$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa File: d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json) Hash identifier: 5lBbhiRAZkASjDun1Dm9x6JDnHAiR5fxcxEenyiLqBw= Subject key identifier: 41:EF:D7:46:07:DA:47:3B:34:77:9E:1F:CD:5F:14:F1:38:50:DE:55 Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Certificate serial: 010D0C9F4328584905B6A5167C51182DC8097D20 Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 14618 IP address blocks: 199.47.128.0/24 maxlen: 24 199.47.129.0/24 maxlen: 24 199.47.130.0/24 maxlen: 24 199.47.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:a5:16:7c:51:18:2d:c8:09:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=5b9b47a0-de2b-444a-bd9a-03c4949773d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:43:b6:ef:2d:dd:9d:aa:be:3e:9f:69:3c: df:df:cd:2f:92:63:af:ce:1b:cb:45:d5:35:06:37: 24:65:df:18:27:50:6a:32:e7:e3:5b:2e:0d:7c:d3: f0:c8:f6:c7:df:ff:51:15:e4:03:66:2c:f0:2e:1b: f5:6f:92:e4:11:59:af:89:ae:ef:3a:a1:74:63:97: c2:8a:0f:72:3f:df:2c:5a:d8:02:0c:c1:7b:14:51: 80:77:6e:88:b0:34:e7:59:e0:44:29:73:d4:2a:1a: 71:c5:41:18:ad:92:47:25:d2:e8:b4:05:82:d8:8f: ca:96:d1:80:21:9b:77:eb:a8:fc:f7:df:7a:88:b2: e7:31:5e:0b:bc:14:dd:d8:24:77:44:e3:b1:25:a5: 01:ff:2f:ef:31:93:2b:cb:87:63:2f:68:52:53:40: 39:a9:d4:5a:f9:90:3f:39:a3:66:42:58:d9:21:de: 8e:72:60:63:ec:1a:8d:45:8b:bc:c7:63:e0:13:63: 20:74:e4:96:7c:e2:34:fd:4a:5a:f8:5e:34:eb:d0: 42:ec:d1:d0:9f:d5:90:07:1c:4c:32:ee:8f:14:fb: 21:8d:1c:24:00:9a:0c:2a:7a:f5:d3:3e:00:f8:53: f6:98:10:ee:c8:9a:4e:5d:7c:c4:a3:77:9f:5d:60: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:D7:46:07:DA:47:3B:34:77:9E:1F:CD:5F:14:F1:38:50:DE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl X509v3 Authority Key Identifier: keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer sbgp-ipAddrBlock: critical IPv4: 199.47.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c2:55:1c:2c:f7:f4:e6:8b:d9:48:ef:1b:95:b2:d8:eb:c3: fe:4b:35:57:48:4d:87:8e:14:29:63:19:f9:38:df:a9:a3:22: b5:57:17:66:ac:7f:e0:67:6d:06:5d:89:1f:64:2f:61:30:e4: b4:6a:a8:7e:c8:06:80:3d:d5:a6:3c:33:34:8d:37:0c:84:7c: 3d:27:20:6e:dd:54:d6:ce:14:2d:96:50:3d:47:62:0e:cc:4c: 22:a6:8e:c5:84:23:1f:16:a9:23:af:7f:58:c9:e0:b4:ee:3b: 83:47:db:44:6a:02:99:65:ab:45:f8:4f:a6:47:83:d5:15:e3: 84:c6:30:17:f9:87:82:87:77:02:fd:40:e4:e4:64:eb:db:b2: 9a:51:eb:24:ab:e1:6b:aa:a0:e1:4a:d1:93:8d:93:1b:cd:db: 3c:4b:6a:8c:50:25:d6:1c:99:eb:f0:86:dc:f2:f7:02:f8:2a: 31:78:ac:bf:ac:38:01:e1:6b:7b:a2:d2:04:2c:46:14:7f:b5: 0e:8d:6e:98:b0:4e:8b:c2:bc:3f:18:84:86:cd:d5:ca:fd:ae: 8c:76:3e:c2:ce:39:03:ad:5f:1a:5c:7b:2f:03:61:46:1c:21: e4:25:d2:dc:09:86:82:9a:ec:e6:bb:78:ba:25:79:e6:46:10: 21:f0:de:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtqUWfFEYLcgJfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh OTY5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NWI5YjQ3YTAtZGUyYi00NDRhLWJkOWEtMDNjNDk0OTc3M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp51Dtu8t3Z2qvj6faTzf380vkmOvzhvLRdU1 BjckZd8YJ1BqMufjWy4NfNPwyPbH3/9RFeQDZizwLhv1b5LkEVmvia7vOqF0Y5fC ig9yP98sWtgCDMF7FFGAd26IsDTnWeBEKXPUKhpxxUEYrZJHJdLotAWC2I/KltGA IZt366j89996iLLnMV4LvBTd2CR3ROOxJaUB/y/vMZMry4djL2hSU0A5qdRa+ZA/ OaNmQljZId6OcmBj7BqNRYu8x2PgE2MgdOSWfOI0/Upa+F4069BC7NHQn9WQBxxM Mu6PFPshjRwkAJoMKnr10z4A+FP2mBDuyJpOXXzEo3efXWCXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHv10YH2kc7NHeeH81fFPE4UN5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvZDFlNzM0ZTItY2U4OS0z ZGQ1LTk2OTctZGFiMTAwY2QwNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4 ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2 N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnCVRws9/Tmi9lI7xuVstjrw/5LNVdITYeOFCljGfk436mjIrVXF2as f+BnbQZdiR9kL2Ew5LRqqH7IBoA91aY8MzSNNwyEfD0nIG7dVNbOFC2WUD1HYg7M TCKmjsWEIx8WqSOvf1jJ4LTuO4NH20RqApllq0X4T6ZHg9UV44TGMBf5h4KHdwL9 QOTkZOvbsppR6ySr4WuqoOFK0ZONkxvN2zxLaoxQJdYcmevwhtzy9wL4KjF4rL+s OAHha3ui0gQsRhR/tQ6NbpiwTovCvD8YhIbN1cr9rox2PsLOOQOtXxpcey8DYUYc IeQl0twJhoKa7Oa7eLoleeZGECHw3kE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:55:48 2025 by rpki-client