$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa File: d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa (raw, json) Hash identifier: 2zMt2oFkUFj8Bg3NHt4zPvFCOMTDl+LrsCMcUHGfKLI= Subject key identifier: B1:7F:FA:40:76:69:4B:91:A3:E4:F8:EB:C0:90:ED:8A:E9:65:EB:A7 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584A331AEC43B1770DA47545A340 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54098 IP address blocks: 100.42.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:ec:43:b1:77:0d:a4:75:45:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=5e4169ec-8a0e-48b4-ad8c-b7cb09f72ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:a6:6f:f5:14:b2:5d:46:b6:1e:6a:be:ae: a1:63:d8:1f:2c:02:35:49:a3:71:14:2a:11:3b:63: a9:d8:7e:ef:47:ba:f4:4d:44:65:ea:75:1c:e0:83: 69:90:7b:96:ab:c7:29:13:d6:38:26:7d:5f:b9:53: 55:49:5a:5e:49:38:cb:99:8c:2a:87:1b:f0:49:e1: 21:6e:8e:49:3b:92:8a:b0:df:54:89:a7:42:8c:b1: 4f:20:a4:c3:53:8e:00:b6:02:c4:ad:bc:87:a8:de: 8c:2e:da:02:9b:d8:bf:51:56:97:3d:53:02:06:2c: a1:c9:78:ff:65:3c:6e:25:54:7e:62:00:34:49:c3: 1d:3b:7f:fd:57:38:59:c0:6b:d1:f2:19:e4:af:9a: 03:7f:69:24:62:6a:e5:f6:6d:9f:e2:af:fb:19:fd: 21:c4:f2:49:5f:57:4c:3d:f1:38:e4:d4:c7:7a:1d: 34:ff:37:ef:3d:20:46:e4:02:58:46:fb:1d:1b:84: 2f:b4:28:fe:2b:44:2f:e4:60:b1:15:70:1a:3f:a2: 1e:3e:4b:9c:53:eb:a8:fe:c2:34:a1:98:16:3b:e6: be:24:44:d2:c0:5d:3e:77:6e:08:04:c4:02:08:ef: 6b:a0:2a:0f:65:eb:93:4a:34:78:39:1b:9f:1d:47: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:FA:40:76:69:4B:91:A3:E4:F8:EB:C0:90:ED:8A:E9:65:EB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/d8f8a9be-4f08-3f23-a598-e79e48acaa67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 100.42.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:52:39:5e:52:95:9c:ed:9c:dc:3a:f7:f6:59:23:14:20:33: dd:19:c2:31:f4:83:4a:6a:7e:d7:1d:c5:66:bf:96:70:66:90: b9:53:e3:56:0d:03:90:20:cb:d2:7f:cd:5a:9b:64:1c:64:72: c3:17:b5:c2:97:27:9b:d7:c4:f9:83:64:2f:9a:b7:7a:a5:ac: 6a:57:eb:1a:ef:80:f5:9b:c7:54:eb:42:8d:6b:f5:1e:06:7b: 60:db:6b:96:ed:1a:fb:a6:ca:c3:3d:cd:e0:f7:80:51:fb:7d: 6f:3a:05:7e:96:9a:1b:d0:8f:d3:64:79:94:51:32:7c:40:55: f1:45:5c:58:2d:ce:02:77:fe:d2:12:b0:4d:b4:c4:fc:41:d0: 0b:a4:3b:2e:92:e2:33:a1:fc:ec:be:62:89:ff:3f:0a:e2:ec: 43:b0:cf:77:d9:91:7b:8c:8a:f3:7e:99:33:60:69:46:c7:ca: 48:f9:26:73:4d:67:99:f3:dd:7a:5a:34:05:35:4b:28:9d:a9: 2e:79:2e:c0:5d:eb:07:2a:39:fc:41:d6:be:5d:a2:8a:31:06: 45:b0:58:32:b9:00:7f:ba:f9:87:6e:90:6a:9c:7b:23:95:ac: d7:6e:5e:c2:47:f5:8f:06:f0:0b:4b:86:a6:20:9c:c1:04:c7: 41:dd:fd:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuxDsXcNpHVFo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NWU0MTY5ZWMtOGEwZS00OGI0LWFkOGMtYjdjYjA5ZjcyYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Cmb/UUsl1Gth5qvq6hY9gfLAI1SaNxFCoR O2Op2H7vR7r0TURl6nUc4INpkHuWq8cpE9Y4Jn1fuVNVSVpeSTjLmYwqhxvwSeEh bo5JO5KKsN9UiadCjLFPIKTDU44AtgLErbyHqN6MLtoCm9i/UVaXPVMCBiyhyXj/ ZTxuJVR+YgA0ScMdO3/9VzhZwGvR8hnkr5oDf2kkYmrl9m2f4q/7Gf0hxPJJX1dM PfE45NTHeh00/zfvPSBG5AJYRvsdG4QvtCj+K0Qv5GCxFXAaP6IePkucU+uo/sI0 oZgWO+a+JETSwF0+d24IBMQCCO9roCoPZeuTSjR4ORufHUe5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF/+kB2aUuRo+T468CQ7YrpZeunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvZDhmOGE5YmUtNGYwOC0z ZjIzLWE1OTgtZTc5ZTQ4YWNhYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZCobMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNSOV5SlZztnNw69/ZZIxQgM90ZwjH0g0pqftcdxWa/lnBmkLlT41YN A5Agy9J/zVqbZBxkcsMXtcKXJ5vXxPmDZC+at3qlrGpX6xrvgPWbx1TrQo1r9R4G e2Dba5btGvumysM9zeD3gFH7fW86BX6WmhvQj9NkeZRRMnxAVfFFXFgtzgJ3/tIS sE20xPxB0AukOy6S4jOh/Oy+Yon/Pwri7EOwz3fZkXuMivN+mTNgaUbHykj5JnNN Z5nz3XpaNAU1SyidqS55LsBd6wcqOfxB1r5doooxBkWwWDK5AH+6+YdukGqceyOV rNduXsJH9Y8G8AtLhqYgnMEEx0Hd/Ts= -----END CERTIFICATE-----Generated at Sun Jun 29 16:37:37 2025 by rpki-client