$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a332fa8-4c5f-376b-ae39-79e2b6a6979f.roa File: 3a332fa8-4c5f-376b-ae39-79e2b6a6979f.roa (raw, json) Hash identifier: Ex1ALgXk5q8W7BMMUMjO8Wb9FvRsIHdHVVdczk4OCcQ= Subject key identifier: FB:42:DB:FA:F3:CE:FB:1E:F6:C8:95:F3:BA:FB:5B:6D:D3:AF:9C:5E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1A3B1A334332F11626300 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a332fa8-4c5f-376b-ae39-79e2b6a6979f.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 396406 IP address blocks: 97.86.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:a3:b1:a3:34:33:2f:11:62:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=5ecfcef5-febc-4e52-8f11-09deeb4fe121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:7a:f3:08:5b:80:4c:f6:01:33:ca:23:69: 74:3e:51:4e:f1:73:57:99:cd:62:1e:fd:ba:49:82: 70:e8:1a:64:c0:e2:66:a9:2b:01:e1:90:6c:e4:28: ac:cb:37:e4:45:00:2c:e5:26:51:c0:8c:3d:52:7a: 85:d0:9b:3f:57:8a:ff:ce:7b:fb:89:c6:3e:4f:84: af:d0:87:ea:e7:99:17:6b:6e:e1:f6:7d:39:f0:2c: b0:70:99:8a:1e:36:a5:11:36:85:bd:7b:11:43:cc: ca:a3:d8:15:70:bb:ea:2f:a9:07:4a:78:0f:32:99: f4:4f:f7:32:07:8a:af:65:1d:d5:3e:9b:1f:c8:2d: 33:12:d6:b6:da:32:1f:13:bd:25:d2:34:c2:8c:d5: 76:cd:56:95:f2:93:a4:a8:d3:d0:d7:82:ae:01:0a: f2:4e:90:62:e5:bd:c2:ef:17:b0:48:42:b6:c0:7f: 61:c3:f7:30:d0:04:b7:96:4d:24:b4:55:95:72:f3: 29:c1:ad:11:84:5f:e7:23:bb:f2:a2:f1:e8:d4:29: 04:68:68:27:e0:6b:e0:87:9b:6d:63:11:bd:79:ea: da:42:dc:5d:03:46:07:0f:98:25:ba:9d:87:a1:77: a6:a8:6d:b4:6a:28:cc:00:1e:25:2a:61:ee:b5:a8: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:DB:FA:F3:CE:FB:1E:F6:C8:95:F3:BA:FB:5B:6D:D3:AF:9C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3a332fa8-4c5f-376b-ae39-79e2b6a6979f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.86.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2c:65:70:7f:4c:f7:5e:4e:3a:27:59:c7:94:41:f3:a4:2a: 9c:69:7d:38:ff:e9:50:b1:7b:d9:a8:9a:1b:00:e0:8c:26:8d: 65:5e:a8:25:c7:2d:fa:4b:a8:d8:ec:91:da:f4:e0:f5:59:7d: d3:62:cb:3b:73:cd:52:bd:2c:01:6f:5d:e4:82:f8:84:6c:21: f7:1c:e7:6f:59:6f:13:27:30:bc:2e:75:98:ba:08:40:49:1a: cf:c1:2a:bc:0a:ff:03:81:81:68:8d:65:cf:cb:19:cf:d1:42: 96:66:04:92:25:b3:85:48:6b:86:43:35:c0:55:8a:70:7b:55: f3:aa:f9:2b:e3:81:a6:68:e5:46:56:db:39:48:2a:b7:b4:b8: 1e:57:ca:fc:1f:9d:5b:af:aa:59:1d:fa:0c:df:da:25:2e:8e: 54:8f:6b:4b:98:75:cc:bb:c3:d4:cf:78:c4:da:d4:af:19:5b: 82:84:3e:bd:ac:80:30:03:ca:8e:cb:1a:b2:19:39:d6:5f:e5: 14:f1:9f:10:32:60:44:99:da:3e:ec:82:ef:8c:cd:02:26:e0: c8:66:b2:6e:93:8d:f0:9f:7a:dc:e5:13:2c:7c:e2:df:9e:9e: 4f:c8:b4:f0:85:fd:cc:89:13:6d:22:95:c7:9c:b7:75:52:3e: 72:73:ff:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aOxozQzLxFiYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NWVjZmNlZjUtZmViYy00ZTUyLThmMTEtMDlkZWViNGZlMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgh68whbgEz2ATPKI2l0PlFO8XNXmc1iHv26 SYJw6BpkwOJmqSsB4ZBs5CisyzfkRQAs5SZRwIw9UnqF0Js/V4r/znv7icY+T4Sv 0Ifq55kXa27h9n058CywcJmKHjalETaFvXsRQ8zKo9gVcLvqL6kHSngPMpn0T/cy B4qvZR3VPpsfyC0zEta22jIfE70l0jTCjNV2zVaV8pOkqNPQ14KuAQryTpBi5b3C 7xewSEK2wH9hw/cw0AS3lk0ktFWVcvMpwa0RhF/nI7vyovHo1CkEaGgn4Gvgh5tt YxG9eeraQtxdA0YHD5glup2HoXemqG20aijMAB4lKmHutagGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtC2/rzzvse9siV87r7W23Tr5xeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2EzMzJmYTgtNGM1Zi0z NzZiLWFlMzktNzllMmI2YTY5NzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMsZXB/TPdeTjonWceUQfOkKpxpfTj/6VCxe9momhsA4IwmjWVeqCXH LfpLqNjskdr04PVZfdNiyztzzVK9LAFvXeSC+IRsIfcc529ZbxMnMLwudZi6CEBJ Gs/BKrwK/wOBgWiNZc/LGc/RQpZmBJIls4VIa4ZDNcBVinB7VfOq+SvjgaZo5UZW 2zlIKre0uB5XyvwfnVuvqlkd+gzf2iUujlSPa0uYdcy7w9TPeMTa1K8ZW4KEPr2s gDADyo7LGrIZOdZf5RTxnxAyYESZ2j7sgu+MzQIm4Mhmsm6TjfCfetzlEyx84t+e nk/ItPCF/cyJE20ilcect3VSPnJz/5Y= -----END CERTIFICATE-----Generated at Sun Apr 6 22:53:08 2025 by rpki-client