$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa File: ab376764-b694-3baa-a49e-bd5c96338fd9.roa (raw, json) Hash identifier: 2K6jsuqIyepIVmztbezJ157w5rwaAbvkLx6fnPf3aHo= Subject key identifier: E3:13:51:A6:0B:B2:FE:FA:7E:71:02:C1:3C:70:E4:40:A0:BB:9B:DD Certificate issuer: /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340 Certificate serial: 010D0C9F43285848D7A6535D76BE915B40D74A00 Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 36001 IP address blocks: 97.107.32.0/20 maxlen: 24 104.192.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:53:5d:76:be:91:5b:40:d7:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=310d0ccb-176e-415d-8479-380d6664f850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:f4:73:3b:23:8f:96:71:f2:b7:fb:ab:43: 87:c6:90:86:06:9c:df:b7:00:17:ad:d8:b4:9d:e5: f0:59:70:26:82:28:2d:90:5b:33:1e:92:40:6e:cf: c1:d9:8d:e9:0f:e6:62:3a:8f:11:75:9a:ce:c4:19: eb:8a:e1:94:8e:65:2d:69:77:23:11:7a:d8:4a:22: e4:07:a5:36:1c:e1:3a:65:8e:8d:c3:36:a7:5d:7d: 6f:df:fb:11:e2:56:95:7e:9e:67:18:5a:72:09:aa: c9:dd:31:af:89:67:2d:a6:07:2e:95:1e:c2:65:cb: f0:d4:6e:8d:ee:fd:bd:f4:35:62:e0:63:e3:17:bd: 70:99:7b:bd:e0:6f:57:09:aa:47:84:fa:14:33:96: b3:7e:37:c5:4b:20:ad:7c:26:dc:0b:2a:7a:5a:96: 53:b5:10:d8:d5:c9:eb:44:da:01:1e:d8:dd:9a:0f: 05:6e:98:0e:29:55:a7:d0:73:7a:28:78:08:b8:dc: 4d:e1:6c:6a:30:9f:7b:80:81:fb:32:49:fe:50:d8: 49:35:c6:00:9a:0b:ca:87:ed:47:3a:7e:c4:2e:85: 1e:e4:33:62:33:6c:86:0d:8a:47:3a:13:53:6a:0d: 58:47:9c:62:87:5c:85:50:a0:6c:6e:68:c0:8d:24: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:13:51:A6:0B:B2:FE:FA:7E:71:02:C1:3C:70:E4:40:A0:BB:9B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/ab376764-b694-3baa-a49e-bd5c96338fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl X509v3 Authority Key Identifier: keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer sbgp-ipAddrBlock: critical IPv4: 97.107.32.0/20 104.192.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:22:49:db:25:23:39:5f:bc:a7:fa:2a:6f:15:d7:b1:4b:82: 2d:d7:e0:32:6e:9f:20:30:c0:e2:c3:05:59:87:28:61:70:05: 6d:b2:79:08:0f:a4:b1:23:46:67:95:73:34:eb:d0:32:1e:35: 61:16:0a:df:d0:8b:2d:07:b5:96:8c:3e:a3:1a:73:4a:ce:2d: d9:da:a1:04:3b:a6:bb:b8:b3:82:10:b4:74:ea:1a:fa:c3:6c: d3:5d:f8:d2:74:d8:4b:ea:f6:07:0a:5c:8e:0f:3e:b6:cd:47: 6b:25:89:d0:22:42:56:40:bf:7f:be:79:23:7f:28:03:11:6b: 0c:84:a8:42:0b:c8:e2:b6:dd:93:7a:0b:ce:ab:28:b4:6f:07: 60:9d:c0:22:23:40:cd:71:4c:62:d1:f9:62:a8:74:44:cf:7e: ed:2b:f8:ef:0b:89:3e:78:40:bf:eb:10:60:28:5b:f4:73:d1: 95:70:38:c1:ef:ad:3b:28:bb:cb:0b:53:fb:88:a7:a7:1c:79: 49:59:8f:1f:57:08:4c:6a:44:3b:28:7b:2e:25:7e:25:3b:c4: 90:36:53:ea:b3:a1:4d:1a:38:5f:4c:70:62:44:32:4f:a5:19: 38:18:c6:43:f9:fe:01:20:7c:ac:f7:cc:c7:37:4f:2e:36:fd: 6e:31:2a:98 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjXplNddr6RW0DXSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdhMWJmZjMtY2ZmMi00MWY4LWExZDItOGExMGNhZDdl MzQwMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MzEwZDBjY2ItMTc2ZS00MTVkLTg0NzktMzgwZDY2NjRmODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny70czsjj5Zx8rf7q0OHxpCGBpzftwAXrdi0 neXwWXAmgigtkFszHpJAbs/B2Y3pD+ZiOo8RdZrOxBnriuGUjmUtaXcjEXrYSiLk B6U2HOE6ZY6NwzanXX1v3/sR4laVfp5nGFpyCarJ3TGviWctpgculR7CZcvw1G6N 7v299DVi4GPjF71wmXu94G9XCapHhPoUM5azfjfFSyCtfCbcCyp6WpZTtRDY1cnr RNoBHtjdmg8FbpgOKVWn0HN6KHgIuNxN4WxqMJ97gIH7Mkn+UNhJNcYAmgvKh+1H On7ELoUe5DNiM2yGDYpHOhNTag1YR5xih1yFUKBsbmjAjSSWGQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOMTUaYLsv76fnECwTxw5ECgu5vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2Ex YmZmMy1jZmYyLTQxZjgtYTFkMi04YTEwY2FkN2UzNDAvYWIzNzY3NjQtYjY5NC0z YmFhLWE0OWUtYmQ1Yzk2MzM4ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzdhMWJmZjMtY2ZmMi00MWY4LWEx ZDItOGExMGNhZDdlMzQwLzM3YTFiZmYzLWNmZjItNDFmOC1hMWQyLThhMTBjYWQ3 ZTM0MC5jcmwwHwYDVR0jBBgwFoAUDIygQW4g0FWlM0V3sX5RNjMiEXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2ExYmZmMy1jZmYyLTQxZjgtYTFkMi04YTEw Y2FkN2UzNDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEYWsgAwQC aMD0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKwiSdslIzlfvKf6Km8V17FLgi3X4DJunyAwwOLDBVmHKGFw BW2yeQgPpLEjRmeVczTr0DIeNWEWCt/Qiy0HtZaMPqMac0rOLdnaoQQ7pru4s4IQ tHTqGvrDbNNd+NJ02Evq9gcKXI4PPrbNR2slidAiQlZAv3++eSN/KAMRawyEqEIL yOK23ZN6C86rKLRvB2CdwCIjQM1xTGLR+WKodETPfu0r+O8LiT54QL/rEGAoW/Rz 0ZVwOMHvrTsou8sLU/uIp6cceUlZjx9XCExqRDsoey4lfiU7xJA2U+qzoU0aOF9M cGJEMk+lGTgYxkP5/gEgfKz3zMc3Ty42/W4xKpg= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:30 2025 by rpki-client