$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/6d329d86-ae5c-3e97-b60e-380b387c9d19.roa File: 6d329d86-ae5c-3e97-b60e-380b387c9d19.roa (raw, json) Hash identifier: QD1NisDB7vLTdR2Kg+jtmxqaditFAbkC5ZJEgeXymTg= Subject key identifier: E6:5D:4F:E8:ED:96:DF:C7:67:74:7E:7F:0B:FC:3B:F0:6B:A7:0A:BA Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F43285848CC7B9C340270E9BC3BD26040 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/6d329d86-ae5c-3e97-b60e-380b387c9d19.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 398203 IP address blocks: 146.86.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9c:34:02:70:e9:bc:3b:d2:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=c0f9c837-18fa-4f4c-8035-93022cfd3e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:44:75:76:bd:16:d3:9a:7f:6e:3d:f0:45: db:57:43:70:97:f2:b3:18:81:54:92:4b:50:ab:52: 61:6b:90:56:ab:aa:72:75:a9:06:eb:7a:33:42:0d: c2:b7:01:81:e1:5a:83:52:b8:c5:d4:0c:cd:fd:ff: c7:7f:f5:46:f3:1a:45:ae:11:d4:55:b6:c1:02:e7: 1e:1e:c4:f5:a6:a0:ed:be:78:75:55:b1:39:52:af: 3d:6c:72:81:62:09:e8:20:31:62:62:3a:a3:84:12: c0:34:69:d1:eb:b8:0d:f9:f6:1c:a7:92:3e:08:54: 01:a8:d3:9b:3e:d0:03:ec:cb:1b:37:aa:b2:f6:1f: 40:63:56:87:cd:ac:ca:24:93:f2:7a:96:0b:8a:51: c9:a9:1a:99:a1:45:d6:35:c1:0e:0d:c2:e8:aa:9c: 5c:22:e7:87:2a:7d:4b:6d:01:95:0e:98:37:5b:ef: 3d:30:81:e7:c7:50:c1:5f:8a:c9:ec:d7:50:a3:24: 37:64:89:75:16:c1:86:0d:20:66:e5:1c:b0:19:1d: 70:68:ac:1f:f6:86:ec:30:1d:0e:90:64:59:85:fd: e9:56:11:fd:9b:0b:8b:ab:aa:42:08:d3:bf:4b:ac: 3e:50:17:7e:7c:10:5d:c8:9a:ad:e8:3a:94:c8:9a: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5D:4F:E8:ED:96:DF:C7:67:74:7E:7F:0B:FC:3B:F0:6B:A7:0A:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/6d329d86-ae5c-3e97-b60e-380b387c9d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 146.86.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:27:37:a1:28:7b:03:83:77:9b:62:27:d0:90:89:22:83:48: 7a:58:11:aa:84:24:12:0f:ca:9e:0e:0b:aa:9a:17:14:24:ce: 4d:47:ac:c2:e7:bf:03:cc:dd:ee:ef:61:05:35:11:f8:6d:32: f8:63:0a:91:6f:22:11:b4:cd:8e:1c:9e:3c:34:a6:d9:4a:c5: 9f:42:d6:2e:e5:82:83:e8:60:3d:cd:ab:fc:fc:ed:07:59:73: d0:8b:8a:a8:8d:6b:32:86:2d:09:62:77:d8:89:15:e2:ac:1d: 61:40:12:4e:a5:b3:a0:e8:5a:af:96:11:b0:a9:d6:e6:3c:97: 93:71:02:30:2a:80:7b:6c:5a:dd:f7:6c:cc:c8:31:c3:5f:08: 8b:4c:01:4d:43:3d:6c:f0:ab:4e:71:0f:36:14:0d:6f:8a:72: 29:bd:0f:36:25:40:73:d7:f6:a5:33:64:96:42:d6:1b:b1:e4: 72:99:fa:2f:ba:9e:ef:57:00:e5:98:db:45:7e:07:2a:2d:c3: e0:6d:1b:14:64:9c:11:b9:03:c4:11:71:75:05:0c:6b:74:10: 8c:e2:39:b9:99:86:34:7e:fb:63:97:55:a4:c8:2b:97:4f:70: 1c:91:c5:b7:84:fd:e9:0c:35:04:2d:19:c5:e6:3e:2e:61:19: 47:cd:fb:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5w0AnDpvDvSYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YzBmOWM4MzctMThmYS00ZjRjLTgwMzUtOTMwMjJjZmQzZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPdEdXa9FtOaf2498EXbV0Nwl/KzGIFUkktQ q1Jha5BWq6pydakG63ozQg3CtwGB4VqDUrjF1AzN/f/Hf/VG8xpFrhHUVbbBAuce HsT1pqDtvnh1VbE5Uq89bHKBYgnoIDFiYjqjhBLANGnR67gN+fYcp5I+CFQBqNOb PtAD7MsbN6qy9h9AY1aHzazKJJPyepYLilHJqRqZoUXWNcEODcLoqpxcIueHKn1L bQGVDpg3W+89MIHnx1DBX4rJ7NdQoyQ3ZIl1FsGGDSBm5RywGR1waKwf9obsMB0O kGRZhf3pVhH9mwuLq6pCCNO/S6w+UBd+fBBdyJqt6DqUyJomMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZdT+jtlt/HZ3R+fwv8O/Brpwq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvNmQzMjlkODYtYWU1Yy0z ZTk3LWI2MGUtMzgwYjM4N2M5ZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGklaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADknN6EoewODd5tiJ9CQiSKDSHpYEaqEJBIPyp4OC6qaFxQkzk1HrMLn vwPM3e7vYQU1EfhtMvhjCpFvIhG0zY4cnjw0ptlKxZ9C1i7lgoPoYD3Nq/z87QdZ c9CLiqiNazKGLQlid9iJFeKsHWFAEk6ls6DoWq+WEbCp1uY8l5NxAjAqgHtsWt33 bMzIMcNfCItMAU1DPWzwq05xDzYUDW+Kcim9DzYlQHPX9qUzZJZC1hux5HKZ+i+6 nu9XAOWY20V+Byotw+BtGxRknBG5A8QRcXUFDGt0EIziObmZhjR++2OXVaTIK5dP cByRxbeE/ekMNQQtGcXmPi5hGUfN+8M= -----END CERTIFICATE-----Generated at Sat Apr 12 01:50:02 2025 by rpki-client