$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa File: d2408058-ca51-3795-af09-80fd33f404a8.roa (raw, json) Hash identifier: rFS3a4nr8aWWRIwlGV4aVqxXOEn9cbSJQvtcw5meIjA= Subject key identifier: 46:36:76:86:76:96:B8:54:35:BC:E2:7E:BC:9E:AA:47:7B:17:62:7F Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F43285848A400B9396E1D45447F765880 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 397270 IP address blocks: 208.86.32.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:b9:39:6e:1d:45:44:7f:76:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=823f8767-2fb9-4e85-87ec-360cc59a86b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:3b:2a:45:3b:2b:ea:37:f1:6b:7e:1f:6e: 75:8f:51:92:c1:a9:fc:82:ca:8f:fa:7b:d8:49:d1: 0a:bc:8e:cc:e5:12:cc:46:d3:9c:7c:4c:54:77:5a: 80:13:5a:55:24:b6:9b:7d:b1:b2:7f:e8:ef:d4:7b: 43:4b:31:5f:ff:df:ae:2f:1e:87:61:23:f2:36:7d: 9d:8b:ab:bf:04:f4:99:d1:37:a7:d8:b6:c6:6e:f7: 51:2d:95:d8:de:c2:1c:31:fd:dc:40:85:53:5e:aa: 0a:0e:14:cb:fe:d7:60:53:e0:f1:70:fb:c4:38:e7: 60:47:f1:85:63:99:f8:0b:c0:dd:de:33:6f:d6:b8: 1e:de:0f:b9:e5:72:5d:cb:38:25:38:c5:84:46:1f: 4e:38:53:6b:d1:05:e4:69:0d:59:11:d3:ca:aa:0b: e2:46:fb:d8:db:4f:d1:f0:33:c7:5c:d4:ac:96:a1: e4:b1:0f:96:b1:c4:fd:64:9a:30:60:fb:1d:ff:4c: d5:0f:43:f0:8e:c2:b9:34:0f:f4:f7:1f:08:cf:80: e1:6f:2c:c5:1b:e4:11:ec:86:b1:5c:37:50:58:bc: e9:3d:ae:07:cf:aa:f5:5d:d5:38:8e:fc:66:20:2f: a1:67:2b:35:e8:41:7a:38:f1:19:49:41:5f:ad:8e: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:76:86:76:96:B8:54:35:BC:E2:7E:BC:9E:AA:47:7B:17:62:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:12:40:02:cb:f7:96:95:8d:f6:db:d7:d2:3b:db:72:41:21: 51:7f:de:17:67:26:12:7a:1c:d4:06:68:35:05:c3:59:02:20: 79:4f:b2:04:f4:ad:db:13:2e:7a:2a:61:d9:0a:cd:51:35:35: 54:18:d3:ea:e0:ba:a8:4e:f7:c4:54:90:66:11:8d:35:85:01: 4e:5f:41:a1:c7:67:f1:95:9e:56:8c:fb:5e:b8:09:c0:7d:97: 7c:1f:68:1b:e5:27:e1:d4:ee:ec:79:27:5e:89:f3:a5:00:10: 19:00:e9:36:94:e0:5c:13:76:b0:46:2e:fd:3a:06:f3:e5:3c: 71:a3:1a:a1:53:33:d7:bd:25:ab:da:c6:c5:36:f9:45:63:4a: 5e:43:87:4d:93:49:67:3d:f0:9d:6d:7f:78:75:e7:16:28:7a: 15:84:1e:e3:2e:3f:cb:07:eb:0a:06:6b:89:23:41:e7:91:0d: bb:04:0b:95:da:cf:1e:26:b4:fe:22:a3:ee:06:48:26:a4:99: 94:b8:3d:3b:ac:f1:a8:9b:72:9f:5a:a9:6a:43:d5:2b:85:81: ca:ad:db:82:e9:36:3f:bf:16:10:bc:ef:ff:d5:af:a6:ad:a1: 88:c8:52:4a:a6:57:dd:ea:bf:8e:7e:6b:7c:da:1a:af:3c:68: 4e:7d:ae:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALk5bh1FRH92WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk ODIzZjg3NjctMmZiOS00ZTg1LTg3ZWMtMzYwY2M1OWE4NmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoys7KkU7K+o38Wt+H251j1GSwan8gsqP+nvY SdEKvI7M5RLMRtOcfExUd1qAE1pVJLabfbGyf+jv1HtDSzFf/9+uLx6HYSPyNn2d i6u/BPSZ0Ten2LbGbvdRLZXY3sIcMf3cQIVTXqoKDhTL/tdgU+DxcPvEOOdgR/GF Y5n4C8Dd3jNv1rge3g+55XJdyzglOMWERh9OOFNr0QXkaQ1ZEdPKqgviRvvY20/R 8DPHXNSslqHksQ+WscT9ZJowYPsd/0zVD0PwjsK5NA/09x8Iz4DhbyzFG+QR7Iax XDdQWLzpPa4Hz6r1XdU4jvxmIC+hZys16EF6OPEZSUFfrY4NzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY2doZ2lrhUNbzifryeqkd7F2J/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvZDI0MDgwNTgtY2E1MS0z Nzk1LWFmMDktODBmZDMzZjQwNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8SQALL95aVjfbb19I723JBIVF/3hdnJhJ6HNQGaDUFw1kCIHlPsgT0 rdsTLnoqYdkKzVE1NVQY0+rguqhO98RUkGYRjTWFAU5fQaHHZ/GVnlaM+164CcB9 l3wfaBvlJ+HU7ux5J16J86UAEBkA6TaU4FwTdrBGLv06BvPlPHGjGqFTM9e9Java xsU2+UVjSl5Dh02TSWc98J1tf3h15xYoehWEHuMuP8sH6woGa4kjQeeRDbsEC5Xa zx4mtP4io+4GSCakmZS4PTus8aibcp9aqWpD1SuFgcqt24LpNj+/FhC87//Vr6at oYjIUkqmV93qv45+a3zaGq88aE59rqg= -----END CERTIFICATE-----Generated at Mon Apr 7 15:59:06 2025 by rpki-client