$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa File: 7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa (raw, json) Hash identifier: FaVQKpZmU2K6YwPoFV+UhTaNGpSIb0wLD7HcL1NyZeM= Subject key identifier: 77:7A:61:27:E7:47:37:B1:E7:A1:FB:DC:28:FB:49:F2:DD:3B:5A:07 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F43285848BE8632329C0E84A48D7DD5A0 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 6939 IP address blocks: 208.86.34.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:32:32:9c:0e:84:a4:8d:7d:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=d60ddc88-ffdd-496e-b038-8e64d6180919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:ea:c1:bc:87:c2:41:bf:15:cd:b0:f2:6a: 76:94:8f:cb:c1:af:0d:83:ef:e2:53:c8:70:ad:71: 90:f5:ef:b6:92:f0:1f:03:b3:51:ed:09:51:3f:0e: e0:79:3b:c3:51:09:eb:f7:9a:11:7a:98:1a:8a:d8: d0:52:a9:b7:01:f7:86:6d:92:61:cf:53:21:98:4e: 38:98:11:9b:58:41:f8:bf:ef:d1:3c:05:8b:2e:5a: b7:f8:de:35:a8:74:75:37:d3:47:4b:33:04:bd:a1: 18:14:23:f2:ec:54:74:d0:32:ac:0d:f6:7e:21:16: 40:01:78:da:05:9f:cf:a4:1a:5f:66:6b:40:70:51: e8:c8:f8:80:a3:34:e8:ca:55:7a:8a:26:2e:1f:bb: 34:a8:19:79:58:8d:9a:0a:ea:5c:88:ec:c3:8a:f1: bf:a1:f2:80:3a:a9:4d:d7:6a:f5:ef:f6:38:2d:44: 7c:c7:5b:d1:aa:db:46:e7:f4:f0:b9:41:52:c9:43: 43:3c:33:15:8b:1f:98:99:eb:33:45:26:76:65:19: d2:4d:ab:b0:73:a2:b1:64:42:a7:8d:95:c7:21:3f: 58:af:e4:6a:51:c2:ca:3a:ca:fe:61:b9:3e:a5:9d: 6c:98:49:53:37:9e:16:52:19:03:e1:bf:7b:d4:53: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7A:61:27:E7:47:37:B1:E7:A1:FB:DC:28:FB:49:F2:DD:3B:5A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/7665c4b2-0d8b-32d7-93ad-d779d52f2c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:08:82:3f:26:80:b5:b2:96:0f:07:67:e6:4d:6e:1d:83:d7: 0e:0b:da:9a:13:55:5d:38:74:e7:15:52:47:fe:16:ab:76:53: 84:67:e5:bf:93:61:91:3d:eb:d1:b0:88:23:e8:4a:a1:60:01: d5:75:ae:c7:88:c8:bb:c3:68:29:a5:90:26:9e:c1:bd:5b:0b: df:f2:a4:ab:39:fe:a6:e9:c9:a1:bf:37:52:e1:3b:50:dc:3e: 8c:3d:34:a7:cd:7e:4f:02:ad:14:7f:07:3b:b4:65:f5:40:2a: ab:af:dd:b4:fa:34:24:f6:7d:6f:37:03:0c:36:9d:d7:a7:ab: 41:26:15:d2:d1:89:ad:12:12:7a:44:72:5e:f8:d6:5e:f0:61: d2:c4:39:fa:37:fc:50:76:fb:cc:0a:89:15:63:96:8e:6e:5e: 7f:41:89:68:e8:3f:3f:60:42:5b:77:40:8b:1f:64:dd:4e:63: ed:a7:2a:13:fe:49:82:20:e3:9b:09:21:2b:bd:98:67:d0:f9: 7e:07:1c:8a:d5:26:6c:98:f4:7e:b8:e2:81:f3:e1:7d:bb:af: 41:65:35:d2:81:3e:99:80:59:47:33:ef:93:6b:79:83:b2:22: da:57:9f:14:04:32:2b:30:98:6b:35:33:9f:a3:d3:b0:a9:11: c3:86:f2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjIynA6EpI191aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk ZDYwZGRjODgtZmZkZC00OTZlLWIwMzgtOGU2NGQ2MTgwOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRXqwbyHwkG/Fc2w8mp2lI/Lwa8Ng+/iU8hw rXGQ9e+2kvAfA7NR7QlRPw7geTvDUQnr95oRepgaitjQUqm3AfeGbZJhz1MhmE44 mBGbWEH4v+/RPAWLLlq3+N41qHR1N9NHSzMEvaEYFCPy7FR00DKsDfZ+IRZAAXja BZ/PpBpfZmtAcFHoyPiAozToylV6iiYuH7s0qBl5WI2aCupciOzDivG/ofKAOqlN 12r17/Y4LUR8x1vRqttG5/TwuUFSyUNDPDMVix+YmeszRSZ2ZRnSTauwc6KxZEKn jZXHIT9Yr+RqUcLKOsr+Ybk+pZ1smElTN54WUhkD4b971FPvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd6YSfnRzex56H73Cj7SfLdO1oHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvNzY2NWM0YjItMGQ4Yi0z MmQ3LTkzYWQtZDc3OWQ1MmYyYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4Igj8mgLWylg8HZ+ZNbh2D1w4L2poTVV04dOcVUkf+Fqt2U4Rn5b+T YZE969GwiCPoSqFgAdV1rseIyLvDaCmlkCaewb1bC9/ypKs5/qbpyaG/N1LhO1Dc Pow9NKfNfk8CrRR/Bzu0ZfVAKquv3bT6NCT2fW83Aww2ndenq0EmFdLRia0SEnpE cl741l7wYdLEOfo3/FB2+8wKiRVjlo5uXn9BiWjoPz9gQlt3QIsfZN1OY+2nKhP+ SYIg45sJISu9mGfQ+X4HHIrVJmyY9H644oHz4X27r0FlNdKBPpmAWUcz75NreYOy ItpXnxQEMiswmGs1M5+j07CpEcOG8uU= -----END CERTIFICATE-----Generated at Tue Apr 8 11:01:11 2025 by rpki-client