$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa File: 3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa (raw, json) Hash identifier: koS0KEh6n+415kOKyHv7mxWzThzcBvmNGvLcMlZctS0= Subject key identifier: B8:A2:67:D8:23:D1:A5:9D:24:A9:E5:5E:6A:AF:EF:A0:25:D8:E5:56 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849D42F947C8D49F6E359A684A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 30036 IP address blocks: 97.64.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:94:7c:8d:49:f6:e3:59:a6:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8ed8fc9b-eb72-49b8-8418-3b1fce65e6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:4f:e7:69:ca:58:d5:8a:86:7e:6e:86:44: 31:25:6f:04:06:0a:f5:42:29:e1:44:1c:7d:e1:c6: b9:72:bd:3b:0a:f9:4b:f8:57:3f:57:87:5f:a8:b9: 37:5d:3f:b0:8e:42:c7:07:a3:a5:13:ff:38:a2:2e: 19:ed:35:8f:d5:f1:74:5c:77:5d:bb:03:b9:24:8d: 42:87:08:1c:b9:14:1c:46:9b:c4:72:55:99:9d:f5: 6e:8b:c8:17:12:2b:2d:a8:2c:48:91:8a:01:b4:12: 5b:0e:49:70:56:78:41:7e:f4:d8:f9:5f:a6:a1:99: 4e:f7:9e:70:03:e3:9d:d2:a5:58:02:7a:4f:93:ce: 23:73:0b:53:3b:bf:dd:56:e8:37:ce:11:6a:3a:8d: fe:e8:66:3e:01:04:c4:23:f7:37:62:31:74:8e:a1: f7:b6:dd:c7:bc:a9:f4:bd:e7:90:a0:b7:7b:ba:2a: 5f:b3:4f:27:76:cc:59:d3:5c:d6:f0:09:27:b6:ef: d4:2c:65:16:1c:c5:98:b4:d4:3f:22:c4:25:e8:47: a8:72:f1:4e:32:84:6a:1b:ae:15:1c:d7:d8:6d:48: ca:2f:22:3b:36:fc:8f:22:bc:a0:93:db:87:c6:14: 4d:ad:b6:ac:db:99:9c:57:c2:50:f9:c1:f2:4a:37: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A2:67:D8:23:D1:A5:9D:24:A9:E5:5E:6A:AF:EF:A0:25:D8:E5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c2:2a:d7:30:b0:6e:be:71:3e:f6:c6:d2:29:ab:ef:89:20: 1b:5c:5b:28:6b:fb:b2:fc:13:c7:df:53:c3:0a:95:4c:83:66: 67:37:13:50:10:0f:f2:92:67:51:f8:31:58:9c:e3:fd:65:1d: 42:ee:58:ae:64:8f:69:05:cb:66:75:a9:3d:a3:e6:32:22:5c: bd:43:de:b3:30:69:c9:d0:57:7a:ab:3e:90:06:04:8f:8e:c3: 88:be:e6:bb:cb:3c:04:6c:2a:7b:43:ff:19:8b:79:fb:9f:8b: 5a:03:67:7e:79:25:01:d4:9a:c2:27:35:26:25:67:41:fa:72: c9:f5:3f:db:84:83:0f:95:4d:37:62:57:5c:25:d8:31:70:bc: 41:b7:82:15:51:17:1a:c1:74:13:17:43:52:30:fb:77:70:08: 00:a8:25:55:f6:c3:6a:e3:3d:5b:94:fa:66:53:80:ff:78:cf: 22:60:54:7a:56:08:f3:f7:c2:f9:6b:83:72:6c:cd:00:04:1a: d8:ad:20:2f:a3:06:be:67:b5:ed:1e:d3:8c:dc:a4:61:f1:ad: 01:59:b4:8e:e5:d9:d4:05:84:8d:04:62:36:ac:44:5d:77:15: 97:7d:27:75:21:99:7d:1e:c9:d2:0b:3d:a7:dc:5f:5d:59:b3: 8d:e9:53:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL5R8jUn241mmhKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGVkOGZjOWItZWI3Mi00OWI4LTg0MTgtM2IxZmNlNjVlNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52pP52nKWNWKhn5uhkQxJW8EBgr1QinhRBx9 4ca5cr07CvlL+Fc/V4dfqLk3XT+wjkLHB6OlE/84oi4Z7TWP1fF0XHdduwO5JI1C hwgcuRQcRpvEclWZnfVui8gXEistqCxIkYoBtBJbDklwVnhBfvTY+V+moZlO955w A+Od0qVYAnpPk84jcwtTO7/dVug3zhFqOo3+6GY+AQTEI/c3YjF0jqH3tt3HvKn0 veeQoLd7uipfs08ndsxZ01zW8Akntu/ULGUWHMWYtNQ/IsQl6EeocvFOMoRqG64V HNfYbUjKLyI7NvyPIrygk9uHxhRNrbas25mcV8JQ+cHySjeObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiiZ9gj0aWdJKnlXmqv76Al2OVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RlNTZjNTAtMGRmOS0z ZDVjLTgyNDItOGUzZTljNjRlOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnCKtcwsG6+cT72xtIpq++JIBtcWyhr+7L8E8ffU8MKlUyDZmc3E1AQ D/KSZ1H4MVic4/1lHULuWK5kj2kFy2Z1qT2j5jIiXL1D3rMwacnQV3qrPpAGBI+O w4i+5rvLPARsKntD/xmLefufi1oDZ355JQHUmsInNSYlZ0H6csn1P9uEgw+VTTdi V1wl2DFwvEG3ghVRFxrBdBMXQ1Iw+3dwCACoJVX2w2rjPVuU+mZTgP94zyJgVHpW CPP3wvlrg3JszQAEGtitIC+jBr5nte0e04zcpGHxrQFZtI7l2dQFhI0EYjasRF13 FZd9J3UhmX0eydILPafcX11Zs43pUwQ= -----END CERTIFICATE-----Generated at Thu May 15 01:08:58 2025 by rpki-client