$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa File: 2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa (raw, json) Hash identifier: ij9PZDHbAc8hfV4K/PIesjCuLiKfIW3yEtgNfROWCIM= Subject key identifier: 6A:DC:6A:C9:77:1B:63:E4:12:3E:32:0D:90:EB:7A:7A:E9:55:E5:6D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F4A635F2E2CE726D56A0AF00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa Signing time: Fri 21 Feb 2025 11:19:01 +0000 ROA not before: Fri 21 Feb 2025 11:19:01 +0000 ROA not after: Thu 22 May 2025 10:19:01 +0000 asID: 30036 IP address blocks: 97.64.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:a6:35:f2:e2:ce:72:6d:56:a0:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 21 11:19:01 2025 GMT Not After : May 22 10:19:01 2025 GMT Subject: CN=c3d5f692-7ef6-4783-933d-ddacea0b6425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:35:ad:bf:1d:12:8c:a2:96:51:10:1c:14: ee:38:3f:de:bb:85:13:95:0b:5e:a3:64:97:2f:95: c2:90:ab:c7:06:02:21:a6:d4:ac:1d:3c:cb:bd:65: 84:a7:7b:a0:45:ea:8c:01:c0:37:a5:8b:08:6d:dd: f2:3c:1b:74:db:72:04:a8:17:86:3f:4d:02:14:cc: c6:c4:9a:8e:6d:be:c4:2d:65:96:5a:5e:ad:b4:b3: 8c:19:7c:de:7b:51:aa:18:80:a2:aa:de:d9:1f:c9: 8d:21:82:53:20:2a:07:d5:8a:d4:dd:c6:e6:de:9e: 4c:3d:70:cf:0d:f1:09:2e:49:d4:cf:b1:eb:b4:29: ef:67:2c:30:2b:26:73:ba:2b:37:16:d2:15:fc:47: f2:76:70:6f:3d:12:02:49:b8:13:7e:45:64:e0:00: c9:89:3d:62:07:a5:c3:26:4c:9d:22:72:72:fe:06: d9:f0:2b:8c:0b:48:bd:24:77:6b:2e:67:6c:7e:c0: 91:92:01:2e:fa:99:ec:2c:b8:df:95:ac:45:0d:53: 72:43:af:72:d9:9d:c4:3f:4d:2e:62:ff:2f:a6:34: 57:27:cf:3b:76:33:8c:f7:dc:e1:34:30:b1:fd:50: b9:c4:47:df:b5:9c:cd:7a:29:b4:2a:1d:00:d4:33: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DC:6A:C9:77:1B:63:E4:12:3E:32:0D:90:EB:7A:7A:E9:55:E5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f9:39:0c:25:45:f7:0e:95:ae:cd:4a:1e:2c:e1:66:70:74: 15:e9:b8:ac:31:25:fa:54:3f:d7:4a:7c:68:40:44:6f:b9:19: a0:41:63:6e:5d:e3:8d:35:21:fc:8b:4b:28:c5:76:85:fa:fb: 74:41:0e:00:ba:08:58:b5:38:28:bd:f6:78:23:b9:a7:af:4a: 9c:2f:eb:67:a8:4c:bb:c9:d7:15:c9:b7:f6:22:fa:1c:8b:da: 14:59:1c:4f:96:e9:1e:9c:9f:27:ab:2c:23:b6:05:ab:cd:f5: 30:fa:13:d7:d3:c1:9c:2b:36:d1:78:5d:1e:29:cd:4c:ff:13: d9:97:cf:bf:c0:22:03:a4:04:68:a0:50:44:b5:30:8f:c4:36: df:e9:68:76:92:61:13:19:82:65:76:ff:08:33:0f:0a:df:e5: 6f:1c:6e:ec:f6:d9:8a:55:61:2c:ee:28:1c:37:c9:62:37:22: e6:e7:b5:10:03:9e:0d:c4:20:96:60:0d:b1:b2:0b:0b:41:d7: ff:7c:98:1f:1c:df:ba:f8:d4:f3:b3:47:c4:ca:ae:2d:f8:67: e1:d1:0c:b8:c5:0e:c9:7d:ab:d0:94:0b:cc:fc:31:8a:07:1d: 90:a0:c1:f0:1c:ea:6a:4d:6c:98:c6:ba:a0:08:c8:28:e4:56: 7a:06:c9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0pjXy4s5ybVagrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMTExMTkwMVoXDTI1MDUyMjEwMTkwMVowLzEtMCsGA1UEAxMk YzNkNWY2OTItN2VmNi00NzgzLTkzM2QtZGRhY2VhMGI2NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPE1rb8dEoyillEQHBTuOD/eu4UTlQteo2SX L5XCkKvHBgIhptSsHTzLvWWEp3ugReqMAcA3pYsIbd3yPBt023IEqBeGP00CFMzG xJqObb7ELWWWWl6ttLOMGXzee1GqGICiqt7ZH8mNIYJTICoH1YrU3cbm3p5MPXDP DfEJLknUz7HrtCnvZywwKyZzuis3FtIV/EfydnBvPRICSbgTfkVk4ADJiT1iB6XD JkydInJy/gbZ8CuMC0i9JHdrLmdsfsCRkgEu+pnsLLjflaxFDVNyQ69y2Z3EP00u Yv8vpjRXJ887djOM99zhNDCx/VC5xEfftZzNeim0Kh0A1DMEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrcasl3G2PkEj4yDZDrenrpVeVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmZiOGI1OTgtOGYyYy0z NWI4LTgxZjEtMjMzNmQwZjA1MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI35OQwlRfcOla7NSh4s4WZwdBXpuKwxJfpUP9dKfGhARG+5GaBBY25d 4401IfyLSyjFdoX6+3RBDgC6CFi1OCi99ngjuaevSpwv62eoTLvJ1xXJt/Yi+hyL 2hRZHE+W6R6cnyerLCO2BavN9TD6E9fTwZwrNtF4XR4pzUz/E9mXz7/AIgOkBGig UES1MI/ENt/paHaSYRMZgmV2/wgzDwrf5W8cbuz22YpVYSzuKBw3yWI3IubntRAD ng3EIJZgDbGyCwtB1/98mB8c37r41POzR8TKri34Z+HRDLjFDsl9q9CUC8z8MYoH HZCgwfAc6mpNbJjGuqAIyCjkVnoGyVE= -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:24 2025 by rpki-client