$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa File: 8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa (raw, json) Hash identifier: yzogfnrC5q+bQI+4uFxawn7NGoQdZori5lneMYKNiBI= Subject key identifier: 96:F6:F6:96:26:74:0F:82:81:87:7D:06:D7:AA:C5:5E:22:F4:D4:4C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584989196B5F68DBB1265E5E6180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa Signing time: Tue 15 Apr 2025 15:30:47 +0000 ROA not before: Tue 15 Apr 2025 15:30:47 +0000 ROA not after: Mon 14 Jul 2025 15:30:47 +0000 asID: 19905 IP address blocks: 97.64.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:19:6b:5f:68:db:b1:26:5e:5e:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 15 15:30:47 2025 GMT Not After : Jul 14 15:30:47 2025 GMT Subject: CN=da51c152-b5e4-4a42-81ec-2d1644bd1f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:9f:60:3c:d4:61:fd:74:d6:3b:fe:a7:5f: 4e:b0:64:1a:c1:1c:89:33:d4:6f:70:61:c6:27:5b: 59:87:b6:e8:b5:68:e1:65:b2:9a:14:a8:81:e6:cf: 0e:fb:fd:d2:08:94:a3:51:fb:d4:ca:b7:15:a0:13: 46:a5:5f:46:6b:97:5b:10:6b:db:bb:44:83:71:b2: b5:91:dd:0f:52:4a:74:f5:23:36:c2:f6:1d:e5:12: 1b:50:fc:f4:d3:29:ac:8f:a5:d1:f9:9c:1c:1b:2d: 32:eb:a9:96:a6:37:80:11:d9:10:ae:87:68:cc:8d: 57:b9:71:39:a3:60:8a:08:90:f3:93:e0:a8:d1:95: 6b:02:9c:45:85:70:48:6e:32:85:8d:45:5a:2e:96: 21:35:b0:22:39:44:55:b8:88:c6:95:8d:34:59:db: 6e:69:04:33:50:c2:41:88:4c:8a:01:99:60:0b:9a: 09:e8:b3:b1:fb:35:da:13:82:21:86:9f:94:67:df: 6d:d2:c0:c9:fe:02:10:56:36:73:5a:1d:bf:3d:91: cd:38:4b:f4:b7:de:a6:e3:4b:28:a0:70:1f:6f:c1: df:6f:8e:04:37:26:20:61:24:f4:5e:a5:12:7f:09: 9f:d3:c9:b5:54:38:97:25:28:e2:fe:d7:d6:2e:81: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F6:F6:96:26:74:0F:82:81:87:7D:06:D7:AA:C5:5E:22:F4:D4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5e:3f:d3:3b:b8:4a:64:a3:5e:00:4c:61:40:71:96:0e:36: 77:1e:e1:fb:bc:b2:18:9d:21:ea:39:55:b8:37:c7:84:45:6d: c6:62:fb:63:da:70:fc:51:39:71:cb:89:26:05:2f:82:7b:e1: ca:19:b6:78:12:53:9a:8c:16:fc:ca:97:83:29:37:92:d9:21: 12:c0:d6:55:eb:8d:27:f0:00:8a:7c:0e:6d:8d:1e:b8:1d:d5: 7b:4a:d9:e1:6c:cb:18:73:cf:82:f8:6c:f4:c9:0f:2b:10:62: 98:8b:b4:62:cf:e9:fd:f2:3b:7b:5e:11:85:65:2b:51:5f:99: 44:64:6a:d0:ba:bc:63:f1:27:f5:7c:05:23:74:3b:78:34:49: 20:d5:ff:92:2e:3a:f6:91:92:ae:2d:a4:4c:39:76:95:6e:17: d3:1f:4f:d8:83:14:fb:41:60:2d:cd:f1:cb:ad:12:37:22:b1: 3a:30:c3:bb:c5:d6:42:2e:e0:6c:49:1d:7e:98:c8:a8:a8:4b: 31:33:69:40:f2:a9:29:a4:ea:9e:43:42:75:3f:a2:03:02:a5: 3c:bd:9e:77:0e:9e:d2:1b:0c:21:c6:b5:04:0e:49:6b:f7:b2: f8:78:51:84:cc:d0:ef:ea:42:15:b5:36:d7:02:71:0c:c1:8b: a1:cb:70:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJGWtfaNuxJl5eYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQxNTE1MzA0N1oXDTI1MDcxNDE1MzA0N1owLzEtMCsGA1UEAxMk ZGE1MWMxNTItYjVlNC00YTQyLTgxZWMtMmQxNjQ0YmQxZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXKfYDzUYf101jv+p19OsGQawRyJM9RvcGHG J1tZh7botWjhZbKaFKiB5s8O+/3SCJSjUfvUyrcVoBNGpV9Ga5dbEGvbu0SDcbK1 kd0PUkp09SM2wvYd5RIbUPz00ymsj6XR+ZwcGy0y66mWpjeAEdkQrodozI1XuXE5 o2CKCJDzk+Co0ZVrApxFhXBIbjKFjUVaLpYhNbAiOURVuIjGlY00WdtuaQQzUMJB iEyKAZlgC5oJ6LOx+zXaE4Ihhp+UZ99t0sDJ/gIQVjZzWh2/PZHNOEv0t96m40so oHAfb8Hfb44ENyYgYST0XqUSfwmf08m1VDiXJSji/tfWLoF2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb29pYmdA+CgYd9BteqxV4i9NRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGQ3ZGU5ZTYtN2I1My0z YzMyLWFjOGItM2I0OWY2YTdlMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1eP9M7uEpko14ATGFAcZYONnce4fu8shidIeo5Vbg3x4RFbcZi+2Pa cPxROXHLiSYFL4J74coZtngSU5qMFvzKl4MpN5LZIRLA1lXrjSfwAIp8Dm2NHrgd 1XtK2eFsyxhzz4L4bPTJDysQYpiLtGLP6f3yO3teEYVlK1FfmURkatC6vGPxJ/V8 BSN0O3g0SSDV/5IuOvaRkq4tpEw5dpVuF9MfT9iDFPtBYC3N8cutEjcisToww7vF 1kIu4GxJHX6YyKioSzEzaUDyqSmk6p5DQnU/ogMCpTy9nncOntIbDCHGtQQOSWv3 svh4UYTM0O/qQhW1NtcCcQzBi6HLcNY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:04 2025 by rpki-client