$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d409082c-a41a-325d-adc1-c4919ccec761.roa File: d409082c-a41a-325d-adc1-c4919ccec761.roa (raw, json) Hash identifier: J8Y2mj2BbPCa3B/JShWOQcjGl1VZoMJ7rQrHUVnM2ew= Subject key identifier: F9:40:5E:0E:D2:B1:0D:A5:9B:79:DF:35:12:7E:8B:53:BE:76:AA:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F1DB74117B8307D4B2054780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d409082c-a41a-325d-adc1-c4919ccec761.roa Signing time: Thu 20 Feb 2025 11:18:52 +0000 ROA not before: Thu 20 Feb 2025 11:18:52 +0000 ROA not after: Wed 21 May 2025 10:18:52 +0000 asID: 30036 IP address blocks: 97.64.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f1:db:74:11:7b:83:07:d4:b2:05:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 20 11:18:52 2025 GMT Not After : May 21 10:18:52 2025 GMT Subject: CN=8b5df6ff-b85a-40a7-973e-28f5b2226a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:71:50:0e:40:23:18:aa:47:da:c6:a3:30: a4:a4:da:bb:d3:dc:dd:53:89:f9:fc:ab:22:80:7b: c2:6c:62:4d:23:62:11:78:d0:6e:7b:6e:19:07:0a: cc:f2:6b:39:61:40:8f:a1:26:7d:6b:e0:e2:18:8a: 20:2f:ef:dd:8a:62:8a:a7:bc:9e:82:6d:db:e9:4e: 85:46:86:01:6e:10:c7:63:68:c9:ab:d6:8e:18:f7: 9c:9a:41:f3:8b:98:67:13:1e:83:54:9f:3a:b9:4d: 78:b8:3b:e7:87:5b:e9:cb:da:62:aa:f2:27:a8:22: cd:61:6c:de:c4:0f:58:d7:fa:d7:40:4f:38:6d:6c: f5:44:56:1b:f7:b1:23:11:cc:db:95:1c:63:1a:15: d2:23:50:03:af:48:bf:f8:46:90:42:da:6a:4b:dd: 84:7b:1d:4b:00:69:80:af:f2:36:6b:c5:bd:b1:8d: fc:5c:92:b7:cb:02:24:47:10:6f:cd:8a:47:44:78: e1:69:ae:c3:28:e2:53:c2:4e:14:03:58:22:78:09: bc:cd:da:3d:36:09:f7:29:a8:4d:35:38:ba:c4:a6: 9c:4e:86:fe:d3:b8:f5:94:e9:e9:e9:0f:f3:8e:49: 4e:4d:e2:ea:b9:81:e3:4c:c4:a7:37:54:31:d0:38: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:5E:0E:D2:B1:0D:A5:9B:79:DF:35:12:7E:8B:53:BE:76:AA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d409082c-a41a-325d-adc1-c4919ccec761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:34:09:4a:23:88:c3:54:08:c7:ba:e8:7e:86:62:c3:48:b3: 72:dc:45:83:99:e8:f0:9c:90:bf:1b:49:40:1f:bb:67:9e:0e: 89:af:22:e0:6c:31:f4:b5:61:61:f1:6a:c9:46:9b:53:88:cf: 2b:71:8c:72:66:4d:5c:ff:8a:0d:3e:50:5c:5b:a9:0b:1d:67: 61:2c:9f:06:eb:01:cf:d2:b3:f9:ed:4e:5d:21:6e:8e:70:6f: c5:c0:7a:ee:a7:69:bc:4c:42:d1:b8:6c:6b:5a:08:52:ea:22: 38:bb:a0:20:78:b5:07:15:b7:bf:07:10:30:af:29:1c:a3:be: b5:09:7e:f0:cf:cd:bd:87:59:e2:b3:86:0b:48:a5:24:52:98: f5:4c:9e:2e:05:48:2d:7d:48:fe:c9:4c:a7:1a:f8:db:7c:37: 3c:82:f6:26:56:20:ed:40:d7:9f:b8:d3:ed:86:b7:0b:d3:e5: 2f:f4:13:42:dd:0b:bd:fe:3e:93:ef:8c:db:a3:e0:39:57:03: 13:76:f5:61:97:a7:06:5f:ac:72:20:d1:7a:64:dc:69:13:f9: ed:b4:45:f1:83:c9:d7:03:5b:99:b9:c3:22:5a:c9:db:67:ed: e2:ec:eb:3d:61:74:46:ac:ac:7c:be:ae:2e:bf:9b:1b:c4:8e: 1c:f5:1f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjx23QRe4MH1LIFR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMDExMTg1MloXDTI1MDUyMTEwMTg1MlowLzEtMCsGA1UEAxMk OGI1ZGY2ZmYtYjg1YS00MGE3LTk3M2UtMjhmNWIyMjI2YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyxxUA5AIxiqR9rGozCkpNq709zdU4n5/Ksi gHvCbGJNI2IReNBue24ZBwrM8ms5YUCPoSZ9a+DiGIogL+/dimKKp7yegm3b6U6F RoYBbhDHY2jJq9aOGPecmkHzi5hnEx6DVJ86uU14uDvnh1vpy9piqvInqCLNYWze xA9Y1/rXQE84bWz1RFYb97EjEczblRxjGhXSI1ADr0i/+EaQQtpqS92Eex1LAGmA r/I2a8W9sY38XJK3ywIkRxBvzYpHRHjhaa7DKOJTwk4UA1gieAm8zdo9Ngn3KahN NTi6xKacTob+07j1lOnp6Q/zjklOTeLquYHjTMSnN1Qx0Dh7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlAXg7SsQ2lm3nfNRJ+i1O+dqq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDQwOTA4MmMtYTQxYS0z MjVkLWFkYzEtYzQ5MTljY2VjNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg0CUojiMNUCMe66H6GYsNIs3LcRYOZ6PCckL8bSUAfu2eeDomvIuBs MfS1YWHxaslGm1OIzytxjHJmTVz/ig0+UFxbqQsdZ2EsnwbrAc/Ss/ntTl0hbo5w b8XAeu6nabxMQtG4bGtaCFLqIji7oCB4tQcVt78HEDCvKRyjvrUJfvDPzb2HWeKz hgtIpSRSmPVMni4FSC19SP7JTKca+Nt8NzyC9iZWIO1A15+40+2GtwvT5S/0E0Ld C73+PpPvjNuj4DlXAxN29WGXpwZfrHIg0Xpk3GkT+e20RfGDydcDW5m5wyJaydtn 7eLs6z1hdEasrHy+ri6/mxvEjhz1H/c= -----END CERTIFICATE-----Generated at Tue Apr 8 23:53:44 2025 by rpki-client