$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16afd797-20bd-3bdf-9977-a3d4bd312a5c.roa File: 16afd797-20bd-3bdf-9977-a3d4bd312a5c.roa (raw, json) Hash identifier: pPbcP8uIlENMdLN7c3i/7BKwImfOYVS2Gad/Ce1NDKk= Subject key identifier: 0A:20:D6:D1:7A:20:87:03:DE:72:77:FB:33:75:54:68:62:99:2A:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5811B3CAA648FB652CB4080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16afd797-20bd-3bdf-9977-a3d4bd312a5c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.105.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:1b:3c:aa:64:8f:b6:52:cb:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=717fd530-1bfe-4d16-872c-8ad1ecfb4d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:28:5f:41:c1:64:6b:48:d5:71:de:ce:28: 38:ff:b1:e4:2a:da:13:67:49:86:35:ae:50:0f:86: ee:56:1f:1e:27:5e:dc:b9:b9:a5:ec:86:8d:31:b6: f8:f2:6e:a0:39:fd:e4:78:e1:a0:ec:61:59:06:e3: 52:be:2e:cd:74:04:ed:92:00:20:55:84:bd:68:e0: 86:2e:79:0d:e2:38:db:2f:da:66:a1:c6:f1:da:b9: 45:47:8e:09:15:5b:e5:ec:31:25:f5:cb:bd:0f:2e: 9f:87:47:08:4e:e6:fc:6b:98:ea:7b:7c:8c:33:bc: 83:3f:61:f7:ed:7d:2f:46:44:c8:cc:74:51:ab:91: 1a:26:09:39:58:57:f5:66:11:86:9c:6f:87:fe:5a: bb:66:39:23:a3:ef:c1:6d:d4:1a:24:5a:ab:6b:bb: 1e:c8:d0:fd:9f:08:c9:b7:4b:07:c4:4b:43:d1:0f: 6c:f3:ed:7a:10:c2:2a:b7:b5:eb:92:b5:ed:76:02: c8:dd:7b:42:b6:a8:b7:a3:67:9d:97:46:60:89:aa: 18:21:7a:65:96:75:98:aa:34:f3:55:0f:5d:9c:d1: d1:1d:f3:d8:d7:bb:78:91:8d:33:24:dc:bd:10:d9: 16:f3:22:e0:50:58:81:69:fb:b3:98:60:d5:8c:0e: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:20:D6:D1:7A:20:87:03:DE:72:77:FB:33:75:54:68:62:99:2A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16afd797-20bd-3bdf-9977-a3d4bd312a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.105.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:42:53:07:45:e1:b3:90:f7:ea:0e:0e:a5:bd:23:51:29:42: 2e:4b:0c:c5:e1:80:a1:11:48:44:f7:33:d5:5f:ca:81:b6:a9: 37:ab:80:63:81:f4:f9:a4:ed:79:89:67:e9:0c:b9:3d:0f:13: bc:04:92:ec:6c:13:36:e5:a5:82:40:8f:67:e3:d4:94:f1:17: 85:de:ee:d7:1b:69:c5:aa:64:45:3d:ef:4e:8a:94:61:34:4a: 6c:56:fe:14:31:9e:d6:23:ad:9f:4b:a3:a2:11:91:bb:e4:a6: 26:3f:16:10:43:69:cf:20:8a:f5:a8:ae:d6:6e:ce:73:c5:b0: 88:f5:82:8f:70:88:f2:e9:33:38:2e:2b:c9:aa:67:2c:4f:73: 30:01:87:af:03:b8:d3:f2:7d:36:e8:39:4e:8b:c4:15:fd:ee: b8:89:2d:f2:2d:30:75:33:d8:c3:d7:7b:d5:3c:20:22:19:d9: 40:61:f5:19:29:76:13:c6:1a:4e:1a:19:08:37:65:d1:66:54: ab:4d:e4:7b:83:0d:ef:22:61:e7:31:23:8e:69:be:59:84:aa: 9e:cd:01:05:a9:11:df:94:aa:1d:c1:9e:86:f5:bf:86:a5:7f: 38:a4:6c:50:cd:05:3e:ee:5c:f1:39:03:a5:dd:68:4b:06:b5: a7:07:bf:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRs8qmSPtlLLQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzE3ZmQ1MzAtMWJmZS00ZDE2LTg3MmMtOGFkMWVjZmI0ZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QkoX0HBZGtI1XHezig4/7HkKtoTZ0mGNa5Q D4buVh8eJ17cubml7IaNMbb48m6gOf3keOGg7GFZBuNSvi7NdATtkgAgVYS9aOCG LnkN4jjbL9pmocbx2rlFR44JFVvl7DEl9cu9Dy6fh0cITub8a5jqe3yMM7yDP2H3 7X0vRkTIzHRRq5EaJgk5WFf1ZhGGnG+H/lq7Zjkjo+/BbdQaJFqra7seyND9nwjJ t0sHxEtD0Q9s8+16EMIqt7XrkrXtdgLI3XtCtqi3o2edl0ZgiaoYIXpllnWYqjTz VQ9dnNHRHfPY17t4kY0zJNy9ENkW8yLgUFiBafuzmGDVjA5tdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAog1tF6IIcD3nJ3+zN1VGhimSq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZhZmQ3OTctMjBiZC0z YmRmLTk5NzctYTNkNGJkMzEyYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2leMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpCUwdF4bOQ9+oODqW9I1EpQi5LDMXhgKERSET3M9VfyoG2qTergGOB 9Pmk7XmJZ+kMuT0PE7wEkuxsEzblpYJAj2fj1JTxF4Xe7tcbacWqZEU9706KlGE0 SmxW/hQxntYjrZ9Lo6IRkbvkpiY/FhBDac8givWortZuznPFsIj1go9wiPLpMzgu K8mqZyxPczABh68DuNPyfTboOU6LxBX97riJLfItMHUz2MPXe9U8ICIZ2UBh9Rkp dhPGGk4aGQg3ZdFmVKtN5HuDDe8iYecxI45pvlmEqp7NAQWpEd+Uqh3Bnob1v4al fzikbFDNBT7uXPE5A6XdaEsGtacHvyY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:12 2025 by rpki-client