$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa File: c3576258-b614-3b21-8d5b-359116d3ac3b.roa (raw, json) Hash identifier: r2qvzVxVT59o8QyqmDjl9qHjI6gO4sEtqJXGDI51a0g= Subject key identifier: 33:36:7E:55:C3:8F:3C:35:72:CC:41:7A:AA:C4:8D:4C:6B:DC:27:32 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F4A63D0AE6141EA35E573640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa Signing time: Fri 21 Feb 2025 11:19:04 +0000 ROA not before: Fri 21 Feb 2025 11:19:04 +0000 ROA not after: Thu 22 May 2025 10:19:04 +0000 asID: 30036 IP address blocks: 97.64.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:a6:3d:0a:e6:14:1e:a3:5e:57:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 21 11:19:04 2025 GMT Not After : May 22 10:19:04 2025 GMT Subject: CN=01547a8d-fb62-49ba-80c9-0580a7140af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:a9:05:db:1f:36:7b:44:62:a2:72:f0:92: 4f:31:c8:8f:c5:e4:48:1c:77:67:bd:67:bd:08:2b: 0e:73:11:16:ca:34:88:7d:16:38:35:93:f1:39:44: 6d:a4:74:b2:55:24:c5:d1:e1:58:98:e3:f2:4c:6d: 9e:93:dc:56:35:1c:14:8c:bb:e5:fc:f0:e2:8b:7b: d7:d8:cc:47:d2:69:e4:78:f1:f0:66:2c:57:af:ab: ad:94:0a:23:e6:0d:30:38:4e:d8:05:2e:78:d1:33: c4:8b:51:15:b8:fc:d8:28:0d:e9:42:a6:9f:76:9a: a7:da:20:d6:ae:e5:12:55:1c:3e:f6:1a:95:0a:aa: a7:3d:ec:6b:f5:16:6a:0a:1c:b7:84:f6:da:ff:15: ad:02:af:34:05:bf:ed:a6:c2:c5:a2:34:70:b3:4f: 4b:eb:45:ba:f8:ac:c6:7f:e5:4e:f4:dc:2c:3d:bf: fc:e7:77:8a:f4:7b:a0:3d:6d:8e:df:c8:4a:22:e8: 65:c1:d4:97:de:e6:f9:66:e4:bc:0f:2d:df:26:bc: 81:b0:6d:73:fd:d4:af:37:7f:c0:32:4e:d2:d7:da: c8:ba:ff:9d:1e:40:66:6e:1a:d1:e8:ca:3e:7a:fc: 9a:ce:d7:63:90:e1:da:ec:55:95:bb:4e:a1:38:8c: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:36:7E:55:C3:8F:3C:35:72:CC:41:7A:AA:C4:8D:4C:6B:DC:27:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c3576258-b614-3b21-8d5b-359116d3ac3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:4c:e1:e1:fc:43:09:b8:36:09:a1:90:6d:33:33:29:e8:d9: d8:03:5e:5a:26:c8:e3:85:87:1d:4f:da:9f:f1:c0:67:ba:bd: 2e:cd:75:af:ca:86:be:11:19:4a:24:7d:ac:72:5f:40:83:b0: c9:07:87:ed:eb:e7:b2:17:67:c3:a4:c2:ad:95:45:6a:33:85: 0c:2f:03:84:31:ec:47:2b:b7:4d:ff:32:78:fa:5a:51:fb:67: 47:12:7d:e4:79:30:99:24:85:96:c5:d5:63:54:e2:0f:62:e5: b3:38:52:e4:67:0a:4b:06:e7:9f:72:26:7f:c7:ce:f1:af:c2: 93:2d:6c:6a:34:a2:a9:83:12:55:78:6b:8c:22:a6:67:04:d6: 37:fe:8c:da:5f:10:71:fb:81:ef:ae:a8:20:ef:d6:f1:e6:ff: b0:4b:8c:87:81:62:58:75:23:5f:f6:20:ee:36:91:5a:d5:d7: c3:1c:59:a6:78:70:3d:6c:b7:ab:4c:d0:fc:48:d1:36:ed:52: 2e:6e:2a:1e:42:7e:84:92:9b:94:b6:1e:b6:eb:6a:c0:35:90: d7:a9:65:3f:20:bd:e6:05:58:b4:c6:4a:1b:6e:04:3d:e8:b6: 67:04:ff:d0:f2:93:c5:54:4d:2f:b0:34:ce:74:9a:e3:ce:93: 71:c4:08:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0pj0K5hQeo15XNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMTExMTkwNFoXDTI1MDUyMjEwMTkwNFowLzEtMCsGA1UEAxMk MDE1NDdhOGQtZmI2Mi00OWJhLTgwYzktMDU4MGE3MTQwYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwupBdsfNntEYqJy8JJPMciPxeRIHHdnvWe9 CCsOcxEWyjSIfRY4NZPxOURtpHSyVSTF0eFYmOPyTG2ek9xWNRwUjLvl/PDii3vX 2MxH0mnkePHwZixXr6utlAoj5g0wOE7YBS540TPEi1EVuPzYKA3pQqafdpqn2iDW ruUSVRw+9hqVCqqnPexr9RZqChy3hPba/xWtAq80Bb/tpsLFojRws09L60W6+KzG f+VO9NwsPb/853eK9HugPW2O38hKIuhlwdSX3ub5ZuS8Dy3fJryBsG1z/dSvN3/A Mk7S19rIuv+dHkBmbhrR6Mo+evyaztdjkOHa7FWVu06hOIytCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM2flXDjzw1csxBeqrEjUxr3CcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzM1NzYyNTgtYjYxNC0z YjIxLThkNWItMzU5MTE2ZDNhYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1M4eH8Qwm4NgmhkG0zMyno2dgDXlomyOOFhx1P2p/xwGe6vS7Nda/K hr4RGUokfaxyX0CDsMkHh+3r57IXZ8Okwq2VRWozhQwvA4Qx7Ecrt03/Mnj6WlH7 Z0cSfeR5MJkkhZbF1WNU4g9i5bM4UuRnCksG559yJn/HzvGvwpMtbGo0oqmDElV4 a4wipmcE1jf+jNpfEHH7ge+uqCDv1vHm/7BLjIeBYlh1I1/2IO42kVrV18McWaZ4 cD1st6tM0PxI0TbtUi5uKh5CfoSSm5S2HrbrasA1kNepZT8gveYFWLTGShtuBD3o tmcE/9Dyk8VUTS+wNM50muPOk3HECLM= -----END CERTIFICATE-----Generated at Wed Apr 9 00:22:50 2025 by rpki-client