$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a7c06d2a-fc61-3205-b8d1-999e695c2c92.roa File: a7c06d2a-fc61-3205-b8d1-999e695c2c92.roa (raw, json) Hash identifier: D7cDmbzMDhNDCRtx0rxsIDUsssg7QF74qinyVK4warY= Subject key identifier: 31:6C:87:A4:3A:EA:BE:48:DE:07:24:68:C8:19:7F:9B:EF:52:46:DA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F4A62C7E5F4E4DA871BB1280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a7c06d2a-fc61-3205-b8d1-999e695c2c92.roa Signing time: Fri 21 Feb 2025 11:18:57 +0000 ROA not before: Fri 21 Feb 2025 11:18:57 +0000 ROA not after: Thu 22 May 2025 10:18:57 +0000 asID: 30036 IP address blocks: 97.64.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:a6:2c:7e:5f:4e:4d:a8:71:bb:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 21 11:18:57 2025 GMT Not After : May 22 10:18:57 2025 GMT Subject: CN=64efa834-ffa0-4830-ad0e-71c17f2e586a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:d6:fa:79:40:81:fc:ef:85:ce:e2:56:de: 96:fb:38:88:71:0f:1a:5d:5b:4f:a4:dd:96:51:05: d1:68:1e:9c:ad:27:11:c4:47:9f:96:72:7e:5a:37: 0a:17:d4:70:c4:51:1e:ab:f2:79:21:b3:53:f8:e0: 38:20:70:a9:58:8d:45:5f:9a:0b:ca:70:89:3d:81: 90:01:a0:5f:90:b8:fa:91:d3:ed:51:52:1a:7d:4c: 88:3e:78:1a:a8:cf:95:a1:25:37:b6:f0:47:e5:e8: d4:f5:2d:21:9b:ff:48:3b:d7:98:07:9d:f7:73:4a: 4c:29:ab:02:f7:d9:d9:1b:c7:d3:27:38:e5:b4:93: b3:f2:ed:f8:eb:ca:47:93:77:30:a1:d6:ba:dc:43: e9:1a:d3:6b:6e:c2:5a:e4:cc:c2:16:d8:63:92:8e: 2e:ac:ca:48:97:93:0e:17:c7:91:0a:5c:bb:85:e2: 60:e3:89:c0:72:30:18:7f:2d:74:f6:7b:81:d3:40: 55:5d:4a:5f:13:67:a0:f0:f9:c6:47:bf:6b:81:ba: 1b:d5:71:40:8c:4b:92:38:10:4e:37:37:b8:3b:f7: 0a:a7:4f:80:11:ea:43:fe:7f:3d:64:98:6a:3e:f3: 42:ee:62:a3:f2:8e:28:9f:29:f8:24:0d:c3:3f:4b: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6C:87:A4:3A:EA:BE:48:DE:07:24:68:C8:19:7F:9B:EF:52:46:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a7c06d2a-fc61-3205-b8d1-999e695c2c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:aa:fe:75:af:9c:67:af:b2:c8:ad:d1:d8:31:bf:87:43:26: 50:5e:7e:c8:a1:5f:74:33:94:1c:1a:85:08:3a:1c:10:fc:24: 8a:c3:c7:92:56:33:b3:8d:36:83:a1:49:9d:c3:0e:c2:ca:c8: c3:97:2a:62:a7:77:17:83:0b:b8:a4:3f:56:ca:35:51:1b:40: 4b:00:9b:40:72:f0:07:cf:04:4a:92:c6:94:cd:67:4c:d3:70: 3b:0d:2f:4a:ae:84:8d:95:3a:c3:a7:f2:80:63:37:a0:0d:e5: dc:d2:d3:a1:1e:d8:16:4d:1d:2d:54:3d:e4:a0:fb:32:e5:0d: 47:5d:7f:c5:db:f1:ca:4b:47:6f:23:20:6e:58:59:80:15:1d: 82:92:6e:79:67:25:74:de:28:09:33:46:00:5d:09:ef:48:b5: 4a:07:ab:c0:a7:32:6c:25:9d:af:bb:2f:86:dd:06:e1:dc:89: f2:b0:48:bc:d2:c4:8d:a8:39:86:3d:cd:d7:6d:58:bf:84:cc: 05:19:ef:d0:56:ce:1c:de:19:76:69:65:cf:7a:52:db:bd:ff: 27:41:04:8d:33:b6:66:db:95:43:de:46:c4:90:f0:19:7f:19: 3c:b4:bf:73:25:9d:60:7a:d1:93:48:a4:6b:47:df:3a:36:6c: 0a:80:68:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0pix+X05NqHG7EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMTExMTg1N1oXDTI1MDUyMjEwMTg1N1owLzEtMCsGA1UEAxMk NjRlZmE4MzQtZmZhMC00ODMwLWFkMGUtNzFjMTdmMmU1ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQLW+nlAgfzvhc7iVt6W+ziIcQ8aXVtPpN2W UQXRaB6crScRxEeflnJ+WjcKF9RwxFEeq/J5IbNT+OA4IHCpWI1FX5oLynCJPYGQ AaBfkLj6kdPtUVIafUyIPngaqM+VoSU3tvBH5ejU9S0hm/9IO9eYB533c0pMKasC 99nZG8fTJzjltJOz8u3468pHk3cwoda63EPpGtNrbsJa5MzCFthjko4urMpIl5MO F8eRCly7heJg44nAcjAYfy109nuB00BVXUpfE2eg8PnGR79rgbob1XFAjEuSOBBO Nze4O/cKp0+AEepD/n89ZJhqPvNC7mKj8o4onyn4JA3DP0tXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFsh6Q66r5I3gckaMgZf5vvUkbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTdjMDZkMmEtZmM2MS0z MjA1LWI4ZDEtOTk5ZTY5NWMyYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSq/nWvnGevssit0dgxv4dDJlBefsihX3QzlBwahQg6HBD8JIrDx5JW M7ONNoOhSZ3DDsLKyMOXKmKndxeDC7ikP1bKNVEbQEsAm0By8AfPBEqSxpTNZ0zT cDsNL0quhI2VOsOn8oBjN6AN5dzS06Ee2BZNHS1UPeSg+zLlDUddf8Xb8cpLR28j IG5YWYAVHYKSbnlnJXTeKAkzRgBdCe9ItUoHq8CnMmwlna+7L4bdBuHcifKwSLzS xI2oOYY9zddtWL+EzAUZ79BWzhzeGXZpZc96Utu9/ydBBI0ztmbblUPeRsSQ8Bl/ GTy0v3MlnWB60ZNIpGtH3zo2bAqAaDE= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:01 2025 by rpki-client