$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/533df990-4841-3342-83f8-85ed76aba41a.roa File: 533df990-4841-3342-83f8-85ed76aba41a.roa (raw, json) Hash identifier: c5rY/XarGCvpNKzmY96XeU9+Exchb+nNV0KKj4KHH4c= Subject key identifier: 44:5C:02:95:0D:00:C4:EB:5D:A4:0B:B6:3A:F4:B5:CF:76:AD:D7:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58121FCD8C753628E9F10E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/533df990-4841-3342-83f8-85ed76aba41a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.106.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:21:fc:d8:c7:53:62:8e:9f:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7a501270-4e4e-4594-902c-15796594de5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:76:16:ce:42:c5:9f:fe:fe:53:c5:32:02: d1:0b:a9:88:20:a8:b7:7b:53:7f:20:42:c1:bb:e1: ec:1a:8a:13:06:dd:b5:42:72:5a:d7:35:17:3f:bf: 70:b9:99:d3:73:12:c6:46:3e:2b:89:5e:46:5d:49: 4a:ed:bb:df:64:27:76:62:7e:58:66:a8:b8:4b:c6: 75:75:88:16:8b:e1:4d:3b:21:f6:63:dd:02:57:5d: ff:97:42:a6:1a:f6:37:86:ff:67:52:ee:02:b5:69: 16:c4:1f:ce:bc:37:6d:55:0e:7e:d0:65:00:de:80: f3:ab:54:a0:2e:49:da:a9:cb:d8:18:0e:5d:43:22: 82:67:38:8e:ca:5b:2d:20:39:71:f6:18:e7:11:79: d2:fa:20:00:cd:7f:b4:80:11:90:f8:a6:61:0b:ec: 11:21:66:74:9e:84:4b:a3:84:1b:24:c4:18:37:62: 0d:c2:e2:06:86:bf:f2:bd:d5:5f:d0:69:e5:a6:24: cb:1e:34:e9:ed:8e:29:c3:f1:04:ce:cd:cc:f0:38: ff:d6:95:5e:ba:c2:e8:73:e4:26:ba:91:62:64:92: 11:c8:43:d2:46:01:f9:64:5d:2e:fc:d8:7e:0d:fc: 61:be:65:e9:03:42:ad:70:00:bb:91:f4:26:55:d5: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:02:95:0D:00:C4:EB:5D:A4:0B:B6:3A:F4:B5:CF:76:AD:D7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/533df990-4841-3342-83f8-85ed76aba41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.106.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2f:15:6e:4c:1d:e8:bd:eb:b0:e9:2b:01:37:13:32:93:93: 90:4a:e1:bc:b3:ba:1f:15:1d:94:da:9e:12:08:de:bb:4e:4a: 87:1d:34:88:c5:9b:04:67:e2:d1:a4:4f:3c:7e:08:21:cd:d4: 9d:e0:87:0a:19:5e:4a:3b:e4:13:fc:f8:c7:34:8f:66:86:fa: c8:31:d8:2d:c5:35:8d:aa:44:da:f3:7e:0b:eb:f6:5f:34:cf: 6e:18:0e:24:ec:5b:19:c0:75:5c:73:ab:63:67:e5:13:42:53: 18:2b:4b:31:3b:a1:31:3d:1b:65:61:86:cc:22:e5:90:4d:c6: 6e:ce:de:6a:14:7d:33:24:b1:bb:e8:a7:58:a8:bc:86:7c:06: 3e:a3:46:aa:23:14:e9:30:5e:4d:e4:f4:8c:28:77:46:42:90: d7:4b:80:f5:c7:6d:54:2e:4b:bf:4e:d1:27:86:de:f7:61:1e: 36:1a:90:a4:eb:97:a2:02:dd:b1:1b:6e:1b:82:93:ff:27:4d: e4:f0:f1:5f:43:e5:51:56:5d:d8:9a:2d:5f:42:8d:59:e3:79: 59:06:ee:3d:60:d0:e4:2a:38:c5:8a:50:20:46:8e:0e:f5:5b: 6e:b4:90:34:39:88:7d:14:0d:93:b1:9f:42:d0:66:fd:33:3f: cd:3f:38:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgSH82MdTYo6fEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2E1MDEyNzAtNGU0ZS00NTk0LTkwMmMtMTU3OTY1OTRkZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm852Fs5CxZ/+/lPFMgLRC6mIIKi3e1N/IELB u+HsGooTBt21QnJa1zUXP79wuZnTcxLGRj4riV5GXUlK7bvfZCd2Yn5YZqi4S8Z1 dYgWi+FNOyH2Y90CV13/l0KmGvY3hv9nUu4CtWkWxB/OvDdtVQ5+0GUA3oDzq1Sg LknaqcvYGA5dQyKCZziOylstIDlx9hjnEXnS+iAAzX+0gBGQ+KZhC+wRIWZ0noRL o4QbJMQYN2INwuIGhr/yvdVf0GnlpiTLHjTp7Y4pw/EEzs3M8Dj/1pVeusLoc+Qm upFiZJIRyEPSRgH5ZF0u/Nh+DfxhvmXpA0KtcAC7kfQmVdUx/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERcApUNAMTrXaQLtjr0tc92rdfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTMzZGY5OTAtNDg0MS0z MzQyLTgzZjgtODVlZDc2YWJhNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2ofMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcvFW5MHei967DpKwE3EzKTk5BK4byzuh8VHZTanhII3rtOSocdNIjF mwRn4tGkTzx+CCHN1J3ghwoZXko75BP8+Mc0j2aG+sgx2C3FNY2qRNrzfgvr9l80 z24YDiTsWxnAdVxzq2Nn5RNCUxgrSzE7oTE9G2Vhhswi5ZBNxm7O3moUfTMksbvo p1iovIZ8Bj6jRqojFOkwXk3k9Iwod0ZCkNdLgPXHbVQuS79O0SeG3vdhHjYakKTr l6IC3bEbbhuCk/8nTeTw8V9D5VFWXdiaLV9CjVnjeVkG7j1g0OQqOMWKUCBGjg71 W260kDQ5iH0UDZOxn0LQZv0zP80/OKw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:28:22 2025 by rpki-client