$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa File: 0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa (raw, json) Hash identifier: BYGo9SaKnKADs3f5IbQptJ1oSZ+beSSZHM2tZJ8GNUo= Subject key identifier: EA:F7:F0:8B:23:91:71:FF:8D:CB:00:A4:4A:73:63:7F:06:A5:F5:A2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F1EA4D3C8F2F573860DDC6C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa Signing time: Thu 20 Feb 2025 11:48:47 +0000 ROA not before: Thu 20 Feb 2025 11:48:47 +0000 ROA not after: Wed 21 May 2025 10:48:47 +0000 asID: 30036 IP address blocks: 97.64.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:ea:4d:3c:8f:2f:57:38:60:dd:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 20 11:48:47 2025 GMT Not After : May 21 10:48:47 2025 GMT Subject: CN=a5a752b4-d84f-40e4-9fdc-44056e21b084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:1a:9f:44:ff:31:cd:d8:c9:b1:54:bf:89: b1:24:79:c5:04:6d:b6:8e:88:37:a9:92:1f:07:48: 3b:cf:45:59:ae:15:4d:71:f4:79:ce:97:2e:34:81: b5:7b:5d:64:04:98:72:b3:57:77:e3:6b:3b:e7:5b: a2:47:fd:63:ab:de:c4:d7:a4:ed:03:23:63:ff:e2: 6d:90:a0:bf:95:0c:71:c5:95:ed:a8:a4:7f:48:f7: e8:66:fe:e1:d9:27:bb:7c:24:b3:01:21:90:cc:8d: bc:78:40:fd:08:d5:3c:59:6a:2a:17:da:c4:87:69: 8f:bc:ce:69:a5:0f:18:29:67:6f:4e:e0:be:14:8f: 78:6c:77:4a:c6:95:e8:3f:46:10:cd:a3:0f:7d:91: 93:41:12:67:bd:2e:bb:7f:41:b5:d6:2e:78:fc:fa: 66:31:21:05:ca:3f:f1:60:94:3a:b4:68:3b:6f:df: 94:1f:8b:46:f7:02:f7:b8:90:b1:70:05:f6:53:58: 45:87:e3:d7:5d:3b:4b:62:31:a4:5c:00:9b:23:57: 4a:2d:61:35:51:4c:24:6d:43:d3:e4:ea:e2:96:a8: d3:ca:6e:74:4b:8d:34:ce:fb:71:3b:30:44:ef:5a: a3:18:4e:91:9b:da:48:34:44:30:c0:18:12:9f:a3: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F7:F0:8B:23:91:71:FF:8D:CB:00:A4:4A:73:63:7F:06:A5:F5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c8249a7-d7d0-3bcb-b2c0-fa447d2cb0cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ba:9e:2b:0b:9f:fd:6b:cf:33:be:57:2d:d7:c9:06:8d:6d: 3e:1a:2c:10:5c:20:3c:96:b0:8d:aa:1c:0d:c5:99:8d:48:7f: 9a:fd:5f:16:36:93:4b:ef:8b:61:66:b8:ab:a3:2b:21:24:4d: fc:c3:9a:92:cf:60:12:21:55:6c:5d:30:e9:27:8b:ca:1f:2f: 59:db:94:27:ff:98:75:de:53:c1:25:da:ab:71:2e:56:ff:03: 26:34:0e:74:cc:70:68:df:71:b6:3c:95:e0:de:08:1f:9e:ee: f0:5b:b0:e2:a5:ad:c9:dd:41:ca:14:6b:ef:28:95:17:e9:4d: 84:fd:b4:d9:d9:41:00:d8:2f:2d:1b:12:05:bc:8c:c6:7f:c0: e3:7b:4d:9c:0d:4d:b1:e1:cf:b6:99:3d:fb:2d:9a:6c:95:43: 88:b4:0f:f5:7b:98:3d:21:53:d1:08:44:69:52:f0:6f:3c:ec: 3d:26:66:51:c8:ab:5e:02:10:74:0f:1f:4d:12:4f:59:b3:e5: b6:29:e5:e5:8c:1e:5d:a6:dd:a6:f7:ad:92:95:c4:75:51:1b: 6f:a5:9f:a1:33:a4:d5:5f:57:b2:22:c6:71:42:47:db:c4:99: 2a:72:9c:38:a5:ac:fc:59:ca:4f:9d:2c:80:20:ce:85:39:c2: 08:ac:02:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx6k08jy9XOGDdxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMDExNDg0N1oXDTI1MDUyMTEwNDg0N1owLzEtMCsGA1UEAxMk YTVhNzUyYjQtZDg0Zi00MGU0LTlmZGMtNDQwNTZlMjFiMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD8an0T/Mc3YybFUv4mxJHnFBG22jog3qZIf B0g7z0VZrhVNcfR5zpcuNIG1e11kBJhys1d342s751uiR/1jq97E16TtAyNj/+Jt kKC/lQxxxZXtqKR/SPfoZv7h2Se7fCSzASGQzI28eED9CNU8WWoqF9rEh2mPvM5p pQ8YKWdvTuC+FI94bHdKxpXoP0YQzaMPfZGTQRJnvS67f0G11i54/PpmMSEFyj/x YJQ6tGg7b9+UH4tG9wL3uJCxcAX2U1hFh+PXXTtLYjGkXACbI1dKLWE1UUwkbUPT 5OrilqjTym50S400zvtxOzBE71qjGE6Rm9pINEQwwBgSn6MhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr38IsjkXH/jcsApEpzY38GpfWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGM4MjQ5YTctZDdkMC0z YmNiLWIyYzAtZmE0NDdkMmNiMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG6nisLn/1rzzO+Vy3XyQaNbT4aLBBcIDyWsI2qHA3FmY1If5r9XxY2 k0vvi2FmuKujKyEkTfzDmpLPYBIhVWxdMOkni8ofL1nblCf/mHXeU8El2qtxLlb/ AyY0DnTMcGjfcbY8leDeCB+e7vBbsOKlrcndQcoUa+8olRfpTYT9tNnZQQDYLy0b EgW8jMZ/wON7TZwNTbHhz7aZPfstmmyVQ4i0D/V7mD0hU9EIRGlS8G887D0mZlHI q14CEHQPH00ST1mz5bYp5eWMHl2m3ab3rZKVxHVRG2+ln6EzpNVfV7IixnFCR9vE mSpynDilrPxZyk+dLIAgzoU5wgisAlQ= -----END CERTIFICATE-----Generated at Sat Apr 12 12:56:39 2025 by rpki-client