$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa File: c8584e3d-2de4-333a-b52b-831df19e3f45.roa (raw, json) Hash identifier: wI2vrdrXBg5vPeEtKA/RImuiO94sChKkdQvuWXAkYO8= Subject key identifier: C8:4D:25:AB:4B:F5:6C:41:55:FA:F8:A1:B9:82:05:EA:E8:7E:52:E0 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F99C5D7C8E5DB45B3EE80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 97.71.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:99:c5:d7:c8:e5:db:45:b3:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=0faabd5f-e799-434a-a090-918e14f2e75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b1:25:56:a8:a0:20:ac:35:46:11:8c:7a:6a: b7:f6:9e:a6:75:d5:42:ad:dc:dc:1d:c0:22:05:16: 53:b0:05:5d:76:d2:67:49:fb:ce:3b:81:2a:3d:b2: 41:9f:3d:38:a6:d4:a0:35:dd:87:a6:fc:1d:92:fd: 51:8e:cd:83:2a:bb:50:9a:db:2c:da:fe:01:44:ba: a4:47:52:d7:a7:b8:cb:84:4d:6c:9e:8e:74:ec:68: ba:e6:8e:bb:04:63:c3:b6:d5:4d:de:bf:38:53:a7: 37:04:75:6d:b6:e3:0a:8f:1d:72:a6:3e:6f:74:c0: 99:cf:3a:00:a7:f3:85:ee:5c:03:50:db:be:c7:ac: ff:69:a2:ff:4f:a3:b3:78:9f:03:d5:6f:09:b7:32: 5f:cf:95:7d:c6:a3:f3:f9:e5:e1:07:98:ae:71:4b: d9:73:dc:de:dd:37:0a:e9:30:12:4f:6b:04:68:05: ac:06:fe:12:11:45:44:61:d1:c6:ea:7d:41:4b:f2: 02:39:12:2e:c8:09:0a:d8:fc:78:e8:22:a0:13:ab: 9e:32:ed:e5:ee:70:54:16:ea:65:dc:7d:a8:8b:cd: b0:ec:bb:5b:2d:86:67:e4:6a:84:33:92:18:84:c1: 6d:3d:da:13:ec:c3:5b:83:23:ec:69:71:af:35:ad: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:25:AB:4B:F5:6C:41:55:FA:F8:A1:B9:82:05:EA:E8:7E:52:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c8584e3d-2de4-333a-b52b-831df19e3f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.71.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d6:58:2c:87:50:dc:fe:58:5f:ab:1d:53:67:8f:15:36:8f: d9:83:b9:bd:a7:98:3d:93:4b:10:48:73:27:8e:a7:d9:43:5a: de:93:94:76:b7:51:1b:4d:e5:ac:b2:03:ec:0d:04:12:8a:0d: 92:c7:a3:7d:a0:4e:eb:da:6c:42:ee:24:44:d8:fd:de:e7:82: d6:6d:f4:78:82:7c:2a:dd:7b:a7:71:e8:67:cc:96:89:55:99: 7e:e9:ac:e5:c2:34:e8:4b:b2:18:d4:d8:3a:09:3e:56:f1:91: 09:45:17:01:39:e5:20:9d:71:58:11:30:f5:73:a3:6a:a8:4f: f1:95:2e:fe:64:01:bf:65:ee:b9:20:42:e3:6c:f4:f2:a7:2a: 75:c8:a7:85:80:ab:b6:92:7f:a9:b2:7f:7c:26:a1:70:9a:a7: f9:b9:82:73:87:da:c3:d7:56:f0:9e:3d:f0:a6:5b:cf:ef:1b: f1:f6:59:b8:68:01:9b:4f:9f:80:d9:ec:18:38:cc:71:1f:55: 4a:53:60:b9:58:12:13:66:12:a3:b9:21:ae:72:85:74:3d:c0: a3:20:99:c6:32:c4:87:59:2d:e8:77:af:5f:69:73:87:aa:ce: 78:de:ee:55:82:88:96:ca:9b:80:cd:5d:bc:e9:7e:fb:77:7c: d6:06:09:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5nF18jl20Wz7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MGZhYWJkNWYtZTc5OS00MzRhLWEwOTAtOTE4ZTE0ZjJlNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbElVqigIKw1RhGMemq39p6mddVCrdzcHcAi BRZTsAVddtJnSfvOO4EqPbJBnz04ptSgNd2Hpvwdkv1Rjs2DKrtQmtss2v4BRLqk R1LXp7jLhE1sno507Gi65o67BGPDttVN3r84U6c3BHVttuMKjx1ypj5vdMCZzzoA p/OF7lwDUNu+x6z/aaL/T6OzeJ8D1W8JtzJfz5V9xqPz+eXhB5iucUvZc9ze3TcK 6TAST2sEaAWsBv4SEUVEYdHG6n1BS/ICORIuyAkK2Px46CKgE6ueMu3l7nBUFupl 3H2oi82w7LtbLYZn5GqEM5IYhMFtPdoT7MNbgyPsaXGvNa1g7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhNJatL9WxBVfr4obmCBeroflLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzg1ODRlM2QtMmRlNC0z MzNhLWI1MmItODMxZGYxOWUzZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfWWCyHUNz+WF+rHVNnjxU2j9mDub2nmD2TSxBIcyeOp9lDWt6TlHa3 URtN5ayyA+wNBBKKDZLHo32gTuvabELuJETY/d7ngtZt9HiCfCrde6dx6GfMlolV mX7prOXCNOhLshjU2DoJPlbxkQlFFwE55SCdcVgRMPVzo2qoT/GVLv5kAb9l7rkg QuNs9PKnKnXIp4WAq7aSf6myf3wmoXCap/m5gnOH2sPXVvCePfCmW8/vG/H2Wbho AZtPn4DZ7Bg4zHEfVUpTYLlYEhNmEqO5Ia5yhXQ9wKMgmcYyxIdZLeh3r19pc4eq znje7lWCiJbKm4DNXbzpfvt3fNYGCZE= -----END CERTIFICATE-----Generated at Wed May 7 21:03:48 2025 by rpki-client