$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa File: f842fac7-cd73-3534-92f5-b9959d9393b4.roa (raw, json) Hash identifier: sPXWHFHfqCJ+GMzOSkY+uq8cwfsZqJNkixk50QqsvtY= Subject key identifier: 22:EF:78:4F:78:0A:87:21:FC:80:2E:DC:FB:BD:74:F1:A8:8C:31:66 Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F432858495C2429A58A3E44D3D9581340 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 46414 IP address blocks: 97.107.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:29:a5:8a:3e:44:d3:d9:58:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=27ec2591-c21b-4d48-baad-ad4441aeb332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:bf:ab:fb:e1:32:d9:c3:ad:ad:a0:da:c4: bd:79:8e:ab:83:f2:56:de:3e:8e:ed:41:ab:5e:e5: 53:e0:4f:53:d9:1d:95:df:8d:39:09:16:8d:76:dd: 17:ad:17:bf:27:03:2a:e7:82:79:a6:ad:0f:a0:b2: 1a:39:12:0c:72:4f:e4:24:16:76:1d:6d:ac:44:5b: 6e:10:28:25:54:81:e0:55:43:8f:cb:3e:f9:88:b7: b5:7c:f1:2b:b4:52:59:22:21:25:f2:63:aa:af:74: 40:48:c2:58:fa:3f:f4:04:da:5e:a8:84:73:ab:80: e1:34:a3:71:71:08:19:28:d8:1d:86:e6:38:6e:16: 47:69:e0:8c:9c:3d:09:7a:5b:cc:d0:82:f3:7b:7d: 2c:bb:2b:ed:73:a1:b4:a3:89:53:8b:5c:84:cb:7c: 1a:a3:59:a7:ac:fb:d3:d0:55:4a:1b:bd:f7:90:d6: 1c:57:30:61:34:d2:7b:b7:a5:7b:36:ca:9f:f2:e7: 0b:d0:06:15:ce:8e:e8:5e:cc:31:e4:81:63:16:cf: 00:23:55:af:dd:25:5f:11:31:35:f0:4e:fd:fc:fa: db:99:c9:8e:42:f0:2e:52:34:35:21:ae:15:60:3b: 82:89:0a:dc:29:bf:dd:88:e7:ec:60:f6:66:ac:04: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:78:4F:78:0A:87:21:FC:80:2E:DC:FB:BD:74:F1:A8:8C:31:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:0c:6e:a3:17:ca:3c:eb:7a:28:83:b0:92:f9:95:7e:2f: 6e:a8:a8:95:f4:6c:22:37:a1:6d:07:c8:e0:8b:f9:ad:32:ef: 14:fc:c4:c3:97:37:32:f3:1e:01:ee:27:33:7b:b6:ad:27:bb: 87:4b:d5:17:6c:8c:f8:76:70:eb:00:67:78:20:a7:e2:06:eb: 61:89:2c:86:b4:c6:34:d8:1b:8b:7e:1b:05:a9:a1:62:d1:1d: 42:1b:c6:4b:43:df:1e:09:78:56:b2:72:0d:00:94:2a:41:51: 39:a0:17:56:a3:45:29:88:e6:26:26:a3:07:82:5c:0a:3a:34: c4:21:b3:25:70:2c:d6:90:37:c2:41:55:f0:56:4a:13:56:4c: cd:99:cb:d2:71:91:c8:c9:e1:f8:e6:ab:39:52:94:85:ac:c4: bd:e4:bb:80:0c:2f:f6:7c:e6:0d:6d:b2:c6:c0:7f:31:04:9e: dc:b2:9c:00:14:ab:da:77:5d:b8:4c:ac:cf:82:ea:97:b6:50: b1:14:11:d9:58:f6:77:a6:d6:eb:58:7f:05:25:1a:6f:05:00: 21:79:8c:6b:da:2f:3c:5d:fe:eb:77:da:8e:9e:ce:bf:d4:d7: 01:9b:d3:15:c7:c7:36:5c:02:5e:aa:da:4c:9c:90:51:bc:fa: 63:7e:ae:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJCmlij5E09lYE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MjdlYzI1OTEtYzIxYi00ZDQ4LWJhYWQtYWQ0NDQxYWViMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodu/q/vhMtnDra2g2sS9eY6rg/JW3j6O7UGr XuVT4E9T2R2V3405CRaNdt0XrRe/JwMq54J5pq0PoLIaORIMck/kJBZ2HW2sRFtu ECglVIHgVUOPyz75iLe1fPErtFJZIiEl8mOqr3RASMJY+j/0BNpeqIRzq4DhNKNx cQgZKNgdhuY4bhZHaeCMnD0JelvM0ILze30suyvtc6G0o4lTi1yEy3wao1mnrPvT 0FVKG733kNYcVzBhNNJ7t6V7Nsqf8ucL0AYVzo7oXswx5IFjFs8AI1Wv3SVfETE1 8E79/PrbmcmOQvAuUjQ1Ia4VYDuCiQrcKb/diOfsYPZmrAR0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLveE94Coch/IAu3Pu9dPGojDFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZjg0MmZhYzctY2Q3My0z NTM0LTkyZjUtYjk5NTlkOTM5M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYWucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3DG6jF8o863oog7CS+ZV+L26oqJX0bCI3oW0HyOCL+a0y7xT8xMOX NzLzHgHuJzN7tq0nu4dL1RdsjPh2cOsAZ3ggp+IG62GJLIa0xjTYG4t+GwWpoWLR HUIbxktD3x4JeFaycg0AlCpBUTmgF1ajRSmI5iYmoweCXAo6NMQhsyVwLNaQN8JB VfBWShNWTM2Zy9JxkcjJ4fjmqzlSlIWsxL3ku4AML/Z85g1tssbAfzEEntyynAAU q9p3XbhMrM+C6pe2ULEUEdlY9nem1utYfwUlGm8FACF5jGvaLzxd/ut32o6ezr/U 1wGb0xXHxzZcAl6q2kyckFG8+mN+rh0= -----END CERTIFICATE-----Generated at Sat Apr 12 15:21:06 2025 by rpki-client