$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d12da4ed-9714-396c-85fa-8a540d069e87.roa File: d12da4ed-9714-396c-85fa-8a540d069e87.roa (raw, json) Hash identifier: KXpUm3QJNuu4PhrWqrLR5pIoK33yEYG5q8XWwlsTL7I= Subject key identifier: 1C:AE:3A:4F:7B:75:05:9F:2B:25:D6:E5:04:BE:BC:C2:11:05:0D:DD Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849BF3F94C445B34876C6E2691C Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d12da4ed-9714-396c-85fa-8a540d069e87.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 33363 IP address blocks: 97.69.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:94:c4:45:b3:48:76:c6:e2:69:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ca262bd4-c9ce-42a6-a351-31bd970a7b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:34:34:41:96:24:f2:9b:b8:b5:20:94:60:b4: fb:8c:8d:bb:54:c0:76:7b:42:10:89:10:ce:74:07: 5f:90:7d:c3:6f:72:e1:bd:f2:ed:c6:13:26:f9:a6: 68:63:94:96:bf:ab:c0:6b:fe:0c:b9:fc:a5:73:11: 63:59:56:0a:2e:6a:5d:c5:fe:12:56:65:ca:e7:fb: b6:fa:15:e5:d0:9e:e8:b6:3c:60:58:e1:af:6c:16: fb:e5:db:07:a3:ce:9c:e3:6e:37:85:5e:a8:e4:ed: 25:01:98:57:2c:80:c7:98:30:62:74:af:e8:3f:79: 22:17:76:a9:61:db:92:8d:78:9e:9c:33:aa:ce:48: 67:8e:b5:cb:6a:c6:8b:c6:f9:e9:f1:ad:7a:ac:b4: 71:dd:b1:e1:1f:11:1d:20:c7:27:56:e7:f4:3b:8e: fb:34:64:cc:be:a2:51:6e:16:fd:93:f6:df:ef:d6: 1d:a0:54:1c:a2:76:d3:89:47:80:77:9e:65:8d:aa: 0f:d2:95:8c:19:27:c4:d3:b9:c5:11:2c:b9:c4:fd: b5:28:e3:a4:39:e1:0f:d5:56:bf:cf:4d:ec:db:54: 6b:be:e1:49:51:7b:78:01:19:a3:d7:60:75:54:1c: 4f:d9:ac:a9:fb:5b:3d:9e:86:47:dd:dc:b8:a9:53: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:3A:4F:7B:75:05:9F:2B:25:D6:E5:04:BE:BC:C2:11:05:0D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d12da4ed-9714-396c-85fa-8a540d069e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.69.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9d:2f:7e:45:e2:63:2d:dd:26:0f:6c:21:d5:0f:2c:16:7a: 79:54:45:95:9e:c7:10:00:67:24:7e:c7:45:fc:74:21:82:fd: d5:53:29:16:f7:87:25:31:fb:b1:26:4c:29:62:07:e0:2c:df: bd:bb:7c:52:1d:4f:8b:03:bf:1f:a4:ab:20:2f:49:ef:4e:52: 7f:40:7e:50:80:2f:8e:e8:01:4f:82:7b:16:b0:57:46:fa:90: 34:f6:6d:f8:af:72:3f:0f:d2:73:0d:2f:1b:6e:96:57:07:77: b5:9e:42:12:d2:2c:d9:59:22:09:3b:61:d8:cf:c2:85:bf:39: 0b:7d:21:33:35:b7:24:1f:76:b7:6c:37:5f:c8:53:9c:28:d0: 66:ba:5b:0f:fe:1b:98:3c:6b:e6:59:d4:ec:e6:c4:61:ad:73: c9:23:cb:71:de:53:b9:b8:dd:fc:6c:69:00:b3:c7:8d:ef:56: 3a:55:e7:8b:e3:4b:43:44:1a:db:67:8f:b3:28:c7:13:c4:29: bc:cf:86:7d:ae:ff:e5:a1:43:2b:60:c5:af:85:9d:c4:e3:cc: 1a:fe:f4:ca:b8:2c:59:0e:c5:7e:4d:60:92:16:78:3b:e3:80: 95:cb:13:7f:87:39:33:ea:48:d9:c2:8b:5d:7c:ed:4f:7f:64: 25:e9:b8:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5TERbNIdsbiaRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2EyNjJiZDQtYzljZS00MmE2LWEzNTEtMzFiZDk3MGE3YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zQ0QZYk8pu4tSCUYLT7jI27VMB2e0IQiRDO dAdfkH3Db3LhvfLtxhMm+aZoY5SWv6vAa/4MufylcxFjWVYKLmpdxf4SVmXK5/u2 +hXl0J7otjxgWOGvbBb75dsHo86c4243hV6o5O0lAZhXLIDHmDBidK/oP3kiF3ap YduSjXienDOqzkhnjrXLasaLxvnp8a16rLRx3bHhHxEdIMcnVuf0O477NGTMvqJR bhb9k/bf79YdoFQconbTiUeAd55ljaoP0pWMGSfE07nFESy5xP21KOOkOeEP1Va/ z03s21RrvuFJUXt4ARmj12B1VBxP2ayp+1s9noZH3dy4qVMh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByuOk97dQWfKyXW5QS+vMIRBQ3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDEyZGE0ZWQtOTcxNC0z OTZjLTg1ZmEtOGE1NDBkMDY5ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYUXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCdL35F4mMt3SYPbCHVDywWenlURZWexxAAZyR+x0X8dCGC/dVTKRb3 hyUx+7EmTCliB+As3727fFIdT4sDvx+kqyAvSe9OUn9AflCAL47oAU+CexawV0b6 kDT2bfivcj8P0nMNLxtullcHd7WeQhLSLNlZIgk7YdjPwoW/OQt9ITM1tyQfdrds N1/IU5wo0Ga6Ww/+G5g8a+ZZ1OzmxGGtc8kjy3HeU7m43fxsaQCzx43vVjpV54vj S0NEGttnj7MoxxPEKbzPhn2u/+WhQytgxa+FncTjzBr+9Mq4LFkOxX5NYJIWeDvj gJXLE3+HOTPqSNnCi1187U9/ZCXpuK8= -----END CERTIFICATE-----Generated at Tue May 6 10:27:02 2025 by rpki-client