$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e58c3f2-e18e-3f7a-8f54-94de7c3471ac.roa File: 3e58c3f2-e18e-3f7a-8f54-94de7c3471ac.roa (raw, json) Hash identifier: K6d2P4NiDDXoeM84l1dJXnPXmEN/xvct6a8ZbowYYS8= Subject key identifier: A2:9D:C7:E3:C0:4D:30:D6:17:1A:A4:F8:D0:D6:B3:CF:BE:4B:73:89 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581AE3C340770AB355652C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e58c3f2-e18e-3f7a-8f54-94de7c3471ac.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.105.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ae:3c:34:07:70:ab:35:56:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8d8b3f8a-f10b-4b43-a0a4-82f216f5999d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:fa:99:1d:c9:e9:cb:29:fc:cb:34:41:81: b3:20:0d:a1:63:35:03:ef:02:53:51:2b:2f:63:07: ad:b8:04:e1:93:e2:e4:26:37:51:e1:93:9e:99:d6: 39:fb:77:9a:0d:db:1f:0f:c5:ed:ba:b9:ba:dc:46: d0:05:7c:f4:29:6d:e3:76:34:1e:a8:0f:62:54:20: b1:7c:5f:53:b0:bb:64:57:15:ee:83:51:ea:b9:10: 40:07:60:41:a7:04:e5:df:e4:0c:a3:c7:4e:4b:97: 08:d9:41:4f:d1:54:7a:f9:13:d5:eb:6c:6f:3a:39: 2e:79:53:04:9f:1d:96:72:80:a3:4a:0a:78:53:1e: b6:d7:cb:27:81:7f:d1:24:46:da:8e:a7:b4:ab:13: fb:74:a2:32:e5:fa:5b:de:91:e9:17:15:4d:2e:66: dd:af:03:41:eb:58:4f:85:a4:8c:1b:7f:de:a0:08: 70:ff:2a:0c:10:9c:0a:92:50:92:2d:48:cf:55:17: ba:6c:b3:c2:fe:e4:0d:24:56:62:41:d0:62:3b:ec: 9e:6c:70:31:bd:00:6b:f4:f8:be:bc:f1:8f:43:ee: 01:5a:50:65:89:77:66:d3:cb:80:fe:e9:9b:6d:f8: ba:8d:82:ed:42:35:8d:1e:4d:41:c3:d0:53:60:3d: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:C7:E3:C0:4D:30:D6:17:1A:A4:F8:D0:D6:B3:CF:BE:4B:73:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e58c3f2-e18e-3f7a-8f54-94de7c3471ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.105.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:74:4f:c6:5c:a8:91:e4:e3:ed:3b:8a:0a:40:d1:01:4e:7c: 58:8a:d4:c6:37:ed:9f:a9:09:b0:95:bb:42:29:44:1f:a8:df: 2c:b6:a2:22:ed:ed:8f:35:62:32:b7:b0:7e:dd:75:62:b8:5d: 7e:f5:68:76:55:0c:e0:16:f5:27:fd:5f:6b:86:7e:fc:71:6e: 73:3c:f5:88:92:2a:84:88:90:1c:35:49:41:31:44:ed:bb:35: 76:54:49:d4:75:ed:39:77:4b:d7:d6:80:4e:7b:97:6b:e9:b5: 38:2b:97:9e:01:33:32:a5:38:2b:3e:7d:d4:2b:6f:2b:35:e0: e9:3d:5b:8a:d4:16:46:a1:16:65:19:a0:d1:b6:df:1e:b9:1b: bc:1d:43:97:ab:4d:20:b2:b5:c3:50:e7:21:51:09:cd:73:78: 5e:16:05:11:48:45:f9:6b:e7:01:b0:b9:46:be:e9:5e:e6:72: b5:06:76:31:f1:87:0e:75:80:c7:fb:80:53:e7:20:f0:7e:4f: 7e:c5:2a:1c:35:9c:74:fd:71:f2:88:02:e0:f5:6c:3b:30:8c: a9:3c:42:13:b9:53:dc:bf:fa:64:67:11:8e:c4:7a:31:0d:71: cb:a1:56:b4:e8:c4:e3:42:a3:d8:15:85:04:9d:f0:b8:ee:4e: 2e:45:48:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFga48NAdwqzVWUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGQ4YjNmOGEtZjEwYi00YjQzLWEwYTQtODJmMjE2ZjU5OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9D6mR3J6csp/Ms0QYGzIA2hYzUD7wJTUSsv YwetuAThk+LkJjdR4ZOemdY5+3eaDdsfD8Xturm63EbQBXz0KW3jdjQeqA9iVCCx fF9TsLtkVxXug1HquRBAB2BBpwTl3+QMo8dOS5cI2UFP0VR6+RPV62xvOjkueVME nx2WcoCjSgp4Ux6218sngX/RJEbajqe0qxP7dKIy5fpb3pHpFxVNLmbdrwNB61hP haSMG3/eoAhw/yoMEJwKklCSLUjPVRe6bLPC/uQNJFZiQdBiO+yebHAxvQBr9Pi+ vPGPQ+4BWlBliXdm08uA/umbbfi6jYLtQjWNHk1Bw9BTYD3r9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKdx+PATTDWFxqk+NDWs8++S3OJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2U1OGMzZjItZTE4ZS0z ZjdhLThmNTQtOTRkZTdjMzQ3MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2mZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh0T8ZcqJHk4+07igpA0QFOfFiK1MY37Z+pCbCVu0IpRB+o3yy2oiLt 7Y81YjK3sH7ddWK4XX71aHZVDOAW9Sf9X2uGfvxxbnM89YiSKoSIkBw1SUExRO27 NXZUSdR17Tl3S9fWgE57l2vptTgrl54BMzKlOCs+fdQrbys14Ok9W4rUFkahFmUZ oNG23x65G7wdQ5erTSCytcNQ5yFRCc1zeF4WBRFIRflr5wGwuUa+6V7mcrUGdjHx hw51gMf7gFPnIPB+T37FKhw1nHT9cfKIAuD1bDswjKk8QhO5U9y/+mRnEY7EejEN ccuhVrToxONCo9gVhQSd8LjuTi5FSMw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:26 2025 by rpki-client