$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa File: 43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa (raw, json) Hash identifier: LtCff+bLFJjS9+fKzMKquka5WyRqG1/UP1iZJz9WYxg= Subject key identifier: CF:9C:98:3E:5B:FE:62:DB:9A:ED:1C:F4:6B:E5:6E:C7:3C:FE:EC:7D Certificate issuer: /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Certificate serial: 010D0C9F432858489A3B495F5AEF140D47184742 Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 20220 IP address blocks: 97.64.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:49:5f:5a:ef:14:0d:47:18:47:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=7899867f-b305-45cd-ae95-6e7478f88163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:12:ec:49:50:14:e7:45:f5:84:21:d7:27: c9:12:4b:96:37:a6:d4:d1:f8:ba:ae:31:dc:ec:c0: 5a:81:db:df:80:23:e5:fd:79:7e:90:8b:af:63:f1: 25:c1:3e:cd:f7:de:08:a5:be:73:73:84:7c:96:38: 09:7e:b0:9a:86:13:df:01:54:40:10:29:95:d9:d6: 02:f3:85:d0:b9:ec:cf:6d:12:01:f1:c8:83:84:4c: c7:c4:9a:a0:bc:7e:9c:93:87:65:02:29:dd:29:7b: c5:52:50:f2:51:43:42:27:7b:1d:c5:1f:51:8b:b6: 12:59:dd:44:43:99:40:0b:da:99:67:44:4c:72:11: 4c:a9:8a:f2:1b:a0:8f:2f:75:7c:5c:84:a1:51:b6: 08:c3:cc:6b:6b:18:f7:f3:ad:2d:60:b4:d8:aa:e5: af:28:18:70:08:62:f1:5e:18:81:13:98:d9:9d:9c: 02:0a:f2:89:1e:2a:7b:b0:14:97:66:d2:35:c8:28: ba:59:94:95:93:03:a1:5d:bf:2a:42:b0:28:88:39: ca:da:81:c7:1d:8a:33:4b:dc:92:be:7c:12:89:5f: 90:65:6b:88:d5:53:40:95:bb:6c:01:a8:12:e6:05: 41:3d:7e:be:55:ad:a2:41:82:d8:fc:22:ba:d4:4c: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:98:3E:5B:FE:62:DB:9A:ED:1C:F4:6B:E5:6E:C7:3C:FE:EC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl X509v3 Authority Key Identifier: keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer sbgp-ipAddrBlock: critical IPv4: 97.64.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d5:ad:0a:eb:a1:d1:52:f5:66:78:d7:64:10:b7:b3:de:ce: 99:5f:dc:f5:bb:78:9d:02:f8:2b:76:f6:f4:de:c6:81:be:c0: a5:31:d1:2f:f1:41:8d:18:99:11:f8:db:53:bb:1d:13:6f:52: bf:42:ea:06:6f:da:02:ab:46:03:dc:7e:42:42:e8:0e:33:0b: a2:59:2f:3a:15:5b:03:45:8e:25:27:ab:df:c1:99:8d:da:72: f7:23:0b:2a:53:ef:20:84:62:16:78:2b:66:10:49:5d:75:36: 58:03:5f:6e:c4:e9:00:72:b6:c7:0b:4f:9f:fb:ce:0c:49:16: 64:31:d0:e0:5d:2d:90:6d:c4:8b:53:39:1e:f6:e4:6b:49:00: 58:08:79:7e:fb:55:b2:13:5b:89:24:5b:f6:10:fe:ce:bf:8a: a6:fc:03:f2:e7:ac:23:05:6f:59:6a:26:8c:17:26:44:93:e6: 27:ae:44:43:48:a7:76:2b:76:45:04:eb:0f:4a:7b:a0:d7:c6: 5b:d6:22:59:b3:e6:07:b6:47:77:06:4d:1c:8d:52:b6:93:4a: 3c:4e:4c:40:02:d4:6d:0a:9a:55:5c:af:ad:74:9b:87:13:2f: 51:49:5f:f1:8f:f3:63:ec:46:a0:87:9c:27:67:ea:79:c9:de: 17:36:a5:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0lfWu8UDUcYR0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U4MWVkOGMtOTI1MC00OTZiLTlmYzYtMTA3MDFiOTY3 YzViMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk Nzg5OTg2N2YtYjMwNS00NWNkLWFlOTUtNmU3NDc4Zjg4MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8kS7ElQFOdF9YQh1yfJEkuWN6bU0fi6rjHc 7MBagdvfgCPl/Xl+kIuvY/ElwT7N994Ipb5zc4R8ljgJfrCahhPfAVRAECmV2dYC 84XQuezPbRIB8ciDhEzHxJqgvH6ck4dlAindKXvFUlDyUUNCJ3sdxR9Ri7YSWd1E Q5lAC9qZZ0RMchFMqYryG6CPL3V8XIShUbYIw8xraxj3860tYLTYquWvKBhwCGLx XhiBE5jZnZwCCvKJHip7sBSXZtI1yCi6WZSVkwOhXb8qQrAoiDnK2oHHHYozS9yS vnwSiV+QZWuI1VNAlbtsAagS5gVBPX6+Va2iQYLY/CK61Ey0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+cmD5b/mLbmu0c9Gvlbsc8/ux9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgx ZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcwMWI5NjdjNWIvNDNlODJiZDctYWQyYS0z NjI3LWE5ZDQtZGUwMWI2YzYwY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2U4MWVkOGMtOTI1MC00OTZiLTlm YzYtMTA3MDFiOTY3YzViLzdlODFlZDhjLTkyNTAtNDk2Yi05ZmM2LTEwNzAxYjk2 N2M1Yi5jcmwwHwYDVR0jBBgwFoAUJh9ckCEXBboDp20rujcKKNISqkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgxZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcw MWI5NjdjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUBNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrVrQrrodFS9WZ412QQt7Pezplf3PW7eJ0C+Ct29vTexoG+wKUx0S/x QY0YmRH421O7HRNvUr9C6gZv2gKrRgPcfkJC6A4zC6JZLzoVWwNFjiUnq9/BmY3a cvcjCypT7yCEYhZ4K2YQSV11NlgDX27E6QBytscLT5/7zgxJFmQx0OBdLZBtxItT OR725GtJAFgIeX77VbITW4kkW/YQ/s6/iqb8A/LnrCMFb1lqJowXJkST5ieuRENI p3YrdkUE6w9Ke6DXxlvWIlmz5ge2R3cGTRyNUraTSjxOTEAC1G0KmlVcr610m4cT L1FJX/GP82PsRqCHnCdn6nnJ3hc2pXI= -----END CERTIFICATE-----Generated at Sun Apr 6 00:01:55 2025 by rpki-client