$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36c5bdc3-5cbf-30a8-93d7-8e3580568a7b.roa File: 36c5bdc3-5cbf-30a8-93d7-8e3580568a7b.roa (raw, json) Hash identifier: tZ0WZl6AcK3uJaIObdiSyjVQyQDH4s03Dyvrgxcny2M= Subject key identifier: 39:D4:6E:7D:43:A5:17:52:9D:B8:2E:AA:8E:E9:B1:BA:42:E4:4B:FE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F432858493FC6EDA34D3B885394F78A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36c5bdc3-5cbf-30a8-93d7-8e3580568a7b.roa Signing time: Thu 20 Mar 2025 09:10:34 +0000 ROA not before: Thu 20 Mar 2025 09:10:34 +0000 ROA not after: Wed 18 Jun 2025 09:10:34 +0000 asID: 30036 IP address blocks: 97.64.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3f:c6:ed:a3:4d:3b:88:53:94:f7:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 20 09:10:34 2025 GMT Not After : Jun 18 09:10:34 2025 GMT Subject: CN=a21bed40-48da-4565-88cf-a39bdadf9294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:28:56:28:09:6e:fd:c0:e7:0d:e7:2e:64: 71:ad:d3:75:57:f3:9e:81:64:70:6a:f1:b5:83:0f: 9c:54:7c:17:5f:4c:93:b9:40:a4:a5:a8:ba:60:06: 0e:b7:8d:7e:ab:86:47:48:81:54:2e:28:25:8f:2d: 59:ed:d2:c2:07:fd:7d:c0:29:10:81:39:84:32:40: db:77:bc:54:33:9b:37:cb:70:3d:53:7e:4e:22:82: 00:b1:22:24:7e:82:24:af:3e:82:63:91:27:1e:22: bb:4c:dd:6f:36:0f:6c:59:9d:1b:ce:2e:0f:a1:fb: ab:50:48:af:43:3c:32:3a:22:ab:da:43:b4:f3:1e: 3f:38:13:7d:93:49:ae:4e:61:33:3b:21:80:76:e0: e0:92:c4:d6:6f:3d:27:83:03:d2:28:62:dc:e9:08: 73:f1:36:c1:72:b4:c3:ac:b3:ee:b1:d0:45:aa:53: 7b:86:26:3a:c4:95:a4:4d:6a:2d:93:36:5e:2e:b8: 48:fa:d4:18:46:ff:f5:6a:c7:a5:95:20:db:62:ce: 2e:6a:d0:00:8c:5d:fb:c2:b2:f0:81:23:1e:6f:40: fa:5f:bb:ac:d4:10:3a:a6:b8:93:ad:c5:df:5f:5a: a3:7e:1c:c8:99:b4:cd:b5:49:8a:7d:96:a2:f2:30: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:6E:7D:43:A5:17:52:9D:B8:2E:AA:8E:E9:B1:BA:42:E4:4B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36c5bdc3-5cbf-30a8-93d7-8e3580568a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d2:9e:54:8b:9a:56:0c:ce:e6:8e:a4:25:cc:d4:c8:22:67: 0b:c8:95:e3:5d:5d:01:9d:c5:70:8c:45:9a:b5:20:d6:a0:f3: 61:19:a2:48:0e:08:f5:00:56:33:05:53:3a:15:49:59:ad:db: 08:47:aa:17:02:5b:6a:76:93:aa:27:1e:1e:bd:47:de:d1:a5: 62:33:86:fe:1b:4d:f5:fd:bf:69:a1:bb:e7:bf:01:6c:48:e8: 52:8a:7e:fe:1f:8d:75:8b:3e:3c:df:e9:af:8e:e1:bb:d8:2a: 71:10:1a:ec:e2:d1:5d:cf:88:35:33:69:d0:e5:62:75:9d:fe: 2c:c9:e8:73:57:62:8a:b6:d0:a4:75:34:ee:84:04:a3:0c:45: 36:34:28:ba:8c:12:9c:5c:85:76:69:ef:73:54:cc:15:13:af: 8e:85:3b:7e:c8:b8:c6:03:85:99:ee:e9:5d:b5:14:96:eb:fe: 89:0e:67:77:32:71:a2:a9:e1:56:6a:96:01:1b:38:92:d3:e8: 53:49:76:1d:ee:aa:23:36:ad:bd:f2:cc:16:97:90:83:88:14: a7:44:87:1c:11:d4:ca:15:44:d5:70:23:72:d4:a9:3a:7c:dd: 61:8d:35:80:67:37:18:b3:4c:ac:c6:8d:e2:f7:66:9d:e2:a0: c0:3e:0f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk/xu2jTTuIU5T3igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDMyMDA5MTAzNFoXDTI1MDYxODA5MTAzNFowLzEtMCsGA1UEAxMk YTIxYmVkNDAtNDhkYS00NTY1LTg4Y2YtYTM5YmRhZGY5Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1koVigJbv3A5w3nLmRxrdN1V/OegWRwavG1 gw+cVHwXX0yTuUCkpai6YAYOt41+q4ZHSIFULigljy1Z7dLCB/19wCkQgTmEMkDb d7xUM5s3y3A9U35OIoIAsSIkfoIkrz6CY5EnHiK7TN1vNg9sWZ0bzi4PofurUEiv QzwyOiKr2kO08x4/OBN9k0muTmEzOyGAduDgksTWbz0ngwPSKGLc6Qhz8TbBcrTD rLPusdBFqlN7hiY6xJWkTWotkzZeLrhI+tQYRv/1asellSDbYs4uatAAjF37wrLw gSMeb0D6X7us1BA6priTrcXfX1qjfhzImbTNtUmKfZai8jAFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnUbn1DpRdSnbguqo7psbpC5Ev+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzZjNWJkYzMtNWNiZi0z MGE4LTkzZDctOGUzNTgwNTY4YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLSnlSLmlYMzuaOpCXM1MgiZwvIleNdXQGdxXCMRZq1INag82EZokgO CPUAVjMFUzoVSVmt2whHqhcCW2p2k6onHh69R97RpWIzhv4bTfX9v2mhu+e/AWxI 6FKKfv4fjXWLPjzf6a+O4bvYKnEQGuzi0V3PiDUzadDlYnWd/izJ6HNXYoq20KR1 NO6EBKMMRTY0KLqMEpxchXZp73NUzBUTr46FO37IuMYDhZnu6V21FJbr/okOZ3cy caKp4VZqlgEbOJLT6FNJdh3uqiM2rb3yzBaXkIOIFKdEhxwR1MoVRNVwI3LUqTp8 3WGNNYBnNxizTKzGjeL3Zp3ioMA+DzQ= -----END CERTIFICATE-----Generated at Wed Apr 9 00:16:16 2025 by rpki-client