$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29a1fe39-3a06-3681-9ece-cd179f42f7d7.roa File: 29a1fe39-3a06-3681-9ece-cd179f42f7d7.roa (raw, json) Hash identifier: 712/Sg4WCZB7zVvPE5w8sC3y2wRUkrHOftyy+ueaPyg= Subject key identifier: EE:EE:3E:16:A4:FD:DE:B0:8E:52:8D:30:69:AD:EA:89:E0:F1:73:B9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5812E014E0007B6C7EA8B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29a1fe39-3a06-3681-9ece-cd179f42f7d7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.107.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:2e:01:4e:00:07:b6:c7:ea:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3fd9e0c8-5829-401e-a934-a5d174ac5766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:46:76:2c:86:8e:24:b8:6a:a8:30:eb:9b: 94:ac:f0:62:f5:22:91:23:71:b0:ff:46:48:27:86: 72:34:48:3b:10:7b:13:49:05:54:19:d0:53:a2:fe: 1b:38:16:57:3b:fb:82:81:6d:ae:ad:70:ba:02:cb: 1f:64:8e:54:27:e0:90:ef:c7:39:ec:ca:44:d1:8e: 0e:01:0b:09:80:74:e6:43:98:5b:c1:85:37:f0:83: 13:0a:23:68:77:0e:47:fd:5e:f9:51:48:7d:8a:f1: 17:c1:33:f2:84:3b:e0:2e:ae:e1:df:52:5d:40:2f: 6a:6a:23:6a:bf:25:fe:60:3d:59:a6:78:d3:82:b4: 11:42:b4:94:cf:09:2c:38:74:6c:84:cb:cf:39:93: 14:98:f0:12:21:bd:aa:14:be:2f:b6:e1:ba:db:89: 0b:78:e6:21:4f:06:cd:61:db:71:e5:b0:98:08:1b: 79:6a:35:c0:56:cb:a7:9e:07:25:45:8f:85:c1:68: b6:35:30:28:06:32:63:07:03:72:58:76:cb:63:5e: 80:ad:a5:d9:08:30:c8:54:0a:f0:53:0d:e5:0f:a7: 76:12:c3:df:0c:b0:78:54:7e:cd:e4:fe:87:4b:1d: fa:42:13:21:ab:62:b4:90:ee:02:84:22:87:bb:6c: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EE:3E:16:A4:FD:DE:B0:8E:52:8D:30:69:AD:EA:89:E0:F1:73:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29a1fe39-3a06-3681-9ece-cd179f42f7d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b7:76:ff:71:eb:8f:ef:8d:54:a7:ac:cf:1a:f3:00:7e:9d: e9:5a:9a:01:9c:da:9b:5a:64:e1:9e:c7:5e:9d:20:af:af:b1: 5a:e7:ad:89:45:df:12:fc:bb:73:f3:27:c1:09:30:04:19:b5: b5:74:3f:36:db:d0:17:98:1b:cf:7b:e7:45:bf:7e:10:a6:c6: 68:52:48:f2:5a:5c:b1:35:b5:76:1e:e2:19:db:28:5e:f2:c8: e9:b9:6d:b1:52:83:32:7f:49:e9:c8:1d:d5:55:5b:07:9d:71: 81:71:b0:cc:9f:89:e6:44:0e:4b:18:f3:b8:08:cc:a0:81:af: 71:ff:34:60:aa:32:2f:77:a7:4e:ac:20:f6:48:8d:f4:ea:65: d8:41:55:11:18:20:b8:7d:ba:3f:3e:72:28:b0:ef:54:e5:ad: eb:f6:b5:29:58:da:3e:b4:9a:70:40:ab:e2:c1:75:0e:6c:96: f3:d3:ab:cb:b4:46:b5:ab:82:56:41:36:90:6f:e5:bc:55:c8: c7:b9:de:5b:ed:d1:cd:3a:f1:f3:4f:d1:c4:a5:8d:09:87:f9: 52:2b:b8:50:a0:a4:4b:cc:09:06:71:c5:43:f1:ff:fa:de:85: ef:6c:21:44:35:72:2f:7b:38:7f:c1:f5:99:19:02:28:1a:17: e9:12:d9:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgS4BTgAHtsfqiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZkOWUwYzgtNTgyOS00MDFlLWE5MzQtYTVkMTc0YWM1NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJGdiyGjiS4aqgw65uUrPBi9SKRI3Gw/0ZI J4ZyNEg7EHsTSQVUGdBTov4bOBZXO/uCgW2urXC6AssfZI5UJ+CQ78c57MpE0Y4O AQsJgHTmQ5hbwYU38IMTCiNodw5H/V75UUh9ivEXwTPyhDvgLq7h31JdQC9qaiNq vyX+YD1ZpnjTgrQRQrSUzwksOHRshMvPOZMUmPASIb2qFL4vtuG624kLeOYhTwbN Ydtx5bCYCBt5ajXAVsunngclRY+FwWi2NTAoBjJjBwNyWHbLY16AraXZCDDIVArw Uw3lD6d2EsPfDLB4VH7N5P6HSx36QhMhq2K0kO4ChCKHu2yxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7uPhak/d6wjlKNMGmt6ong8XO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjlhMWZlMzktM2EwNi0z NjgxLTllY2UtY2QxNzlmNDJmN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2uuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK3dv9x64/vjVSnrM8a8wB+nelamgGc2ptaZOGex16dIK+vsVrnrYlF 3xL8u3PzJ8EJMAQZtbV0Pzbb0BeYG89750W/fhCmxmhSSPJaXLE1tXYe4hnbKF7y yOm5bbFSgzJ/SenIHdVVWwedcYFxsMyfieZEDksY87gIzKCBr3H/NGCqMi93p06s IPZIjfTqZdhBVREYILh9uj8+ciiw71Tlrev2tSlY2j60mnBAq+LBdQ5slvPTq8u0 RrWrglZBNpBv5bxVyMe53lvt0c068fNP0cSljQmH+VIruFCgpEvMCQZxxUPx//re he9sIUQ1ci97OH/B9ZkZAigaF+kS2aI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:24 2025 by rpki-client