$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af57def-9076-3b8f-9e8e-e0df2f63d87b.roa File: 0af57def-9076-3b8f-9e8e-e0df2f63d87b.roa (raw, json) Hash identifier: ZNGTBCWw7Tzw5pBAUBkS2EvLB9gqaB6MeaK2Gg07dJo= Subject key identifier: 0D:69:C5:D7:E5:6E:E4:25:09:95:4B:D7:69:AC:51:EE:4C:99:6F:EA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58123878282743AE3768A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af57def-9076-3b8f-9e8e-e0df2f63d87b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.106.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:23:87:82:82:74:3a:e3:76:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d1276815-6dc0-4bbe-985f-4a3e63536aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:65:46:e9:db:19:f3:e2:04:8e:8f:cc:57: 25:5a:1e:68:35:77:14:a4:4c:53:d3:b7:d8:07:86: e6:7f:22:eb:51:93:46:a7:98:95:d0:ad:b2:f2:f6: 62:98:dc:9c:e8:7d:7b:14:a1:d1:04:14:cf:cd:e7: 2f:07:30:97:73:48:59:e8:97:8a:30:0a:77:cc:3d: 8d:01:5e:84:1c:79:9c:1c:4a:40:8e:d8:58:a5:4f: 65:2b:63:cc:90:37:05:ad:c0:05:77:a3:e5:ef:f5: a2:49:3e:b3:72:ad:65:15:8a:4e:f4:ce:be:04:d1: d9:2a:19:aa:ba:bc:2f:49:c6:3e:01:38:ee:7c:d1: 90:21:50:c0:2b:70:f8:51:fa:cd:7a:f9:b2:43:b4: 0c:e6:4f:fb:55:cc:55:f3:c4:2f:34:43:37:a8:0f: cc:d0:b5:62:37:0e:95:a8:cb:23:d0:28:de:55:ac: 61:e0:df:83:99:ec:c7:ae:cb:46:6e:cf:cb:d5:56: b1:96:22:62:4e:92:f5:ed:d2:44:28:d9:18:76:71: 3e:53:23:34:fd:65:cb:75:eb:38:9b:e3:17:b8:0d: 2b:fe:7f:b8:b0:8e:54:ad:cb:f9:4e:1d:6a:6c:2f: 56:8e:4c:68:25:3a:eb:b2:ad:1a:f9:96:c2:52:d7: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:69:C5:D7:E5:6E:E4:25:09:95:4B:D7:69:AC:51:EE:4C:99:6F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af57def-9076-3b8f-9e8e-e0df2f63d87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.106.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6d:d7:7e:03:3a:bf:ef:ef:f4:c7:8b:a3:54:a7:3c:47:7a: 5e:2d:77:12:1e:db:66:c5:d5:72:db:c7:1d:39:8d:22:cb:6a: aa:c9:4b:a5:06:a7:7d:9d:38:d5:6d:48:96:af:e2:25:3c:2b: f9:82:fc:f9:83:fb:c7:4b:1a:3f:3e:80:70:04:03:0c:3f:20: 0f:9b:2e:bc:1a:19:86:99:97:07:47:29:44:f0:f9:67:76:cd: 28:20:9d:bf:d8:64:2a:21:d4:bd:6c:7d:12:ff:2e:de:01:56: 2c:e8:35:5c:3a:e1:a0:0c:d8:f8:dd:5e:ec:4d:98:d6:04:fb: 41:d2:31:9e:06:d7:60:36:0d:c1:77:69:17:b0:db:32:34:bc: 59:d7:0e:5b:5a:e2:97:90:97:57:d8:1f:83:b4:c6:7a:8e:5a: d9:77:ae:77:94:10:24:51:8d:64:56:1d:95:a0:4f:77:d1:89: ba:0d:03:d8:2e:2f:1f:3e:31:3c:0e:b3:24:6c:79:80:0e:f8: 31:d8:98:18:08:eb:fa:5c:f7:7f:38:55:3b:5b:35:6f:df:e0: be:5c:b0:11:55:98:e6:5b:0a:ed:e9:48:81:5e:d7:87:7e:2f: 39:ee:cd:58:61:18:47:10:6e:34:64:e6:c3:e4:48:f7:31:c7: 41:c9:ac:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgSOHgoJ0OuN2igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDEyNzY4MTUtNmRjMC00YmJlLTk4NWYtNGEzZTYzNTM2YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIdlRunbGfPiBI6PzFclWh5oNXcUpExT07fY B4bmfyLrUZNGp5iV0K2y8vZimNyc6H17FKHRBBTPzecvBzCXc0hZ6JeKMAp3zD2N AV6EHHmcHEpAjthYpU9lK2PMkDcFrcAFd6Pl7/WiST6zcq1lFYpO9M6+BNHZKhmq urwvScY+ATjufNGQIVDAK3D4UfrNevmyQ7QM5k/7VcxV88QvNEM3qA/M0LViNw6V qMsj0CjeVaxh4N+DmezHrstGbs/L1VaxliJiTpL17dJEKNkYdnE+UyM0/WXLdes4 m+MXuA0r/n+4sI5Urcv5Th1qbC9WjkxoJTrrsq0a+ZbCUtcdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1pxdflbuQlCZVL12msUe5MmW/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGFmNTdkZWYtOTA3Ni0z YjhmLTllOGUtZTBkZjJmNjNkODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2pKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9t134DOr/v7/THi6NUpzxHel4tdxIe22bF1XLbxx05jSLLaqrJS6UG p32dONVtSJav4iU8K/mC/PmD+8dLGj8+gHAEAww/IA+bLrwaGYaZlwdHKUTw+Wd2 zSggnb/YZCoh1L1sfRL/Lt4BVizoNVw64aAM2PjdXuxNmNYE+0HSMZ4G12A2DcF3 aRew2zI0vFnXDlta4peQl1fYH4O0xnqOWtl3rneUECRRjWRWHZWgT3fRiboNA9gu Lx8+MTwOsyRseYAO+DHYmBgI6/pc9384VTtbNW/f4L5csBFVmOZbCu3pSIFe14d+ LznuzVhhGEcQbjRk5sPkSPcxx0HJrH4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:23 2025 by rpki-client