$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0162f5ba-6416-324f-8fa4-7e06f9de0358.roa File: 0162f5ba-6416-324f-8fa4-7e06f9de0358.roa (raw, json) Hash identifier: OrYVZkJeVglA3OqpZQ3jSuhbp9qBVmv3JlljB8E7A00= Subject key identifier: 42:94:8B:94:85:DA:6A:EE:7E:6E:7D:91:B4:AD:0D:C6:4A:27:D4:A4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819427B751ECE8E7AD6F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0162f5ba-6416-324f-8fa4-7e06f9de0358.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:94:27:b7:51:ec:e8:e7:ad:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=14c2e948-b7a6-45cb-afc2-e71876ad3d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:a9:54:76:69:4b:5f:41:1e:8c:03:34:00: dd:40:da:d1:da:e6:69:b9:d0:4a:c7:29:b2:c7:46: 07:91:04:83:21:0a:85:a4:84:76:7b:40:41:4e:ff: ba:6e:eb:3c:81:27:c6:ed:b6:13:7f:f3:d4:72:4d: db:97:f8:ba:6e:d9:2a:b7:bb:ee:e8:12:75:6e:bd: bf:3f:18:75:5c:69:2a:82:81:8d:ed:4e:53:c0:18: 9b:cd:b7:e9:96:b3:25:23:14:97:ed:22:d5:4a:b1: 52:5a:d7:77:2e:01:69:54:b0:a7:5a:32:3b:8a:81: 73:f8:29:50:6a:3d:8d:c8:6d:4c:13:0f:81:8c:62: 33:db:ea:f7:85:c8:db:13:1d:7c:41:f5:23:c2:40: fa:9b:60:9c:7f:bf:06:11:33:1e:22:f9:a4:00:c9: d5:cd:9d:15:d3:b1:af:2f:5c:76:39:db:2b:b7:0d: a9:dd:57:fb:34:18:56:31:d3:22:33:f7:00:e5:2c: 6d:13:5b:91:a3:06:e5:cc:1c:6e:9b:63:a5:0c:64: da:7b:ba:b6:ec:29:c6:36:9f:d9:d2:de:57:72:42: fa:eb:99:05:82:a0:4b:84:15:37:47:b3:64:a5:35: 79:12:66:4f:f8:1e:75:e0:ce:d6:99:80:c1:94:93: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:8B:94:85:DA:6A:EE:7E:6E:7D:91:B4:AD:0D:C6:4A:27:D4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0162f5ba-6416-324f-8fa4-7e06f9de0358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0c:cd:cd:06:5f:d4:80:13:52:92:82:06:37:73:27:3d:98: d5:49:83:bc:4d:16:7e:8a:10:02:16:4d:2e:52:83:80:55:1c: cf:47:4e:ac:8c:51:a1:f6:9e:82:d6:c1:1f:6e:04:76:4e:65: f8:60:e1:98:47:48:41:23:9d:b1:d6:c9:bf:ab:3f:f6:ab:2a: a2:1c:40:82:c5:46:c4:e5:a4:89:0b:34:70:e5:cf:94:8b:f4: 7d:de:5b:5e:02:62:b3:62:0e:63:8e:75:5e:1a:d2:61:ad:1c: 40:44:b0:76:4b:6f:62:24:82:ef:5d:96:10:ef:b9:b0:f8:5a: c0:79:5f:b2:1c:e4:da:3e:ee:4c:d4:73:7d:fb:91:df:37:1a: 31:cd:96:95:f9:5e:e3:01:6a:7f:f1:2c:51:af:21:a2:d6:d4: 76:68:88:87:53:25:c4:95:2d:8c:78:94:0e:f0:6a:97:f3:20: 8f:31:49:20:04:bd:ec:ff:26:88:f1:ed:13:62:d3:be:2f:ed: 81:42:ee:4c:74:ce:42:cb:cd:cd:6d:e4:40:4e:2f:72:56:3a: 46:c7:16:52:e7:fc:5b:fd:8e:41:e5:1c:5d:01:6e:5e:f4:13: aa:f1:1a:b8:70:c0:41:b6:a8:89:d7:ba:83:f4:e4:6d:03:f1: 8e:d1:60:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZQnt1Hs6OetbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTRjMmU5NDgtYjdhNi00NWNiLWFmYzItZTcxODc2YWQzZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsCpVHZpS19BHowDNADdQNrR2uZpudBKxymy x0YHkQSDIQqFpIR2e0BBTv+6bus8gSfG7bYTf/PUck3bl/i6btkqt7vu6BJ1br2/ Pxh1XGkqgoGN7U5TwBibzbfplrMlIxSX7SLVSrFSWtd3LgFpVLCnWjI7ioFz+ClQ aj2NyG1MEw+BjGIz2+r3hcjbEx18QfUjwkD6m2Ccf78GETMeIvmkAMnVzZ0V07Gv L1x2Odsrtw2p3Vf7NBhWMdMiM/cA5SxtE1uRowblzBxum2OlDGTae7q27CnGNp/Z 0t5XckL665kFgqBLhBU3R7NkpTV5EmZP+B514M7WmYDBlJOGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKUi5SF2mrufm59kbStDcZKJ9SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDE2MmY1YmEtNjQxNi0z MjRmLThmYTQtN2UwNmY5ZGUwMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIMzc0GX9SAE1KSggY3cyc9mNVJg7xNFn6KEAIWTS5Sg4BVHM9HTqyM UaH2noLWwR9uBHZOZfhg4ZhHSEEjnbHWyb+rP/arKqIcQILFRsTlpIkLNHDlz5SL 9H3eW14CYrNiDmOOdV4a0mGtHEBEsHZLb2Ikgu9dlhDvubD4WsB5X7Ic5No+7kzU c337kd83GjHNlpX5XuMBan/xLFGvIaLW1HZoiIdTJcSVLYx4lA7wapfzII8xSSAE vez/Jojx7RNi074v7YFC7kx0zkLLzc1t5EBOL3JWOkbHFlLn/Fv9jkHlHF0Bbl70 E6rxGrhwwEG2qInXuoP05G0D8Y7RYHU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:46 2025 by rpki-client