$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a16c916-da83-3911-87b4-44b845aef064.roa File: 0a16c916-da83-3911-87b4-44b845aef064.roa (raw, json) Hash identifier: rg+mkDKJ+B/0CyZJBJhV+IF+EEkBWuo2PMhK8rQ+AMw= Subject key identifier: D2:CF:BC:36:FC:02:51:97:73:04:DC:7F:F3:11:D0:94:BD:A4:38:56 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581B5D209A92F2851C4B180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a16c916-da83-3911-87b4-44b845aef064.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.107.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:b5:d2:09:a9:2f:28:51:c4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=73b95d94-09e8-4e9c-8978-cccefdddfcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:3e:29:eb:ab:ea:51:79:61:c4:16:d3:38: 03:4f:66:6b:6e:07:b5:37:78:6b:96:74:98:96:f5: b3:4b:53:6b:56:42:b3:f4:b4:8f:3b:c9:db:46:4d: 45:db:ea:95:33:31:a8:1b:a9:49:6b:53:d6:0f:71: 11:32:97:c4:f3:7b:c1:15:04:e9:fa:6a:31:b7:e1: 76:ec:89:37:77:13:17:3a:38:aa:b7:d8:80:5e:04: 5f:bc:fd:68:06:8c:d3:72:2e:47:6c:3f:e2:78:83: 36:e4:ad:a1:3a:35:d1:81:a2:26:01:4e:6b:4b:7d: 3f:96:6e:68:7c:23:3e:f0:8f:43:82:5e:44:81:b0: cb:cf:62:9a:91:05:7b:7d:c6:83:06:33:8e:de:f5: ef:2c:c4:84:bc:0c:ee:8d:9a:f8:20:be:d9:9f:4b: 5e:ed:ee:40:db:7b:e2:b5:a5:3b:68:5a:23:d6:34: eb:5e:e2:8c:08:db:dd:95:88:a4:03:0f:8e:bf:07: e8:dd:8c:3f:f8:3a:1b:51:8c:65:71:76:bb:3d:0a: 5a:97:42:8c:b6:9f:ae:e7:a1:63:ae:f2:1c:fc:27: 3d:f9:45:b8:e6:99:8c:6d:62:5e:c6:2f:a1:03:e9: 55:53:ad:5f:60:f0:0e:fe:13:79:b6:a8:93:ae:39: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CF:BC:36:FC:02:51:97:73:04:DC:7F:F3:11:D0:94:BD:A4:38:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a16c916-da83-3911-87b4-44b845aef064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3f:19:fd:e1:dd:a9:95:95:13:4a:11:82:d7:c7:86:5a:fc: e9:52:dc:7b:6b:ee:8e:51:a7:a6:f7:74:16:68:ec:d2:55:77: 0b:c2:ed:44:c3:f4:8c:77:aa:ab:9c:3d:41:d1:0a:d8:14:12: e0:c1:14:97:96:45:43:9e:86:ea:b7:86:5a:a6:4d:3d:4f:a2: 0c:7a:3b:c1:c9:3e:bb:a0:94:88:23:90:d0:97:2c:a2:78:67: 9e:6e:9a:94:eb:01:01:bf:0a:40:40:e1:72:6a:ea:84:aa:a8: 1f:f7:2b:a7:ce:d7:e1:05:76:76:26:7d:78:69:c3:21:57:e2: b0:2f:cd:c0:d3:fe:42:48:e9:6c:6d:fd:f1:bf:70:c5:00:59: 5c:ce:79:14:80:78:63:ca:11:1f:b2:ca:4c:82:1a:9e:c1:a3: a5:13:11:0e:3f:e0:73:7c:05:5d:ef:0a:3c:6c:7f:9d:3e:46: dd:08:f1:e4:1b:cc:c5:4e:69:df:07:78:72:d9:eb:81:1e:f9: 74:d0:68:64:61:05:51:73:57:a2:a1:c9:aa:bb:e0:d0:b4:46: 53:89:4a:3a:1c:55:c4:4e:9d:53:44:5d:e0:d5:b4:e3:71:bc: c4:d3:fb:6b:48:47:bb:d5:6d:23:4f:9e:cc:f5:97:df:db:be: 4d:7f:c4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgbXSCakvKFHEsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzNiOTVkOTQtMDllOC00ZTljLTg5NzgtY2NjZWZkZGRmY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Y+Keur6lF5YcQW0zgDT2Zrbge1N3hrlnSY lvWzS1NrVkKz9LSPO8nbRk1F2+qVMzGoG6lJa1PWD3ERMpfE83vBFQTp+moxt+F2 7Ik3dxMXOjiqt9iAXgRfvP1oBozTci5HbD/ieIM25K2hOjXRgaImAU5rS30/lm5o fCM+8I9Dgl5EgbDLz2KakQV7fcaDBjOO3vXvLMSEvAzujZr4IL7Zn0te7e5A23vi taU7aFoj1jTrXuKMCNvdlYikAw+Ovwfo3Yw/+DobUYxlcXa7PQpal0KMtp+u56Fj rvIc/Cc9+UW45pmMbWJexi+hA+lVU61fYPAO/hN5tqiTrjlh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLPvDb8AlGXcwTcf/MR0JS9pDhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGExNmM5MTYtZGE4My0z OTExLTg3YjQtNDRiODQ1YWVmMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2sBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE/Gf3h3amVlRNKEYLXx4Za/OlS3Htr7o5Rp6b3dBZo7NJVdwvC7UTD 9Ix3qqucPUHRCtgUEuDBFJeWRUOehuq3hlqmTT1Pogx6O8HJPruglIgjkNCXLKJ4 Z55umpTrAQG/CkBA4XJq6oSqqB/3K6fO1+EFdnYmfXhpwyFX4rAvzcDT/kJI6Wxt /fG/cMUAWVzOeRSAeGPKER+yykyCGp7Bo6UTEQ4/4HN8BV3vCjxsf50+Rt0I8eQb zMVOad8HeHLZ64Ee+XTQaGRhBVFzV6Khyaq74NC0RlOJSjocVcROnVNEXeDVtONx vMTT+2tIR7vVbSNPnsz1l9/bvk1/xMQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:45 2025 by rpki-client