$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/95e399c5-d3c0-3740-baca-1db3bc70002a.roa File: 95e399c5-d3c0-3740-baca-1db3bc70002a.roa (raw, json) Hash identifier: g97+AVguKLX8Pp0IWPSt8BBAvbV8GcuclelWYFBeKWI= Subject key identifier: 35:14:B6:1B:5C:95:2C:B9:E0:4D:D3:97:85:20:45:73:98:43:18:81 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F49EA1BDCF417B5A3A50FB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/95e399c5-d3c0-3740-baca-1db3bc70002a.roa Signing time: Fri 21 Feb 2025 11:03:45 +0000 ROA not before: Fri 21 Feb 2025 11:03:45 +0000 ROA not after: Thu 22 May 2025 10:03:45 +0000 asID: 30036 IP address blocks: 97.64.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:9e:a1:bd:cf:41:7b:5a:3a:50:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 21 11:03:45 2025 GMT Not After : May 22 10:03:45 2025 GMT Subject: CN=76251f9b-e0cc-4d27-a71a-5b3d7c5686aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:27:3b:3b:70:93:e7:5f:6d:4e:38:f6:a1: 06:5b:37:d6:d5:59:3c:ef:a3:ef:4d:78:72:3b:77: 20:43:95:52:37:c2:96:4f:81:bc:2e:38:37:a5:b1: a3:c9:9b:ad:5f:0e:52:9e:dd:90:f3:f4:35:ca:7f: cd:a1:8b:25:32:46:15:7e:7f:47:72:46:9c:5d:c3: 91:61:9c:7d:da:d9:8b:7f:fb:3e:c3:c8:2a:bc:d6: 53:e8:cc:51:66:67:f0:1b:f2:5b:99:4c:21:f3:1f: 64:4f:a6:61:02:0f:79:ce:12:2d:44:fb:68:ac:b0: 7b:dc:0a:11:c4:2d:e4:d2:98:6a:67:f1:a0:ea:97: 9e:8f:96:1f:f7:75:8a:3f:10:83:ca:ba:b4:27:78: 1c:a5:5e:23:f1:71:ed:3d:21:02:88:19:fc:2d:bd: aa:d9:8b:27:66:39:c1:24:73:cd:b1:0e:4d:8e:18: d1:3a:43:be:21:22:2f:bb:ca:82:bb:c7:a8:f9:dc: 70:38:f0:48:9f:3a:22:51:76:c1:55:26:9b:6e:1e: 07:1a:b3:11:e5:a2:a1:c5:6a:97:c9:d5:01:61:21: 9a:d6:b8:3a:2e:fb:a5:1c:83:4d:b1:8d:1e:21:9c: 8a:6c:00:81:67:2e:a5:92:89:09:7f:6b:47:ae:7c: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:14:B6:1B:5C:95:2C:B9:E0:4D:D3:97:85:20:45:73:98:43:18:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/95e399c5-d3c0-3740-baca-1db3bc70002a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a3:79:69:e8:34:bc:29:36:71:1e:4c:38:b7:92:ff:91:5d: b6:39:37:5f:1f:2f:4e:3f:33:08:8a:6d:26:61:6a:13:3c:65: 86:79:b9:2c:89:cc:ed:c5:0b:c7:ce:91:12:ff:d3:38:dc:c2: 93:7f:6d:a7:11:7d:c9:74:e7:67:13:05:6f:94:8d:40:c4:84: 51:e1:35:45:38:58:bf:d6:a7:d3:47:b2:1a:12:5e:51:89:b2: e9:46:d9:0c:2f:35:fc:c2:b0:00:97:f4:9f:16:84:fc:c1:87: 77:35:73:bd:f5:25:23:bd:e1:4a:64:6f:2a:86:8e:ee:3c:5d: d1:89:f9:3f:de:39:11:0d:04:1a:93:2f:41:aa:33:41:dc:56: 1d:33:19:1c:65:b6:4f:27:e0:ca:57:79:9d:fb:65:7c:2b:7e: cf:8d:f9:df:59:3c:2a:1c:11:7a:69:56:62:65:2c:2e:94:f3: 39:d5:5f:a1:62:68:59:cf:4f:50:b3:a1:3f:52:8e:15:21:6d: 09:5e:63:4b:73:ac:d1:c8:7a:0e:f8:60:af:09:0f:4a:d3:9b: 76:19:6f:5c:ba:9c:49:75:f0:65:ea:7d:2a:5c:ea:ea:48:02: c7:97:fe:70:a6:d8:0a:b2:e6:3b:ef:93:bd:f8:6e:db:33:3a: 85:ff:18:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0nqG9z0F7WjpQ+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMTExMDM0NVoXDTI1MDUyMjEwMDM0NVowLzEtMCsGA1UEAxMk NzYyNTFmOWItZTBjYy00ZDI3LWE3MWEtNWIzZDdjNTY4NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxMnOztwk+dfbU449qEGWzfW1Vk876PvTXhy O3cgQ5VSN8KWT4G8Ljg3pbGjyZutXw5Snt2Q8/Q1yn/NoYslMkYVfn9HckacXcOR YZx92tmLf/s+w8gqvNZT6MxRZmfwG/JbmUwh8x9kT6ZhAg95zhItRPtorLB73AoR xC3k0phqZ/Gg6peej5Yf93WKPxCDyrq0J3gcpV4j8XHtPSECiBn8Lb2q2YsnZjnB JHPNsQ5NjhjROkO+ISIvu8qCu8eo+dxwOPBInzoiUXbBVSabbh4HGrMR5aKhxWqX ydUBYSGa1rg6LvulHINNsY0eIZyKbACBZy6lkokJf2tHrnzEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUUthtclSy54E3Tl4UgRXOYQxiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTVlMzk5YzUtZDNjMC0z NzQwLWJhY2EtMWRiM2JjNzAwMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWjeWnoNLwpNnEeTDi3kv+RXbY5N18fL04/MwiKbSZhahM8ZYZ5uSyJ zO3FC8fOkRL/0zjcwpN/bacRfcl052cTBW+UjUDEhFHhNUU4WL/Wp9NHshoSXlGJ sulG2QwvNfzCsACX9J8WhPzBh3c1c731JSO94UpkbyqGju48XdGJ+T/eORENBBqT L0GqM0HcVh0zGRxltk8n4MpXeZ37ZXwrfs+N+d9ZPCocEXppVmJlLC6U8znVX6Fi aFnPT1CzoT9SjhUhbQleY0tzrNHIeg74YK8JD0rTm3YZb1y6nEl18GXqfSpc6upI AseX/nCm2Aqy5jvvk734btszOoX/GPI= -----END CERTIFICATE-----Generated at Wed Apr 9 00:22:56 2025 by rpki-client