$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa File: 8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa (raw, json) Hash identifier: u84HWw6i0Fr3KJY2OwdciCTHFGTp5V0OG/rtjMvJ2y8= Subject key identifier: 53:B1:5E:6C:04:F0:72:C2:75:BD:AE:93:B6:50:4A:20:F1:31:EA:55 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F1DB7DBD3A359F2561E3A740 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa Signing time: Thu 20 Feb 2025 11:18:57 +0000 ROA not before: Thu 20 Feb 2025 11:18:57 +0000 ROA not after: Wed 21 May 2025 10:18:57 +0000 asID: 30036 IP address blocks: 97.64.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:db:7d:bd:3a:35:9f:25:61:e3:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 20 11:18:57 2025 GMT Not After : May 21 10:18:57 2025 GMT Subject: CN=467658f5-e976-4f94-8b7a-1cf493ae0c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:69:45:54:6a:89:00:47:c7:6c:9d:48:f5: 7d:70:53:f5:81:86:28:9a:a4:44:7b:97:00:f2:e6: aa:e3:95:57:8f:b2:eb:6e:cb:4d:cb:eb:59:b9:87: 58:43:99:b4:ad:0a:54:7c:fb:8a:a9:6e:d7:34:8b: 29:e6:c1:ba:2b:66:44:cf:e4:59:88:59:ef:e5:29: c9:0b:0c:42:25:36:bf:7d:25:13:f4:b5:8c:20:4b: 98:94:d1:ae:b2:97:d2:14:d9:c9:d0:e5:21:60:0b: bb:14:ca:c3:06:6c:f0:bb:a2:21:95:81:f5:fb:ac: 98:86:34:c0:db:d0:69:e9:8b:7c:28:dd:bd:01:cd: 3a:78:2f:80:54:bb:a6:02:75:e3:e9:eb:cc:7a:f1: ba:c3:0b:29:6f:46:d1:49:f0:08:d8:4f:1e:b3:03: cc:03:d6:d6:c0:92:c6:0f:2e:fe:28:ed:ea:c2:03: e9:6e:e2:20:ec:b8:76:39:ec:4d:81:8e:11:25:b6: df:58:cb:a8:9a:8d:a4:2e:92:ea:b3:fd:a9:66:ae: 30:37:0e:09:e6:c8:82:cb:60:cc:ca:a4:e3:5a:bd: cd:67:ea:80:4f:6b:e3:5f:0b:7b:da:b7:85:3c:8e: 45:a1:a8:6a:1e:d3:e5:2e:85:05:91:b6:bd:aa:87: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:5E:6C:04:F0:72:C2:75:BD:AE:93:B6:50:4A:20:F1:31:EA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:aa:ee:63:d5:eb:87:5b:57:de:d1:75:0f:a7:10:a2:58:d3: 26:84:bb:29:31:ed:cf:ee:d1:8b:18:3f:40:bb:bd:37:09:63: 7e:d6:32:ef:48:d3:24:e6:02:22:56:53:02:d1:6f:b4:da:ad: 0a:49:bc:15:95:e6:04:9a:97:b8:d8:c6:76:7b:4f:0f:51:bb: b6:ea:a7:aa:4a:76:59:31:da:9d:f2:82:98:c2:fa:a1:d3:d3: d7:a9:83:ec:aa:0d:fb:fe:50:6e:7c:a2:37:7e:b3:38:ea:c1: b2:e1:17:89:b6:86:64:b6:27:3f:56:b8:c0:e3:3a:0c:7c:86: 90:86:b6:23:88:bb:cc:42:52:18:0b:ce:66:bc:ec:cb:7b:91: 90:24:2d:76:2e:d2:02:46:70:f5:28:af:f5:ef:ce:ed:02:58: 84:9f:43:63:10:cc:31:b6:61:13:6a:fe:38:c2:bd:54:30:54: e3:8a:e1:a0:f6:6d:45:e5:bc:e9:e1:17:d2:ff:6e:25:27:c7: 97:89:99:47:25:c7:9a:e2:8f:8f:43:62:ef:e2:31:00:c3:95: 27:03:33:b0:15:21:2a:d5:dd:58:57:9a:85:11:dc:16:71:94: fd:42:5f:e0:37:54:63:87:48:f2:17:76:1b:81:3c:3f:52:97: b8:d5:9d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx2329OjWfJWHjp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMDExMTg1N1oXDTI1MDUyMTEwMTg1N1owLzEtMCsGA1UEAxMk NDY3NjU4ZjUtZTk3Ni00Zjk0LThiN2EtMWNmNDkzYWUwYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDZpRVRqiQBHx2ydSPV9cFP1gYYomqREe5cA 8uaq45VXj7LrbstNy+tZuYdYQ5m0rQpUfPuKqW7XNIsp5sG6K2ZEz+RZiFnv5SnJ CwxCJTa/fSUT9LWMIEuYlNGuspfSFNnJ0OUhYAu7FMrDBmzwu6IhlYH1+6yYhjTA 29Bp6Yt8KN29Ac06eC+AVLumAnXj6evMevG6wwspb0bRSfAI2E8eswPMA9bWwJLG Dy7+KO3qwgPpbuIg7Lh2OexNgY4RJbbfWMuomo2kLpLqs/2pZq4wNw4J5siCy2DM yqTjWr3NZ+qAT2vjXwt72reFPI5FoahqHtPlLoUFkba9qoeSTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOxXmwE8HLCdb2uk7ZQSiDxMepVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGJhMTJlOGItMWJhMy0z NWNmLWE5ZGUtZWFhY2ZiNWExZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSq7mPV64dbV97RdQ+nEKJY0yaEuykx7c/u0YsYP0C7vTcJY37WMu9I 0yTmAiJWUwLRb7TarQpJvBWV5gSal7jYxnZ7Tw9Ru7bqp6pKdlkx2p3ygpjC+qHT 09epg+yqDfv+UG58ojd+szjqwbLhF4m2hmS2Jz9WuMDjOgx8hpCGtiOIu8xCUhgL zma87Mt7kZAkLXYu0gJGcPUor/Xvzu0CWISfQ2MQzDG2YRNq/jjCvVQwVOOK4aD2 bUXlvOnhF9L/biUnx5eJmUclx5rij49DYu/iMQDDlScDM7AVISrV3VhXmoUR3BZx lP1CX+A3VGOHSPIXdhuBPD9Sl7jVnfw= -----END CERTIFICATE-----Generated at Tue Apr 8 23:51:25 2025 by rpki-client