$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81d027c2-60b1-33d1-89e3-b07adbc2aa06.roa File: 81d027c2-60b1-33d1-89e3-b07adbc2aa06.roa (raw, json) Hash identifier: h9VmMm4g0q2qgTpxtUk+rZtq880QD9xTa2uaUqWwF5Y= Subject key identifier: FC:D4:CB:1B:4E:85:88:5D:C1:76:A4:EF:48:08:B5:65:CE:DB:EB:55 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F1E2CAF2C50F5714EB82B480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81d027c2-60b1-33d1-89e3-b07adbc2aa06.roa Signing time: Thu 20 Feb 2025 11:33:40 +0000 ROA not before: Thu 20 Feb 2025 11:33:40 +0000 ROA not after: Wed 21 May 2025 10:33:40 +0000 asID: 30036 IP address blocks: 97.64.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:e2:ca:f2:c5:0f:57:14:eb:82:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 20 11:33:40 2025 GMT Not After : May 21 10:33:40 2025 GMT Subject: CN=b21b487d-f7fd-4772-a758-9c71dcda4439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:89:94:6c:06:b9:b3:a5:9d:91:f7:49:a0:9d: d3:f4:00:3f:1b:d3:53:1b:2a:ed:80:37:6f:04:5a: 11:5f:ca:7a:d7:9c:0b:39:df:af:be:06:ee:2a:47: 9f:e3:5c:1a:9c:93:0e:15:39:91:a4:ff:b0:42:d3: ae:e6:29:55:a2:78:f3:08:92:91:94:da:5e:09:da: 56:20:8f:81:cd:b2:18:0b:d0:da:b8:e2:5f:d4:27: 53:ae:c6:01:27:db:09:2f:cc:26:be:d7:21:67:95: 43:3a:3f:03:b1:6f:13:a5:c6:72:07:65:b0:68:34: dd:1b:5c:e6:1d:68:d5:c7:af:9c:37:1f:b7:d4:1c: b4:57:68:98:3f:3d:51:56:40:f7:d3:e7:f8:e8:d8: 0b:b2:b0:20:d8:94:2f:e8:c3:f0:4e:98:9b:e2:61: 29:c0:8b:a9:c0:04:eb:41:5a:ec:0c:4f:fb:1a:8a: b6:a3:40:63:cf:ac:b4:c3:3d:45:66:f4:7a:45:b6: 2a:a1:be:fb:e8:6b:03:b7:25:ae:bc:66:40:b9:cd: 45:e1:c7:90:55:93:2c:3d:9d:73:e6:70:ff:e8:5e: 26:93:fe:d4:db:36:70:fd:ba:cd:25:8b:8a:8c:90: 07:22:c4:c6:21:12:43:fa:26:f6:82:cb:6b:d6:47: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D4:CB:1B:4E:85:88:5D:C1:76:A4:EF:48:08:B5:65:CE:DB:EB:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/81d027c2-60b1-33d1-89e3-b07adbc2aa06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c0:2b:9c:26:9c:19:fb:93:68:5b:67:85:98:cc:97:73:6f: f9:b5:b8:fb:c3:b1:c5:91:4f:4a:c0:8f:4d:3d:80:fa:bf:a7: 3b:34:00:2a:ac:6a:27:87:b7:11:8c:62:d1:44:13:0a:63:34: 3e:6f:72:00:4b:d1:9a:76:59:9d:70:ff:18:71:79:fb:b7:a9: 1d:7d:2b:7c:d8:f0:e7:c5:22:f5:0c:db:68:40:47:81:32:ef: 50:35:17:99:94:7e:ff:74:5b:d3:48:c4:2d:83:86:13:34:aa: b7:ca:a9:b8:69:f7:56:2f:e1:89:ae:ac:55:b3:65:4b:62:ba: e0:91:58:4f:1c:7c:3f:96:c3:fe:03:26:e1:c9:e9:79:f2:6b: 30:1f:f2:73:65:00:9e:8c:2a:ee:5a:aa:38:e8:33:8b:5f:5e: 21:df:4a:8d:10:a8:9b:7b:b3:2b:d6:55:f5:bb:c3:a0:78:06: e7:e5:cb:4f:18:bd:1e:87:e4:73:20:84:7c:36:f9:29:81:89: f1:23:8a:8e:a9:53:ef:d3:a3:da:d5:46:23:db:1a:78:31:41: e8:85:a3:d0:6b:85:f7:b5:c6:dd:99:c3:93:7c:74:21:19:77: cc:64:f9:ed:de:63:23:44:fb:63:23:a9:60:78:6a:5d:c7:de: 9a:20:0e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx4sryxQ9XFOuCtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMDExMzM0MFoXDTI1MDUyMTEwMzM0MFowLzEtMCsGA1UEAxMk YjIxYjQ4N2QtZjdmZC00NzcyLWE3NTgtOWM3MWRjZGE0NDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4mUbAa5s6WdkfdJoJ3T9AA/G9NTGyrtgDdv BFoRX8p615wLOd+vvgbuKkef41wanJMOFTmRpP+wQtOu5ilVonjzCJKRlNpeCdpW II+BzbIYC9DauOJf1CdTrsYBJ9sJL8wmvtchZ5VDOj8DsW8TpcZyB2WwaDTdG1zm HWjVx6+cNx+31By0V2iYPz1RVkD30+f46NgLsrAg2JQv6MPwTpib4mEpwIupwATr QVrsDE/7Goq2o0Bjz6y0wz1FZvR6RbYqob776GsDtyWuvGZAuc1F4ceQVZMsPZ1z 5nD/6F4mk/7U2zZw/brNJYuKjJAHIsTGIRJD+ib2gstr1kc2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzUyxtOhYhdwXak70gItWXO2+tVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODFkMDI3YzItNjBiMS0z M2QxLTg5ZTMtYjA3YWRiYzJhYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDAK5wmnBn7k2hbZ4WYzJdzb/m1uPvDscWRT0rAj009gPq/pzs0ACqs aieHtxGMYtFEEwpjND5vcgBL0Zp2WZ1w/xhxefu3qR19K3zY8OfFIvUM22hAR4Ey 71A1F5mUfv90W9NIxC2DhhM0qrfKqbhp91Yv4YmurFWzZUtiuuCRWE8cfD+Ww/4D JuHJ6XnyazAf8nNlAJ6MKu5aqjjoM4tfXiHfSo0QqJt7syvWVfW7w6B4Bufly08Y vR6H5HMghHw2+SmBifEjio6pU+/To9rVRiPbGngxQeiFo9Brhfe1xt2Zw5N8dCEZ d8xk+e3eYyNE+2MjqWB4al3H3pogDvw= -----END CERTIFICATE-----Generated at Wed Apr 9 00:06:28 2025 by rpki-client