$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/850d6c86-4284-3a71-b5b0-e675e5fab273.roa File: 850d6c86-4284-3a71-b5b0-e675e5fab273.roa (raw, json) Hash identifier: k2fi91RJKkiVBrxhBijX8jMH0RmFI28RSEiZ25Zy3q4= Subject key identifier: 37:E8:B6:A4:C7:8E:F3:DA:13:1D:21:D5:6D:C2:7F:CC:FB:3D:51:41 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F49EBDFABB583B657B49D800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/850d6c86-4284-3a71-b5b0-e675e5fab273.roa Signing time: Fri 21 Feb 2025 11:03:58 +0000 ROA not before: Fri 21 Feb 2025 11:03:58 +0000 ROA not after: Thu 22 May 2025 10:03:58 +0000 asID: 30036 IP address blocks: 97.64.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:9e:bd:fa:bb:58:3b:65:7b:49:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 21 11:03:58 2025 GMT Not After : May 22 10:03:58 2025 GMT Subject: CN=303acb1c-1940-4e02-a79f-59e81789b40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:93:3b:95:23:65:27:b6:58:3f:63:7e:cf: 5a:46:91:5a:41:98:b9:b6:4e:53:01:1b:c8:a4:bb: d4:5c:d7:96:77:ef:24:2b:66:c5:9c:c6:ce:b2:f0: 6b:91:f9:ea:98:c5:40:18:9c:c7:4b:21:57:38:64: 88:64:98:ce:76:45:03:86:98:9d:7d:94:b0:3d:2b: 05:83:7e:0e:aa:df:70:24:be:5c:c6:7d:e3:8e:70: e0:e7:05:ac:54:bc:b3:82:a1:82:24:1e:6d:a7:05: 82:fa:42:b7:c6:c8:b0:f0:91:9e:62:75:ec:a0:99: 47:71:96:8c:cc:dd:ee:02:30:3d:19:40:c3:7a:5c: 5f:02:ac:ea:bf:4c:c6:70:ea:5d:11:74:c8:61:39: 42:dd:99:a3:46:c0:a6:d4:4e:4c:77:ae:7d:28:0c: dc:8f:9e:82:35:c8:44:4b:cb:dc:d2:b6:03:4d:52: b2:d9:69:16:f3:bc:08:3e:06:04:b5:72:84:4a:ae: fe:ea:42:43:70:75:9f:29:ac:91:31:ca:48:a3:68: 4b:f7:d1:02:98:49:25:dc:66:2b:d1:03:1a:0b:bc: bd:fe:ee:4b:51:b8:7c:18:23:50:23:09:7d:7a:c1: 98:ed:28:96:cb:66:96:da:ec:1b:1f:96:e0:a7:f6: 84:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E8:B6:A4:C7:8E:F3:DA:13:1D:21:D5:6D:C2:7F:CC:FB:3D:51:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/850d6c86-4284-3a71-b5b0-e675e5fab273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:13:1b:b2:35:7f:0b:94:0b:14:22:98:94:56:2d:39:7f:93: d5:1c:9a:36:a6:67:a0:13:de:3f:76:3b:19:f0:24:ae:a2:39: 38:44:a8:53:a4:1a:e4:1b:dc:ea:4a:dd:75:ee:60:0a:88:de: 33:f3:d2:89:13:48:89:fb:06:5f:2e:44:c0:5c:7b:56:3e:24: 51:66:7b:b9:53:c5:1c:f8:10:77:d1:b6:92:68:94:ac:99:5d: 56:1a:42:02:92:bb:8c:38:01:0c:8a:53:59:43:f3:3c:50:33: 73:75:5e:d8:f1:41:06:7a:0b:0b:59:11:ea:08:e3:46:de:d8: be:46:09:4e:98:9b:12:e8:88:4e:e8:f0:39:c4:47:a5:df:77: 36:42:ce:71:1d:b6:47:a8:e8:20:c2:8e:54:e6:e7:0b:5f:ba: 96:eb:1c:0d:2e:71:ab:8f:f0:ae:3b:82:b2:3a:e1:04:1c:fc: 1b:d8:99:23:50:85:cb:ed:6d:6f:60:48:7e:5f:dd:43:69:fb: f0:5f:c4:13:90:49:ea:1a:16:4c:94:69:f8:bb:a7:dc:82:b7: dd:7f:d9:37:85:bd:17:98:c9:3b:ed:62:74:5f:2d:dc:ef:62: 82:e2:5a:16:de:9d:bf:6e:f3:8c:f9:fe:0d:cf:a3:a6:c2:69: 7e:5e:36:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0nr36u1g7ZXtJ2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMTExMDM1OFoXDTI1MDUyMjEwMDM1OFowLzEtMCsGA1UEAxMk MzAzYWNiMWMtMTk0MC00ZTAyLWE3OWYtNTllODE3ODliNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8yTO5UjZSe2WD9jfs9aRpFaQZi5tk5TARvI pLvUXNeWd+8kK2bFnMbOsvBrkfnqmMVAGJzHSyFXOGSIZJjOdkUDhpidfZSwPSsF g34Oqt9wJL5cxn3jjnDg5wWsVLyzgqGCJB5tpwWC+kK3xsiw8JGeYnXsoJlHcZaM zN3uAjA9GUDDelxfAqzqv0zGcOpdEXTIYTlC3ZmjRsCm1E5Md659KAzcj56CNchE S8vc0rYDTVKy2WkW87wIPgYEtXKESq7+6kJDcHWfKayRMcpIo2hL99ECmEkl3GYr 0QMaC7y9/u5LUbh8GCNQIwl9esGY7SiWy2aW2uwbH5bgp/aEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfotqTHjvPaEx0h1W3Cf8z7PVFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODUwZDZjODYtNDI4NC0z YTcxLWI1YjAtZTY3NWU1ZmFiMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYTG7I1fwuUCxQimJRWLTl/k9UcmjamZ6AT3j92OxnwJK6iOThEqFOk GuQb3OpK3XXuYAqI3jPz0okTSIn7Bl8uRMBce1Y+JFFme7lTxRz4EHfRtpJolKyZ XVYaQgKSu4w4AQyKU1lD8zxQM3N1XtjxQQZ6CwtZEeoI40be2L5GCU6YmxLoiE7o 8DnER6XfdzZCznEdtkeo6CDCjlTm5wtfupbrHA0ucauP8K47grI64QQc/BvYmSNQ hcvtbW9gSH5f3UNp+/BfxBOQSeoaFkyUafi7p9yCt91/2TeFvReYyTvtYnRfLdzv YoLiWhbenb9u84z5/g3Po6bCaX5eNuE= -----END CERTIFICATE-----Generated at Wed Apr 9 05:37:25 2025 by rpki-client