$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa File: ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa (raw, json) Hash identifier: whvqhAwZgsHAJk6qG+TqcFe35Kc8WDUCCL8LJFdMmi8= Subject key identifier: 6A:9F:58:66:8A:19:F7:5A:C7:17:AE:4C:D7:B0:5D:DC:DB:89:55:E5 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285849B6DF4BE335C8E98B19C09700 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 396253 IP address blocks: 97.64.56.0/22 maxlen: 22 104.225.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4b:e3:35:c8:e9:8b:19:c0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=b07b1c01-2f86-4566-8e15-923bf2b743a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:d0:bb:22:28:87:c0:6f:ea:fd:86:34:f0: ea:15:14:ba:d4:d7:8b:4b:75:2a:0f:0e:a7:4f:aa: 66:10:08:19:51:cc:4c:e6:92:f1:c4:a5:fb:88:45: 10:31:54:0d:83:9b:8e:30:ce:1a:0a:4b:83:8c:eb: 65:ae:c7:a6:04:f9:9b:39:b0:56:46:ed:a3:1f:c5: 30:ae:eb:14:90:c7:f8:11:d8:84:61:ea:03:be:5e: 0e:58:5f:a5:32:5c:6b:4f:2e:d9:cb:57:bb:3f:9f: 4c:6e:e0:19:71:50:50:65:76:2f:db:2a:58:0e:0a: eb:e2:2d:af:ec:9f:39:85:ab:56:51:7c:8f:ca:c2: 57:4f:09:12:b3:48:b6:85:4f:38:4f:4d:38:6b:1f: 48:ff:5f:34:15:8d:8b:42:22:bb:60:ca:93:f3:a1: ad:b1:38:b7:c3:a5:fb:cb:03:7b:22:83:1d:11:84: 62:36:b4:ce:ae:09:9d:80:cc:ea:e3:3f:8f:19:9e: 12:cc:0f:88:5e:9f:7c:ea:07:4f:95:99:4d:9b:69: 5c:38:89:8a:93:57:5a:0c:16:30:11:fe:20:5f:20: e4:ae:bf:44:ed:2b:8d:74:78:73:ac:7e:8c:a2:34: a7:f7:2b:9a:6f:e8:85:dd:63:69:48:78:9d:ae:89: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9F:58:66:8A:19:F7:5A:C7:17:AE:4C:D7:B0:5D:DC:DB:89:55:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 97.64.56.0/22 104.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:dd:a0:83:af:90:d3:fb:18:56:08:36:d6:0e:74:03:a5:31: 6e:17:94:4e:50:48:d8:5c:c8:1a:56:6b:ea:a6:f8:de:3f:5c: 30:76:84:3c:37:fd:50:00:a1:61:41:d5:ee:0b:c4:cf:fd:7c: 01:d4:94:7a:a1:27:21:82:6d:ba:cd:e8:34:ea:4b:41:f5:30: 99:31:8f:30:c0:f8:74:06:27:85:ed:e1:09:dd:8d:19:ba:38: 07:51:e4:aa:37:f9:01:89:ae:9f:eb:37:1f:26:95:b1:c2:67: 33:43:7f:db:30:3b:d1:aa:7e:d0:6e:7b:fe:52:15:12:b2:cb: af:80:8d:c2:f1:d1:ea:18:66:6a:a2:36:28:ca:13:f1:5c:de: c4:72:b8:e0:10:99:25:2c:d6:17:e8:99:14:67:1d:c7:fb:6f: f3:cb:4c:ec:cf:00:35:71:6c:a2:d7:7d:8b:54:f1:05:c2:63: 79:f6:1e:6d:96:f6:2a:99:47:b0:39:ca:1f:3a:c0:cc:8d:a7: 6c:ca:2f:dd:76:12:f0:79:4e:fc:c3:8f:43:e3:01:7a:75:d4: 44:86:64:4c:73:1d:23:88:47:86:bb:f7:f7:f9:23:08:89:b2: 81:a1:5f:85:82:f4:4c:00:18:88:be:0c:f7:86:94:3b:ef:2e: f7:09:60:d4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEm230vjNcjpixnAlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk YjA3YjFjMDEtMmY4Ni00NTY2LThlMTUtOTIzYmYyYjc0M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE7QuyIoh8Bv6v2GNPDqFRS61NeLS3UqDw6n T6pmEAgZUcxM5pLxxKX7iEUQMVQNg5uOMM4aCkuDjOtlrsemBPmbObBWRu2jH8Uw rusUkMf4EdiEYeoDvl4OWF+lMlxrTy7Zy1e7P59MbuAZcVBQZXYv2ypYDgrr4i2v 7J85hatWUXyPysJXTwkSs0i2hU84T004ax9I/180FY2LQiK7YMqT86GtsTi3w6X7 ywN7IoMdEYRiNrTOrgmdgMzq4z+PGZ4SzA+IXp986gdPlZlNm2lcOImKk1daDBYw Ef4gXyDkrr9E7SuNdHhzrH6MojSn9yuab+iF3WNpSHidron0rwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGqfWGaKGfdaxxeuTNewXdzbiVXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWU2MTBmNmEtMmQ3NC0z YWEyLThjZDUtYTM1MDVlNDkyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCYUA4AwQE aOGwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE7doIOvkNP7GFYINtYOdAOlMW4XlE5QSNhcyBpWa+qm+N4/ XDB2hDw3/VAAoWFB1e4LxM/9fAHUlHqhJyGCbbrN6DTqS0H1MJkxjzDA+HQGJ4Xt 4QndjRm6OAdR5Ko3+QGJrp/rNx8mlbHCZzNDf9swO9GqftBue/5SFRKyy6+AjcLx 0eoYZmqiNijKE/Fc3sRyuOAQmSUs1hfomRRnHcf7b/PLTOzPADVxbKLXfYtU8QXC Y3n2Hm2W9iqZR7A5yh86wMyNp2zKL912EvB5TvzDj0PjAXp11ESGZExzHSOIR4a7 9/f5IwiJsoGhX4WC9EwAGIi+DPeGlDvvLvcJYNQ= -----END CERTIFICATE-----Generated at Thu May 8 12:17:51 2025 by rpki-client