$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa File: 685d215a-0b12-373a-bc79-f064fceb279a.roa (raw, json) Hash identifier: Bnhu2EbJ2N9XfrdcDZLKyUT+QMA+CH+ew0YADM3o/8U= Subject key identifier: 45:05:C0:65:42:9C:87:D2:4C:F5:25:EB:00:65:C2:5D:02:39:B0:BB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F1EA71468E864C9EE913C600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa Signing time: Thu 20 Feb 2025 11:49:04 +0000 ROA not before: Thu 20 Feb 2025 11:49:04 +0000 ROA not after: Wed 21 May 2025 10:49:04 +0000 asID: 30036 IP address blocks: 97.64.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:ea:71:46:8e:86:4c:9e:e9:13:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 20 11:49:04 2025 GMT Not After : May 21 10:49:04 2025 GMT Subject: CN=11a8ba0b-7605-4325-b3e5-ce04779f72cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:56:56:21:a2:0c:de:7b:78:22:3b:7a:bc: 8b:05:e1:bc:91:30:78:b4:07:b6:1b:49:dc:99:f2: f6:ff:8f:fc:df:57:54:52:2c:fa:01:21:85:8e:cb: 72:f2:fc:61:a1:3c:c3:65:6d:59:35:ba:d0:f5:c8: 58:6a:c7:7a:b8:f1:dd:33:ef:9e:f8:ff:1a:f6:40: af:e7:4c:d8:80:20:42:c5:98:cc:f2:c1:99:0e:05: f6:69:86:e3:b0:fc:60:9b:13:a5:c0:6a:38:d2:57: a5:4a:46:a1:9c:f1:3c:13:7b:4a:b8:64:57:0b:d5: 19:41:3b:ac:be:7c:a7:49:68:d3:fa:56:23:db:95: 34:e8:60:d6:b7:76:3c:57:6d:7d:57:54:83:62:ed: 84:25:c2:57:3c:6e:6e:76:76:d5:71:2e:36:85:76: aa:89:75:17:5c:a0:fe:0b:5e:e7:dd:b1:a5:71:68: ad:bf:dd:5a:61:24:1a:ff:c4:74:6a:46:8d:9f:f8: 67:9d:01:7a:51:c3:a9:32:3f:0f:cd:88:3c:66:d0: 99:c7:7d:b7:cf:ac:f3:2d:87:15:5a:07:89:e4:17: 51:85:fb:74:b2:29:39:3b:f1:4e:41:a8:70:a2:8c: 1c:ec:a1:3a:61:f0:97:1e:20:b9:c2:4d:8b:bf:da: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:C0:65:42:9C:87:D2:4C:F5:25:EB:00:65:C2:5D:02:39:B0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:be:c0:37:8c:2e:a4:d3:44:a4:f5:39:1c:3f:c7:97:65:36: b9:7e:a6:87:60:53:42:ed:47:ae:e7:16:6b:b7:42:ff:71:a3: a8:61:41:22:8f:d2:dc:5a:95:5d:f9:06:84:b0:05:fe:e5:e6: 59:4d:08:ec:73:d0:84:5b:bc:e8:11:c5:e9:d5:f5:21:7e:19: fd:69:95:8f:eb:8d:c1:f9:f0:9c:18:f2:86:6a:a4:af:e7:da: 4a:1f:fa:1a:ce:60:80:44:38:15:57:c8:5d:4b:75:5d:90:ea: f3:01:3e:6a:c6:a9:2e:70:87:c5:70:82:04:e2:fb:ef:cd:e7: d7:4a:ab:43:a8:e8:98:48:7c:cf:7a:f5:51:bf:aa:f7:b4:70: fa:67:6e:5d:17:91:15:ed:83:35:95:68:a4:61:d5:35:34:be: 9a:e2:5b:3b:42:8e:9d:27:cc:0c:93:6e:4c:c6:c3:32:c7:46: 1b:8c:c9:66:1b:ef:ef:4d:5c:a9:60:ed:48:58:14:52:81:0e: fb:c5:3e:94:96:62:f3:c8:2e:62:05:4f:23:4f:f3:f1:d9:40: 9b:ac:a1:27:20:37:43:7f:1e:a2:cf:a0:fa:b8:2e:80:2e:01: 75:b8:83:1b:14:ad:51:83:ca:0f:8b:18:2c:5c:78:c9:28:21: 6e:81:d2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx6nFGjoZMnukTxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMDExNDkwNFoXDTI1MDUyMTEwNDkwNFowLzEtMCsGA1UEAxMk MTFhOGJhMGItNzYwNS00MzI1LWIzZTUtY2UwNDc3OWY3MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTZWViGiDN57eCI7eryLBeG8kTB4tAe2G0nc mfL2/4/831dUUiz6ASGFjsty8vxhoTzDZW1ZNbrQ9chYasd6uPHdM++e+P8a9kCv 50zYgCBCxZjM8sGZDgX2aYbjsPxgmxOlwGo40lelSkahnPE8E3tKuGRXC9UZQTus vnynSWjT+lYj25U06GDWt3Y8V219V1SDYu2EJcJXPG5udnbVcS42hXaqiXUXXKD+ C17n3bGlcWitv91aYSQa/8R0akaNn/hnnQF6UcOpMj8PzYg8ZtCZx323z6zzLYcV WgeJ5BdRhft0sik5O/FOQahwoowc7KE6YfCXHiC5wk2Lv9qpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUFwGVCnIfSTPUl6wBlwl0CObC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjg1ZDIxNWEtMGIxMi0z NzNhLWJjNzktZjA2NGZjZWIyNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW+wDeMLqTTRKT1ORw/x5dlNrl+podgU0LtR67nFmu3Qv9xo6hhQSKP 0txalV35BoSwBf7l5llNCOxz0IRbvOgRxenV9SF+Gf1plY/rjcH58JwY8oZqpK/n 2kof+hrOYIBEOBVXyF1LdV2Q6vMBPmrGqS5wh8VwggTi++/N59dKq0Oo6JhIfM96 9VG/qve0cPpnbl0XkRXtgzWVaKRh1TU0vpriWztCjp0nzAyTbkzGwzLHRhuMyWYb 7+9NXKlg7UhYFFKBDvvFPpSWYvPILmIFTyNP8/HZQJusoScgN0N/HqLPoPq4LoAu AXW4gxsUrVGDyg+LGCxceMkoIW6B0os= -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:30 2025 by rpki-client