$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa File: d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa (raw, json) Hash identifier: x98iRA+5TUE+KwBQAnVjUupcE3De52YA6or0b4gLB2U= Subject key identifier: 34:89:15:A0:BE:6C:FE:03:7D:F0:77:12:38:5A:4F:E8:0A:62:28:D0 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F43285848748B1E1149F03FF3D890C780 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 54098 IP address blocks: 100.42.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1e:11:49:f0:3f:f3:d8:90:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=f4622785-a484-4f5f-b53a-eee5fd926293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:08:1e:b5:5b:3d:52:0b:a0:23:ed:6f:ba: 95:86:79:ba:37:c5:22:de:28:e3:12:d8:77:a9:50: 1e:82:77:04:c0:1f:55:56:8f:c5:a3:d8:81:50:33: 88:fb:af:16:82:69:0f:16:ec:81:b1:1b:f9:6f:35: 8d:0a:ac:d5:54:62:ae:95:7d:1c:63:7a:3d:b4:4b: 08:e2:a1:47:0c:96:d3:4e:11:ea:55:00:fe:52:a0: 93:6c:dc:60:de:71:7b:e1:56:b2:f6:9c:16:8e:50: 27:5a:00:a5:1a:0d:bf:6d:68:0c:11:e2:64:bb:e5: 65:7c:a7:79:d1:e1:69:06:37:f8:74:e6:cb:f5:42: 9b:7e:b5:8d:09:1d:c4:d9:ff:20:5d:4e:f0:56:a1: 40:e4:33:26:53:0d:fd:33:c2:8a:c7:12:bb:47:d3: c4:9d:c5:22:bc:6e:c5:16:47:1c:e2:eb:37:2a:98: 5f:a6:92:b0:3b:d8:1b:87:70:6d:e8:44:6d:e7:b0: 26:6d:f9:c6:54:34:ff:46:2c:3b:d6:7d:12:8f:a3: 29:68:8f:71:6b:b2:99:89:43:35:60:06:3d:55:63: eb:6c:42:8e:5d:ff:fe:52:c1:df:83:64:d9:92:6b: 77:57:fe:5f:a4:db:d4:1c:ab:ff:c7:bf:90:33:94: 92:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:89:15:A0:BE:6C:FE:03:7D:F0:77:12:38:5A:4F:E8:0A:62:28:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:55:0c:1e:29:bd:43:56:65:ad:57:cd:a9:8f:a1:31:a4:43: b8:7b:7f:9e:66:46:1a:c9:33:bd:7b:6a:91:d2:d2:d7:3a:41: 4e:8d:ab:66:6d:be:79:b5:88:6e:43:a8:24:9a:62:ee:a8:7d: 38:22:9c:8e:83:4e:8d:eb:22:c6:97:5f:ad:80:a1:8f:b7:b2: 9b:af:64:9b:f9:c0:9d:84:ff:d8:ce:7e:30:76:c0:99:b5:91: ae:d3:bf:6c:18:94:c0:fa:d5:01:a5:39:41:d4:1f:a5:d7:e4: db:19:5e:1c:e1:84:b9:73:ff:47:57:a0:9f:fa:80:7c:20:85: 76:73:36:e8:1a:d1:d4:7c:23:cd:22:d2:e1:fb:8f:db:e2:73: 21:f5:28:b9:3b:c3:ad:a9:2b:5b:2c:4e:fc:5f:01:51:09:83: 9a:73:cb:fb:9f:2b:b3:da:d3:83:72:bc:f2:bc:5c:72:09:99: fd:7a:3a:c0:7c:fb:ba:73:e1:92:fe:e6:e7:e5:51:ec:93:ba: d7:51:ad:7f:4e:24:f5:19:0d:31:cc:45:b4:75:82:61:39:2b: c4:cb:bf:a5:13:f8:41:7a:d0:6b:31:f6:2b:9e:9f:16:c5:6a: 2f:14:7a:3a:ba:76:a7:9e:f3:9f:a2:11:55:57:a5:0b:1e:31: b0:d3:45:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ix4RSfA/89iQx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ2MjI3ODUtYTQ4NC00ZjVmLWI1M2EtZWVlNWZkOTI2MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVsIHrVbPVILoCPtb7qVhnm6N8Ui3ijjEth3 qVAegncEwB9VVo/Fo9iBUDOI+68WgmkPFuyBsRv5bzWNCqzVVGKulX0cY3o9tEsI 4qFHDJbTThHqVQD+UqCTbNxg3nF74Vay9pwWjlAnWgClGg2/bWgMEeJku+VlfKd5 0eFpBjf4dObL9UKbfrWNCR3E2f8gXU7wVqFA5DMmUw39M8KKxxK7R9PEncUivG7F Fkcc4us3KphfppKwO9gbh3Bt6ERt57AmbfnGVDT/Riw71n0Sj6MpaI9xa7KZiUM1 YAY9VWPrbEKOXf/+UsHfg2TZkmt3V/5fpNvUHKv/x7+QM5SS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSJFaC+bP4DffB3EjhaT+gKYijQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZDhmOGE5YmUtNGYwOC0z ZjIzLWE1OTgtZTc5ZTQ4YWNhYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZCobMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1VDB4pvUNWZa1XzamPoTGkQ7h7f55mRhrJM717apHS0tc6QU6Nq2Zt vnm1iG5DqCSaYu6ofTginI6DTo3rIsaXX62AoY+3spuvZJv5wJ2E/9jOfjB2wJm1 ka7Tv2wYlMD61QGlOUHUH6XX5NsZXhzhhLlz/0dXoJ/6gHwghXZzNuga0dR8I80i 0uH7j9vicyH1KLk7w62pK1ssTvxfAVEJg5pzy/ufK7Pa04NyvPK8XHIJmf16OsB8 +7pz4ZL+5uflUeyTutdRrX9OJPUZDTHMRbR1gmE5K8TLv6UT+EF60Gsx9iuenxbF ai8Uejq6dqee85+iEVVXpQseMbDTRUM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:32 2025 by rpki-client