IP address blocks: 199.87.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:9a:5c:63:d9:3a:5e:51:33:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=e28358da-a20e-4d26-b43d-5adc49553762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:e6:f8:3c:0b:64:57:c1:66:d6:3e:7f:52: dc:bb:2d:a3:12:66:7d:90:a7:f6:24:3b:03:a1:2b: 2c:2c:0c:ac:63:89:a7:9c:46:d0:37:e3:38:42:54: 67:8e:b6:49:b5:93:e4:e2:a7:d3:c9:d3:06:e8:a4: f3:46:0e:40:9d:c3:b9:19:27:73:46:54:f4:b4:57: b9:c9:9e:35:ae:6a:f5:dd:f7:78:b1:bf:c5:f4:6a: 36:4d:2d:de:4d:9d:37:91:0c:9f:81:1f:be:9e:23: 2b:49:be:a4:bf:8f:8f:bd:cc:73:45:44:a2:77:40: 4e:65:3b:04:09:ec:a9:0c:f4:3b:90:20:0a:cb:0c: 6a:00:2c:bb:42:5f:f8:37:db:0d:65:89:07:41:82: 46:64:63:5b:b8:c4:83:01:c6:6b:10:ad:7c:79:42: bd:ea:c9:9c:ed:90:42:d7:2f:11:31:11:4b:91:08: 4b:06:8d:27:4f:d6:76:c6:dd:2f:fd:e7:69:c2:cc: 89:30:31:6a:83:2a:10:2d:f8:f6:12:0b:99:64:41: 7e:fe:ee:85:f6:e3:d1:a7:8f:4f:07:eb:91:3a:4a: 1d:2f:f4:c6:0e:8d:ab:42:04:a1:09:b3:c2:4f:18: f3:54:de:3c:2a:35:cc:bb:d5:33:86:ee:7e:ee:e5: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:88:B5:F9:BA:78:28:3F:BF:42:E0:5F:C3:55:47:B4:11:BC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9e81f3eb-9d61-3a5b-8c2c-219fe8fdd0d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 199.87.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4e:92:cc:79:ff:8d:51:ce:cb:d3:e4:38:64:34:17:ca:fe: d5:4b:6c:76:91:e9:a9:ca:f1:5f:11:00:3a:39:df:15:5f:18: 61:71:45:07:22:17:db:3d:9a:2c:39:1a:3c:25:22:a1:e3:6c: 26:d2:92:94:85:d6:8a:80:84:80:9f:81:a4:c2:b0:02:45:e3: 97:57:2f:45:ba:03:54:6f:5d:9f:12:48:68:c1:06:f0:25:1e: ff:e5:6d:d5:91:0b:1e:a6:72:f9:fc:ed:2b:20:ab:35:42:0b: 07:c6:62:36:ae:43:54:c2:81:8d:dc:c1:52:f7:10:38:90:3a: b5:3c:4d:82:7e:3c:28:1c:49:69:dc:97:e4:cc:90:d1:e6:11: e0:df:82:1b:72:69:cb:9f:c7:36:f5:7f:7f:00:81:69:32:ec: b7:6c:18:6b:ff:5e:c2:63:37:d9:84:aa:ee:8f:e1:e9:78:a5: 92:ce:39:69:44:d1:2e:6b:47:6d:dc:3f:db:07:92:c6:76:ef: 04:67:ac:8e:f2:33:87:49:21:e8:2f:1a:fe:ca:0a:bf:29:22: be:e6:a4:b3:cc:96:6b:51:38:99:57:af:01:0a:12:fe:8b:75: 19:bb:5c:cf:f7:89:79:4b:9d:a1:d5:02:1e:b9:28:71:40:89: 64:aa:b9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JpcY9k6XlEzjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk ZTI4MzU4ZGEtYTIwZS00ZDI2LWI0M2QtNWFkYzQ5NTUzNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRrm+DwLZFfBZtY+f1Lcuy2jEmZ9kKf2JDsD oSssLAysY4mnnEbQN+M4QlRnjrZJtZPk4qfTydMG6KTzRg5AncO5GSdzRlT0tFe5 yZ41rmr13fd4sb/F9Go2TS3eTZ03kQyfgR++niMrSb6kv4+PvcxzRUSid0BOZTsE CeypDPQ7kCAKywxqACy7Ql/4N9sNZYkHQYJGZGNbuMSDAcZrEK18eUK96smc7ZBC 1y8RMRFLkQhLBo0nT9Z2xt0v/edpwsyJMDFqgyoQLfj2EguZZEF+/u6F9uPRp49P B+uROkodL/TGDo2rQgShCbPCTxjzVN48KjXMu9Uzhu5+7uWqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcoiLX5ungoP79C4F/DVUe0Eby1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOWU4MWYzZWItOWQ2MS0z YTViLThjMmMtMjE5ZmU4ZmRkMGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1fkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFOksx5/41RzsvT5DhkNBfK/tVLbHaR6anK8V8RADo53xVfGGFxRQci F9s9miw5GjwlIqHjbCbSkpSF1oqAhICfgaTCsAJF45dXL0W6A1RvXZ8SSGjBBvAl Hv/lbdWRCx6mcvn87SsgqzVCCwfGYjauQ1TCgY3cwVL3EDiQOrU8TYJ+PCgcSWnc l+TMkNHmEeDfghtyacufxzb1f38AgWky7LdsGGv/XsJjN9mEqu6P4el4pZLOOWlE 0S5rR23cP9sHksZ27wRnrI7yM4dJIegvGv7KCr8pIr7mpLPMlmtROJlXrwEKEv6L dRm7XM/3iXlLnaHVAh65KHFAiWSquR0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:11 2025 by rpki-client