$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa File: 048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa (raw, json) Hash identifier: L4pO+/hzJ29OQ5NIcZd+xqBYhHo133eXQwDqIdrdwUs= Subject key identifier: F2:28:37:AF:7B:2A:E2:5E:C5:A1:11:F6:17:9D:81:65:58:62:F4:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58194ABF7C95DD439069580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:94:ab:f7:c9:5d:d4:39:06:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=032dae22-9815-4b84-be2a-9bb823c521ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:84:04:66:92:31:2f:d9:30:4d:dd:e6:27: f5:47:10:af:8d:fc:e3:9d:77:1d:80:f0:58:5d:46: 5d:8c:02:3f:b3:9c:fa:f9:0b:7e:99:81:12:6c:8b: 92:49:f8:93:e1:3a:f6:d6:c5:1b:c4:76:3f:af:84: 78:77:3d:74:7d:73:df:08:b3:b0:e1:2f:d0:da:ef: d4:80:18:dc:3a:9e:27:c2:48:16:ed:2b:07:b9:bc: 60:a5:ba:9b:5e:d6:b8:3d:b1:30:12:89:03:dc:2b: c2:6e:0f:44:4e:b9:c3:76:84:ab:2a:bd:1d:67:0c: dd:d1:4a:c9:08:fa:ad:1e:01:1a:ca:6c:4d:e0:20: c5:10:df:b1:7a:7a:d5:ae:ef:f9:1c:67:94:2b:c5: d0:bf:8a:6a:df:4e:d5:59:4a:d6:bb:3c:5d:f8:0e: 2b:eb:24:0b:33:d3:fd:49:fc:a8:8b:b7:99:bc:95: 8d:0c:e6:d9:15:03:fb:27:f1:3b:7e:c0:4d:ea:cb: e8:64:23:79:4e:bc:af:d6:f6:32:37:ab:c5:b0:17: db:7b:f1:61:c8:02:ba:f9:14:e2:f8:fb:eb:48:12: c6:ed:2b:4c:0b:d8:88:51:71:0f:ab:78:30:7a:36: 25:d1:40:5e:71:3b:4f:b9:d5:1a:e7:7b:f6:0a:ed: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:28:37:AF:7B:2A:E2:5E:C5:A1:11:F6:17:9D:81:65:58:62:F4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7b:af:51:c0:fd:21:7d:dd:94:3b:1e:86:e8:90:91:40:bd: d5:07:3f:33:4c:8a:58:0a:e3:66:5e:81:bf:44:10:1e:ff:23: a9:86:c0:0c:6f:2f:a0:d0:c7:70:c6:f8:ca:d8:1b:9c:3f:26: 59:6e:00:f8:f8:37:74:30:cd:da:56:43:53:49:8f:3e:8d:9b: 79:b0:33:3f:64:94:12:97:7e:6f:d1:51:45:af:c4:93:04:a7: e2:ab:f6:49:34:6e:f3:8a:7e:4d:f8:6a:8e:85:2d:65:47:2f: 72:61:35:62:9c:11:30:64:f5:47:8d:85:ff:c9:64:01:c0:b6: 62:b5:25:ab:94:4f:2d:33:e6:e1:a0:65:a9:26:9e:ce:88:0c: 2a:22:77:03:76:f8:6f:e7:aa:b2:97:80:04:06:49:5a:9c:3b: d7:45:b3:c3:44:41:a8:ca:97:3a:19:e4:c8:e9:ed:30:2f:0d: ba:96:9d:c2:bf:0c:90:9f:f9:aa:97:c3:93:90:6c:18:1b:71: 80:fd:77:91:e0:0a:54:b0:ad:72:b5:34:4f:d9:07:3b:9c:70: d2:58:09:b3:2b:dd:2b:74:03:0b:a9:a6:e5:13:82:2f:b1:7b: 01:90:44:08:ef:b3:a6:bf:7d:ec:18:7c:f5:45:64:78:ca:d4: 6a:14:26:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZSr98ld1DkGlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDMyZGFlMjItOTgxNS00Yjg0LWJlMmEtOWJiODIzYzUyMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseGEBGaSMS/ZME3d5if1RxCvjfzjnXcdgPBY XUZdjAI/s5z6+Qt+mYESbIuSSfiT4Tr21sUbxHY/r4R4dz10fXPfCLOw4S/Q2u/U gBjcOp4nwkgW7SsHubxgpbqbXta4PbEwEokD3CvCbg9ETrnDdoSrKr0dZwzd0UrJ CPqtHgEaymxN4CDFEN+xenrVru/5HGeUK8XQv4pq307VWUrWuzxd+A4r6yQLM9P9 Sfyoi7eZvJWNDObZFQP7J/E7fsBN6svoZCN5Tryv1vYyN6vFsBfbe/FhyAK6+RTi +PvrSBLG7StMC9iIUXEPq3gwejYl0UBecTtPudUa53v2Cu2N1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIoN697KuJexaER9hedgWVYYvTZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQ4YTNlODAtZTk4My0z OGVjLWEyZTQtYzhhMjlkZTFkMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF7r1HA/SF93ZQ7HobokJFAvdUHPzNMilgK42Zegb9EEB7/I6mGwAxv L6DQx3DG+MrYG5w/JlluAPj4N3QwzdpWQ1NJjz6Nm3mwMz9klBKXfm/RUUWvxJME p+Kr9kk0bvOKfk34ao6FLWVHL3JhNWKcETBk9UeNhf/JZAHAtmK1JauUTy0z5uGg Zakmns6IDCoidwN2+G/nqrKXgAQGSVqcO9dFs8NEQajKlzoZ5Mjp7TAvDbqWncK/ DJCf+aqXw5OQbBgbcYD9d5HgClSwrXK1NE/ZBzuccNJYCbMr3St0AwuppuUTgi+x ewGQRAjvs6a/fewYfPVFZHjK1GoUJlA= -----END CERTIFICATE-----Generated at Sat Apr 12 02:06:47 2025 by rpki-client