$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa File: 88e77858-b9ca-3b6c-b230-556e315ebe37.roa (raw, json) Hash identifier: C96LRI0eVrhlwep58Dealh/7fxdySPD+/sUGlfQMoSE= Subject key identifier: C4:05:94:57:FF:0A:9C:C4:FF:D6:92:B2:B9:DB:90:AD:84:E4:0C:57 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F432858493ED3D3EC33ABAC781AFC49D8 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 6939 IP address blocks: 208.86.35.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d3:ec:33:ab:ac:78:1a:fc:49:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=5caadad7-83c8-44e6-80f5-131bedb261c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:6b:a8:30:46:96:e8:a0:c8:93:3e:b6:b4: bf:c9:5a:02:f5:6a:19:c8:dc:82:e9:0b:72:02:62: fe:0c:44:11:96:12:fd:e6:50:68:23:e6:e9:61:b5: 67:d8:f2:c2:91:ba:c4:03:c6:df:fc:43:39:56:fc: 83:61:08:2d:7b:82:56:cb:62:e9:0c:b0:ee:dc:f2: 2b:80:18:e4:cc:7f:f9:75:63:57:af:8f:94:ee:19: 22:42:56:93:35:ad:e7:1f:d7:5a:99:12:ba:14:58: 83:e2:6b:92:08:f4:96:f5:1c:87:c9:1c:f0:54:4b: e1:3a:06:29:84:2b:32:50:eb:3e:82:fd:6d:bd:95: 62:51:d1:e2:05:ce:d3:c4:2d:b2:7f:00:e4:a0:fb: d5:a9:46:34:86:1a:7a:12:08:f3:2b:3c:39:33:c3: 9b:74:f1:48:d7:c5:51:bd:f4:5f:ee:1e:bb:06:ea: 79:3f:07:40:13:1d:74:00:ef:03:c0:80:09:b9:a8: e4:7e:b4:dc:b7:2c:3a:14:9a:e5:b6:50:e1:22:dd: cc:ff:e5:3a:c2:7b:4d:ad:e7:d7:c0:91:7b:cc:b6: c8:bd:a1:0f:92:f4:23:95:24:d1:8d:09:26:e3:0b: 5a:65:ad:b0:ec:aa:da:55:fc:8e:1a:e1:36:a3:43: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:94:57:FF:0A:9C:C4:FF:D6:92:B2:B9:DB:90:AD:84:E4:0C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9a:f1:2c:d7:3d:5d:19:f6:77:04:f4:e4:9f:ec:d1:49:23: a0:d2:2f:a8:d5:b5:f8:b2:51:31:ae:87:39:15:05:80:91:de: 9e:ec:1b:ae:2a:01:12:12:f3:7e:f8:c4:1f:77:62:ad:21:aa: 10:ef:1a:9d:8c:11:6d:6e:90:0f:9e:e9:f1:c9:a4:2d:27:c8: b8:7b:09:4d:90:2a:df:56:8e:0e:ef:7b:82:02:5c:7f:70:df: fe:95:49:fb:85:b8:7f:a8:49:56:d0:b8:60:34:da:36:17:e4: f8:c9:ef:1d:41:9a:d1:b4:a8:74:c9:c3:ea:fa:3c:24:22:0f: 1f:64:cc:86:61:a5:32:7d:d1:d7:b1:04:fa:00:49:c9:2f:23: fc:bc:06:b7:25:2a:e9:f8:1d:9d:b4:e2:aa:97:86:a8:bf:8d: 11:77:da:20:22:2d:cc:e5:2a:5c:ad:76:bc:37:d2:c9:16:04: 4e:b5:47:40:ee:7e:74:ea:4d:32:04:b7:66:5c:9f:0a:1f:ad: 11:48:16:f2:d9:3d:21:9f:94:51:6b:ca:f2:25:13:09:32:ac: 2b:68:8c:22:22:28:71:71:42:8a:74:93:57:2f:e8:f9:67:f1: 51:9a:02:4c:58:3f:43:7e:d3:dc:22:be:f8:3f:68:f4:a2:28: e5:98:ad:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09PsM6useBr8SdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NWNhYWRhZDctODNjOC00NGU2LTgwZjUtMTMxYmVkYjI2MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ZrqDBGluigyJM+trS/yVoC9WoZyNyC6Qty AmL+DEQRlhL95lBoI+bpYbVn2PLCkbrEA8bf/EM5VvyDYQgte4JWy2LpDLDu3PIr gBjkzH/5dWNXr4+U7hkiQlaTNa3nH9damRK6FFiD4muSCPSW9RyHyRzwVEvhOgYp hCsyUOs+gv1tvZViUdHiBc7TxC2yfwDkoPvVqUY0hhp6EgjzKzw5M8ObdPFI18VR vfRf7h67Bup5PwdAEx10AO8DwIAJuajkfrTctyw6FJrltlDhIt3M/+U6wntNrefX wJF7zLbIvaEPkvQjlSTRjQkm4wtaZa2w7KraVfyOGuE2o0Nu1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQFlFf/CpzE/9aSsrnbkK2E5AxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvODhlNzc4NTgtYjljYS0z YjZjLWIyMzAtNTU2ZTMxNWViZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FYjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACua8SzXPV0Z9ncE9OSf7NFJI6DSL6jVtfiyUTGuhzkVBYCR3p7sG64q ARIS8374xB93Yq0hqhDvGp2MEW1ukA+e6fHJpC0nyLh7CU2QKt9Wjg7ve4ICXH9w 3/6VSfuFuH+oSVbQuGA02jYX5PjJ7x1BmtG0qHTJw+r6PCQiDx9kzIZhpTJ90dex BPoASckvI/y8BrclKun4HZ204qqXhqi/jRF32iAiLczlKlytdrw30skWBE61R0Du fnTqTTIEt2ZcnwofrRFIFvLZPSGflFFryvIlEwkyrCtojCIiKHFxQop0k1cv6Pln 8VGaAkxYP0N+09wivvg/aPSiKOWYrZQ= -----END CERTIFICATE-----Generated at Tue Apr 8 11:13:34 2025 by rpki-client