$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa File: a63530f0-6154-3c2a-80c7-10e826431502.roa (raw, json) Hash identifier: bpGO3mJ7qwunrn3igQF08ZK4iud9t//pZxiVVaE08vo= Subject key identifier: 48:43:4B:61:63:F2:B5:AB:B6:FA:91:80:1A:41:B5:A5:04:39:0A:60 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F43285848E16BD941AE7F0C1C35E76CD0 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 46657 IP address blocks: 97.107.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d9:41:ae:7f:0c:1c:35:e7:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=32e06578-a2d5-4f9d-a0e4-afd8aed171e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:23:3c:a9:f5:e9:9c:64:bd:e0:e9:25:30: a7:36:c8:9d:04:9c:89:85:8e:0d:61:23:04:99:a9: d6:88:12:16:c6:7a:cb:5c:ca:6e:fc:c7:d9:de:a5: fb:2d:37:77:e0:51:34:2c:43:90:1a:da:dc:a6:68: d1:69:e2:32:df:fc:e7:2c:87:54:79:22:41:6a:24: a8:40:9d:73:49:19:b3:55:d9:2e:23:47:0e:8d:44: 08:66:7a:d0:5f:0c:37:8a:d9:70:ea:cf:37:0a:e2: 71:73:d6:1d:09:13:b2:e2:93:77:60:96:e2:c2:73: 53:6e:ae:d6:63:07:64:70:27:dd:0a:fb:1a:0b:3a: aa:08:27:de:49:7e:ee:f2:97:21:fb:b1:a7:0a:d9: 80:7d:a2:9d:f7:36:60:f7:a5:ea:a1:72:8b:87:91: 8a:10:54:76:61:43:39:2c:96:e0:b4:d0:b2:0b:bc: 85:78:53:e8:ac:c1:28:28:ae:30:92:89:0d:3b:d2: 1b:bb:1b:8b:73:a2:6d:f5:39:36:18:9d:97:fe:3d: 90:58:b4:5f:ef:13:10:c7:11:05:1f:53:6d:24:79: 91:c4:bb:e1:d2:7d:43:a5:57:6d:6d:93:03:99:7a: b1:3c:e4:33:5a:b7:22:54:28:3d:ec:9d:44:f6:e1: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:43:4B:61:63:F2:B5:AB:B6:FA:91:80:1A:41:B5:A5:04:39:0A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0a:f8:0d:1c:95:94:dd:3a:bd:9d:4b:c6:94:7c:83:c7:70: 50:69:51:1a:42:29:7b:40:e6:57:02:f4:bf:b0:a8:a5:e2:5c: 33:a0:ef:c5:4c:aa:ea:47:fb:f9:e4:af:0e:9c:95:2e:2d:90: af:a2:87:e0:25:c3:b2:db:1d:c4:1d:cc:6b:01:37:45:92:70: 24:84:b4:b1:0b:d7:26:79:7f:92:3c:a8:cd:b2:34:5d:b1:bb: 95:46:d7:80:61:a0:da:78:8b:a7:3b:7b:6f:44:36:db:29:c3: 4c:0d:99:8b:67:d6:c0:93:e4:3a:05:4f:cf:17:2f:90:2d:a3: 15:1a:4f:28:f3:09:df:d0:f5:5c:dc:5b:68:58:ec:a0:4a:bc: be:6b:17:dc:74:50:80:15:41:a7:3e:b2:5c:5a:cf:0f:85:64: 9c:f0:0a:f6:9c:eb:e0:06:fc:18:51:7b:29:00:23:63:cb:11: f7:c8:d2:13:c6:4d:01:9b:cd:c5:89:f9:8d:26:10:b2:87:4b: ae:08:99:f5:ee:e6:91:f1:c6:28:90:b7:ab:78:eb:cd:d8:77: 52:0d:84:68:04:56:b9:4d:7f:41:b3:7f:ce:ab:08:bd:f2:f7: 10:89:9d:bc:37:85:18:41:b0:1b:90:67:68:9d:a1:9c:b7:e4: 61:a7:df:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9lBrn8MHDXnbNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MzJlMDY1NzgtYTJkNS00ZjlkLWEwZTQtYWZkOGFlZDE3MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLEjPKn16ZxkveDpJTCnNsidBJyJhY4NYSME manWiBIWxnrLXMpu/MfZ3qX7LTd34FE0LEOQGtrcpmjRaeIy3/znLIdUeSJBaiSo QJ1zSRmzVdkuI0cOjUQIZnrQXww3itlw6s83CuJxc9YdCROy4pN3YJbiwnNTbq7W YwdkcCfdCvsaCzqqCCfeSX7u8pch+7GnCtmAfaKd9zZg96XqoXKLh5GKEFR2YUM5 LJbgtNCyC7yFeFPorMEoKK4wkokNO9IbuxuLc6Jt9Tk2GJ2X/j2QWLRf7xMQxxEF H1NtJHmRxLvh0n1DpVdtbZMDmXqxPOQzWrciVCg97J1E9uGqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhDS2Fj8rWrtvqRgBpBtaUEOQpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvYTYzNTMwZjAtNjE1NC0z YzJhLTgwYzctMTBlODI2NDMxNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYWvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQK+A0clZTdOr2dS8aUfIPHcFBpURpCKXtA5lcC9L+wqKXiXDOg78VM qupH+/nkrw6clS4tkK+ih+Alw7LbHcQdzGsBN0WScCSEtLEL1yZ5f5I8qM2yNF2x u5VG14BhoNp4i6c7e29ENtspw0wNmYtn1sCT5DoFT88XL5AtoxUaTyjzCd/Q9Vzc W2hY7KBKvL5rF9x0UIAVQac+slxazw+FZJzwCvac6+AG/BhReykAI2PLEffI0hPG TQGbzcWJ+Y0mELKHS64ImfXu5pHxxiiQt6t4683Yd1INhGgEVrlNf0Gzf86rCL3y 9xCJnbw3hRhBsBuQZ2idoZy35GGn37g= -----END CERTIFICATE-----Generated at Fri Mar 14 10:24:52 2025 by rpki-client