$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa File: 9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa (raw, json) Hash identifier: 2jPw3de4u8rb3nMVS0HaUWynmanWsKPM392JBEdXlNg= Subject key identifier: 96:1C:E4:13:84:29:49:34:12:87:21:F4:29:34:0E:79:69:8D:38:42 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584943D2FFF598E232C8F4DDA600 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa Signing time: Fri 21 Mar 2025 19:58:07 +0000 ROA not before: Fri 21 Mar 2025 19:58:07 +0000 ROA not after: Thu 19 Jun 2025 19:58:07 +0000 asID: 8070 IP address blocks: 97.107.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:d2:ff:f5:98:e2:32:c8:f4:dd:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Mar 21 19:58:07 2025 GMT Not After : Jun 19 19:58:07 2025 GMT Subject: CN=2ca3fcac-558b-4082-a4a2-29cdbea971f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:8c:52:f7:ba:0a:70:13:20:22:b3:04:17: 2f:e8:f4:3e:b7:83:30:d4:17:f0:cf:b4:43:5d:15: c1:8c:de:48:3c:8d:d3:7a:d5:3c:a5:68:29:60:7a: e9:4f:e5:02:1d:c1:57:d6:c5:7c:fc:a6:33:ba:38: b3:e4:00:18:ef:cf:f3:0d:46:7a:80:ab:73:05:76: b0:07:2a:4c:ac:43:23:32:bc:c3:92:88:a7:c0:c5: c1:4d:b8:bc:91:12:ee:59:37:9b:dd:2e:01:02:fe: d7:8a:e0:76:22:6a:1d:de:30:17:1d:3f:f6:b1:0c: ee:c4:6d:d4:a1:7e:95:79:53:89:88:4b:35:93:18: eb:de:2e:4a:b7:0c:0e:63:ac:b9:d6:c5:24:61:95: 72:b7:ea:e7:c2:72:31:e0:af:a7:e2:85:75:03:c5: dc:af:30:5e:71:1e:66:76:a1:a0:76:2a:c5:94:fd: 39:6f:6f:83:f5:fb:5c:a4:4e:cf:9c:57:7c:31:b0: 11:98:e8:6c:1e:17:82:8c:8a:cb:c7:9d:5b:2c:20: 16:dc:02:52:7f:27:b0:9f:d1:c5:62:5d:b8:e3:44: ad:0d:7d:05:5c:bf:f6:85:1d:5d:83:a8:89:de:2a: 5c:3f:09:46:6c:07:f9:4a:e2:cb:dc:e0:5a:08:1f: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1C:E4:13:84:29:49:34:12:87:21:F4:29:34:0E:79:69:8D:38:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c8:21:0e:ee:24:90:d2:4b:d4:7d:b3:fb:4d:99:a5:20:ee: 16:c8:ba:70:85:33:78:eb:75:4f:32:ed:65:9f:c6:29:bb:01: de:f3:8c:95:dc:88:af:5f:98:8d:a6:80:2f:87:8a:f3:7f:91: 73:1e:13:55:19:24:a3:88:8d:e6:89:d6:80:af:1d:3f:0d:68: fa:be:32:5e:78:43:0d:df:21:0b:ec:b7:02:2d:38:49:5d:a8: 1e:3e:a1:09:82:c3:de:25:08:6f:56:dd:02:6a:d2:4f:e4:b2: 32:2d:15:75:98:05:45:e9:e6:83:31:1d:e2:67:ee:74:19:f7: 0b:bf:77:d7:bc:09:9a:50:86:b3:ba:5c:c5:70:81:f1:05:80: f9:3a:86:37:c3:ca:f5:3e:88:6e:c5:bd:78:be:0b:da:c8:85: c1:23:84:76:57:25:83:91:22:2c:9d:d6:70:ec:58:7a:b0:82: ce:a7:36:5a:df:92:e2:c1:73:65:87:32:3b:93:60:69:a3:f7: 75:32:70:02:f9:33:d3:67:6f:bf:8f:7c:67:b8:39:08:a3:a2: de:ff:a6:c6:8f:de:4c:ae:01:e0:3f:83:ac:c9:71:17:08:0c: 6d:7c:45:ff:63:ad:e1:3f:09:33:fc:7d:e7:e3:c1:60:f3:fb: a6:56:61:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElD0v/1mOIyyPTdpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MDMyMTE5NTgwN1oXDTI1MDYxOTE5NTgwN1owLzEtMCsGA1UEAxMk MmNhM2ZjYWMtNTU4Yi00MDgyLWE0YTItMjljZGJlYTk3MWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT6MUve6CnATICKzBBcv6PQ+t4Mw1Bfwz7RD XRXBjN5IPI3TetU8pWgpYHrpT+UCHcFX1sV8/KYzujiz5AAY78/zDUZ6gKtzBXaw BypMrEMjMrzDkoinwMXBTbi8kRLuWTeb3S4BAv7XiuB2Imod3jAXHT/2sQzuxG3U oX6VeVOJiEs1kxjr3i5KtwwOY6y51sUkYZVyt+rnwnIx4K+n4oV1A8XcrzBecR5m dqGgdirFlP05b2+D9ftcpE7PnFd8MbARmOhsHheCjIrLx51bLCAW3AJSfyewn9HF Yl2440StDX0FXL/2hR1dg6iJ3ipcPwlGbAf5SuLL3OBaCB/XtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYc5BOEKUk0Eoch9Ck0DnlpjThCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvOWM3ZGJjOTMtN2EwNi0z MDg5LThmODQtZjVlMDcyZmZhYWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYWvvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/IIQ7uJJDSS9R9s/tNmaUg7hbIunCFM3jrdU8y7WWfxim7Ad7zjJXc iK9fmI2mgC+HivN/kXMeE1UZJKOIjeaJ1oCvHT8NaPq+Ml54Qw3fIQvstwItOEld qB4+oQmCw94lCG9W3QJq0k/ksjItFXWYBUXp5oMxHeJn7nQZ9wu/d9e8CZpQhrO6 XMVwgfEFgPk6hjfDyvU+iG7FvXi+C9rIhcEjhHZXJYORIiyd1nDsWHqwgs6nNlrf kuLBc2WHMjuTYGmj93UycAL5M9Nnb7+PfGe4OQijot7/psaP3kyuAeA/g6zJcRcI DG18Rf9jreE/CTP8fefjwWDz+6ZWYdE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:58 2025 by rpki-client