$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc8b8911-68cc-319c-818c-d2592761e7d6.roa File: cc8b8911-68cc-319c-818c-d2592761e7d6.roa (raw, json) Hash identifier: Z6+K4zjmW4Xa0VuwBkoN8PH8dla71aQkJKEV1EqlTJg= Subject key identifier: 37:C1:C0:EE:A4:83:58:D2:25:FF:47:0B:79:D3:71:29:D0:DE:2A:0F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AA376F1AEF22F3CAC9A60 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc8b8911-68cc-319c-818c-d2592761e7d6.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 97.85.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:a3:76:f1:ae:f2:2f:3c:ac:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=1e1525c8-0389-490a-97a8-e3065f182742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:4d:01:53:f2:84:41:91:08:a8:e5:00:57: f6:94:b9:3f:43:4d:76:d6:49:14:3c:12:89:cb:64: fd:0c:57:5c:7b:11:e4:5d:f8:0e:2b:c6:57:44:9e: b7:de:c7:46:b3:87:9f:67:2e:59:40:7e:b1:a2:e7: a7:b7:55:fb:23:b2:66:6b:a7:79:27:7a:b7:ee:26: 21:8b:23:2f:25:22:c6:85:35:25:e0:79:92:19:78: 7e:88:dd:04:78:82:02:9b:2c:7d:35:7b:e7:91:34: 14:6c:b9:f1:81:43:d1:90:96:e8:e0:c9:fd:49:62: 52:a5:83:df:19:05:02:47:3f:e3:a7:e6:80:97:7b: 64:3e:5c:2b:04:a4:97:2c:5e:f9:f9:e0:63:30:51: 56:88:3b:79:c9:36:54:3a:5b:16:ab:ec:9f:b5:be: 20:70:52:22:a1:b3:00:8a:65:fe:a0:c8:43:78:82: d3:c8:3e:15:22:6c:da:60:39:f7:62:bb:a1:d7:03: 4e:0e:1b:2b:37:2f:7d:cb:d0:06:5d:fe:e8:d7:8c: 7b:08:5c:45:65:e9:58:d6:ba:ae:fb:8f:db:9c:a4: b9:e2:1a:ed:1e:2f:c2:7c:82:9d:30:49:e3:b8:c1: 85:e9:9f:58:34:dd:d2:c6:70:53:47:1f:7c:2c:fb: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C1:C0:EE:A4:83:58:D2:25:FF:47:0B:79:D3:71:29:D0:DE:2A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc8b8911-68cc-319c-818c-d2592761e7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.85.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c4:ab:a8:94:8f:71:96:48:9d:5a:c9:3d:a4:8e:c1:a9:bc: 4e:73:90:3d:49:6e:ff:32:7f:31:55:57:1d:1d:a7:50:ca:a7: 05:bf:fd:66:e7:8a:8d:b8:e0:ed:5b:21:ba:f6:e2:81:73:66: c3:cd:39:34:19:05:e8:68:8d:35:9a:b4:c1:f3:98:d6:10:cb: f1:ce:79:70:f6:b8:f2:e7:c8:74:cf:ec:48:3f:94:03:24:46: 28:01:3a:c3:79:6b:9f:ae:99:3b:2b:b1:33:e4:fa:23:99:da: 45:b8:a1:9e:6d:eb:a2:12:70:87:04:52:44:1e:04:60:35:6f: da:a3:76:56:07:46:6f:74:f3:02:87:81:08:01:73:3b:f4:2a: b8:5d:96:98:30:b3:b2:8c:db:8d:66:b5:8b:af:b1:b2:13:d8: 5c:0a:35:50:1c:a0:e7:75:e4:75:49:ba:03:7a:9c:47:c4:78: 61:ac:05:8a:1c:6f:36:9f:b6:aa:6e:79:03:16:d2:c0:c4:01: d4:c8:74:77:8e:20:1b:2a:97:33:f2:94:63:13:05:06:5c:e6: ae:27:a0:98:a7:72:3b:2f:08:20:ce:2a:d1:19:41:6c:d5:28: ed:f4:ca:02:c7:80:cb:44:98:0f:a2:37:88:99:45:dd:b8:b5: f2:24:a4:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCqN28a7yLzysmmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MWUxNTI1YzgtMDM4OS00OTBhLTk3YTgtZTMwNjVmMTgyNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjslNAVPyhEGRCKjlAFf2lLk/Q0121kkUPBKJ y2T9DFdcexHkXfgOK8ZXRJ633sdGs4efZy5ZQH6xouent1X7I7Jma6d5J3q37iYh iyMvJSLGhTUl4HmSGXh+iN0EeIICmyx9NXvnkTQUbLnxgUPRkJbo4Mn9SWJSpYPf GQUCRz/jp+aAl3tkPlwrBKSXLF75+eBjMFFWiDt5yTZUOlsWq+yftb4gcFIiobMA imX+oMhDeILTyD4VImzaYDn3Yruh1wNODhsrNy99y9AGXf7o14x7CFxFZelY1rqu +4/bnKS54hrtHi/CfIKdMEnjuMGF6Z9YNN3SxnBTRx98LPvldwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfBwO6kg1jSJf9HC3nTcSnQ3ioPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2M4Yjg5MTEtNjhjYy0z MTljLTgxOGMtZDI1OTI3NjFlN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYVUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7Eq6iUj3GWSJ1ayT2kjsGpvE5zkD1Jbv8yfzFVVx0dp1DKpwW//Wbn io244O1bIbr24oFzZsPNOTQZBehojTWatMHzmNYQy/HOeXD2uPLnyHTP7Eg/lAMk RigBOsN5a5+umTsrsTPk+iOZ2kW4oZ5t66IScIcEUkQeBGA1b9qjdlYHRm908wKH gQgBczv0Krhdlpgws7KM241mtYuvsbIT2FwKNVAcoOd15HVJugN6nEfEeGGsBYoc bzaftqpueQMW0sDEAdTIdHeOIBsqlzPylGMTBQZc5q4noJincjsvCCDOKtEZQWzV KO30ygLHgMtEmA+iN4iZRd24tfIkpI0= -----END CERTIFICATE-----Generated at Fri May 9 11:57:09 2025 by rpki-client