$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa File: a63530f0-6154-3c2a-80c7-10e826431502.roa (raw, json) Hash identifier: wbrEZU/7xtvfFaaTgV5CunF25BKiKeV3rQmDRJrV3MQ= Subject key identifier: DF:8B:1A:85:96:5C:B2:23:CF:0C:8B:48:88:A2:66:F0:32:4C:64:E0 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F43285849C0A4D8B871B9C328D8F5C540 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 46657 IP address blocks: 97.107.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d8:b8:71:b9:c3:28:d8:f5:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=bb2f2cee-73fc-4140-b474-a7db554803a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:e0:bc:d1:91:b8:07:a9:4f:6d:4f:cf:02: 6a:8e:a5:df:58:43:39:c8:0b:cb:2e:35:55:5a:32: 97:7d:a4:f5:ab:1f:06:11:c5:50:04:52:2f:5f:09: 09:f1:79:2c:0c:84:54:42:98:df:3b:9c:fe:e3:12: 1a:dc:49:de:3b:fb:a2:9f:cb:c3:f5:fa:ba:2a:35: 4b:75:3e:03:48:7b:5f:eb:e4:ec:27:cf:b8:5f:2c: 62:3a:22:68:4f:77:99:56:06:2c:de:88:19:3c:1a: 98:42:e1:a9:0f:f6:3f:7a:8c:7c:75:14:8b:fa:75: 7b:78:25:47:94:80:f2:1d:19:4e:dd:28:c2:ce:32: b2:5c:4a:08:ae:7c:7c:6f:ba:d6:cf:c7:9d:52:5d: 18:fb:bf:38:85:42:04:1d:b0:23:0d:95:b4:4f:f4: 3a:61:67:c7:90:96:0f:d0:0e:45:e0:fa:84:71:db: d0:ee:1f:70:0d:3c:15:db:1f:0d:94:60:0c:2b:12: 81:6f:8f:bd:de:3f:d0:d1:27:bd:6c:33:9d:60:57: 59:68:dd:22:9b:f6:7f:ee:06:05:8c:5e:8d:ac:a7: 4f:b9:77:25:3d:6c:e8:b8:91:4b:61:e5:a3:35:90: 93:a3:ae:b0:ef:92:3f:b8:08:41:48:a4:bb:1d:8b: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:1A:85:96:5C:B2:23:CF:0C:8B:48:88:A2:66:F0:32:4C:64:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:69:e6:5a:3b:59:0b:24:b5:fa:94:10:d4:c2:85:7a:21:c7: 12:f2:df:c3:20:ef:95:ec:62:19:1c:32:94:dd:e5:30:80:03: 8d:72:58:0e:b3:01:dd:7b:1b:d8:1f:53:d9:95:39:d6:b3:c8: 4c:b5:72:6c:ff:59:ac:1e:1e:d2:7a:cd:1a:87:7b:e3:bb:33: b4:77:5c:5b:e6:02:8d:82:3a:cb:e7:7b:c7:4a:d4:5b:53:0b: 82:84:27:0d:e8:3b:47:9a:25:00:7f:c2:55:50:14:b9:37:7a: 4b:fd:30:4a:5e:c7:e9:64:2d:29:b6:85:a4:d9:61:8d:d1:1b: c2:6c:5c:10:0e:85:e1:03:49:0a:ce:53:c3:e5:99:b0:d3:8a: f8:9c:d0:d5:95:39:78:9b:38:91:18:bd:79:0b:8b:fc:61:53: 1e:8f:82:9e:41:b7:f6:58:c7:fe:f0:c9:1a:c3:69:33:1c:82: 65:0d:8f:fc:6f:6e:d5:5b:ef:0f:cf:31:4c:e8:50:82:2d:96: 36:8c:63:83:47:af:ab:42:d8:e0:9d:32:9b:67:e3:1d:95:7c: 35:b8:39:77:e3:3f:ef:1a:8a:a1:f1:38:3b:e1:ff:0b:8f:74: eb:57:ab:27:6d:f5:0b:76:dd:82:ac:7a:d7:82:d7:6e:d8:dd: 67:39:df:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNi4cbnDKNj1xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YmIyZjJjZWUtNzNmYy00MTQwLWI0NzQtYTdkYjU1NDgwM2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTgvNGRuAepT21PzwJqjqXfWEM5yAvLLjVV WjKXfaT1qx8GEcVQBFIvXwkJ8XksDIRUQpjfO5z+4xIa3EneO/uin8vD9fq6KjVL dT4DSHtf6+TsJ8+4XyxiOiJoT3eZVgYs3ogZPBqYQuGpD/Y/eox8dRSL+nV7eCVH lIDyHRlO3SjCzjKyXEoIrnx8b7rWz8edUl0Y+784hUIEHbAjDZW0T/Q6YWfHkJYP 0A5F4PqEcdvQ7h9wDTwV2x8NlGAMKxKBb4+93j/Q0Se9bDOdYFdZaN0im/Z/7gYF jF6NrKdPuXclPWzouJFLYeWjNZCTo66w75I/uAhBSKS7HYvanQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+LGoWWXLIjzwyLSIiiZvAyTGTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvYTYzNTMwZjAtNjE1NC0z YzJhLTgwYzctMTBlODI2NDMxNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYWvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpp5lo7WQsktfqUENTChXohxxLy38Mg75XsYhkcMpTd5TCAA41yWA6z Ad17G9gfU9mVOdazyEy1cmz/WaweHtJ6zRqHe+O7M7R3XFvmAo2COsvne8dK1FtT C4KEJw3oO0eaJQB/wlVQFLk3ekv9MEpex+lkLSm2haTZYY3RG8JsXBAOheEDSQrO U8PlmbDTivic0NWVOXibOJEYvXkLi/xhUx6Pgp5Bt/ZYx/7wyRrDaTMcgmUNj/xv btVb7w/PMUzoUIItljaMY4NHr6tC2OCdMptn4x2VfDW4OXfjP+8aiqHxODvh/wuP dOtXqydt9Qt23YKseteC127Y3Wc537Q= -----END CERTIFICATE-----Generated at Tue May 13 13:21:42 2025 by rpki-client