$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa File: 86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa (raw, json) Hash identifier: EocT1CxE4zsZmb/h1od8udUEJra4lR3sILioMwJ2ft8= Subject key identifier: 07:37:8C:7F:5E:55:1F:6A:0E:3E:D8:5C:4B:00:9F:79:32:5A:C8:0C Certificate issuer: /CN=86b37376-2d1b-4536-b941-7858431c5839 Certificate serial: 010D0C9F43285849B6DF4F5CCB9C11AD725FCB00 Authority key identifier: FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 30115 IP address blocks: 104.166.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4f:5c:cb:9c:11:ad:72:5f:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b37376-2d1b-4536-b941-7858431c5839 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=4d89b3b1-66f8-4da4-ba7e-b5d452eeb531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:66:79:34:35:e0:f7:62:b9:1c:f0:47:27: c3:14:98:2a:af:15:ab:1d:1a:68:4e:ed:43:c3:3e: dc:74:ee:09:36:ea:30:0d:44:fa:87:1e:79:96:98: 91:92:b3:8d:af:bd:ad:ba:b3:83:c3:07:b0:ea:4b: 1a:4b:07:8f:46:f8:3e:dc:c1:f3:f2:6e:2a:e7:16: 77:cb:ea:8a:19:b7:01:09:f6:02:dd:11:03:13:20: 08:2f:47:e1:7e:6c:d6:44:0c:f4:20:26:70:6f:f8: 32:dc:48:71:4c:b1:57:b6:cf:eb:24:92:fd:ff:23: 60:e1:43:5c:3c:4e:7d:65:1f:be:2e:49:d9:6d:dd: 1d:9a:8b:e8:a4:9d:7f:d8:fa:cd:31:78:78:fa:2e: 5e:c0:3f:9b:1a:00:f4:5c:66:1c:97:c0:d4:a9:b9: 71:cc:67:fb:6e:1e:e1:0f:dd:04:a2:00:36:2f:08: ff:09:3b:fa:bf:7e:d0:a0:f0:22:e6:54:59:70:30: 7c:8f:8f:7c:f7:ed:c7:67:bd:85:57:c2:5c:37:e2: 37:95:a8:69:c8:8b:40:a8:6a:ad:c6:4a:a5:2d:bd: 3d:7d:be:f8:3f:66:0d:a1:a2:14:fe:72:b8:1c:05: 48:46:61:4e:6c:39:28:dc:63:74:98:1d:d3:5d:41: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:37:8C:7F:5E:55:1F:6A:0E:3E:D8:5C:4B:00:9F:79:32:5A:C8:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl X509v3 Authority Key Identifier: keyid:FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer sbgp-ipAddrBlock: critical IPv4: 104.166.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a3:e5:30:e7:a0:e9:e6:14:72:57:ca:75:47:3f:47:c6:f4: 4c:f0:e8:4f:8b:f7:6d:c6:a6:e8:17:d2:3c:74:ae:a2:0e:71: 57:49:06:90:6f:a9:9f:67:b3:22:d0:de:ad:21:57:c1:da:8a: 3b:ba:ad:1d:ac:b0:df:62:d1:b0:f9:0d:bf:45:84:54:14:7d: 2b:74:33:6f:f3:d3:36:bb:4d:82:22:90:88:b8:4d:2e:c5:4b: f4:22:35:13:1d:16:1c:c2:68:c7:76:d6:df:8c:05:54:d1:8f: 8d:8c:21:3c:34:1c:bf:04:ab:8b:c6:54:60:3a:c0:08:ab:59: 29:e3:d7:d8:d0:d5:27:eb:d8:9a:e0:ef:9a:e4:dc:b6:c7:06: 0c:ba:6d:60:dc:c2:6b:af:de:e0:ca:46:7e:3c:64:5a:c1:fe: 0e:03:fd:89:bb:47:b9:6f:91:50:c0:f5:55:29:e5:ca:1d:2a: f0:fc:82:b7:26:73:1c:cb:af:68:25:6b:52:0c:fc:5c:9c:0a: bc:13:6e:e1:3b:3f:f7:47:b2:ee:13:d1:f4:44:56:41:3c:a7: 9a:d5:d0:9f:17:d3:a8:25:51:04:38:35:c8:6a:22:90:54:70: ae:b8:20:dd:7b:70:43:94:35:f4:91:c4:bc:cf:71:4f:7e:1e: 50:5b:7a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2309cy5wRrXJfywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzczNzYtMmQxYi00NTM2LWI5NDEtNzg1ODQzMWM1 ODM5MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NGQ4OWIzYjEtNjZmOC00ZGE0LWJhN2UtYjVkNDUyZWViNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHBmeTQ14PdiuRzwRyfDFJgqrxWrHRpoTu1D wz7cdO4JNuowDUT6hx55lpiRkrONr72turODwwew6ksaSwePRvg+3MHz8m4q5xZ3 y+qKGbcBCfYC3REDEyAIL0fhfmzWRAz0ICZwb/gy3EhxTLFXts/rJJL9/yNg4UNc PE59ZR++LknZbd0dmovopJ1/2PrNMXh4+i5ewD+bGgD0XGYcl8DUqblxzGf7bh7h D90EogA2Lwj/CTv6v37QoPAi5lRZcDB8j4989+3HZ72FV8JcN+I3lahpyItAqGqt xkqlLb09fb74P2YNoaIU/nK4HAVIRmFObDko3GN0mB3TXUGVpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc3jH9eVR9qDj7YXEsAn3kyWsgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NmIz NzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMxYzU4MzkvODZjNzc3ZjgtMGFmZC0z Y2I0LTlhZmUtNzJlOGZlNjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODZiMzczNzYtMmQxYi00NTM2LWI5 NDEtNzg1ODQzMWM1ODM5Lzg2YjM3Mzc2LTJkMWItNDUzNi1iOTQxLTc4NTg0MzFj NTgzOS5jcmwwHwYDVR0jBBgwFoAU/Zeqz6JXzqQ9oYPgyfe+yRagiYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4 NDMxYzU4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADij5TDnoOnmFHJXynVHP0fG9Ezw6E+L923GpugX0jx0rqIOcVdJBpBv qZ9nsyLQ3q0hV8Haiju6rR2ssN9i0bD5Db9FhFQUfSt0M2/z0za7TYIikIi4TS7F S/QiNRMdFhzCaMd21t+MBVTRj42MITw0HL8Eq4vGVGA6wAirWSnj19jQ1Sfr2Jrg 75rk3LbHBgy6bWDcwmuv3uDKRn48ZFrB/g4D/Ym7R7lvkVDA9VUp5codKvD8grcm cxzLr2gla1IM/FycCrwTbuE7P/dHsu4T0fREVkE8p5rV0J8X06glUQQ4NchqIpBU cK64IN17cEOUNfSRxLzPcU9+HlBbeoc= -----END CERTIFICATE-----Generated at Wed May 14 09:30:14 2025 by rpki-client