$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ed9cfe-033c-3377-96b8-1dc6d2eb67f1.roa File: 60ed9cfe-033c-3377-96b8-1dc6d2eb67f1.roa (raw, json) Hash identifier: ec/Pi2mIjRb07yi4Xdp7HKAcSYgQrT94+XNLNdToh10= Subject key identifier: 5C:26:F7:4A:16:8D:EB:5D:63:83:56:17:70:CE:F1:90:EA:0B:33:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5811502DFC72950A0CB5D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ed9cfe-033c-3377-96b8-1dc6d2eb67f1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.104.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:15:02:df:c7:29:50:a0:cb:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8e1a02e7-220f-46b4-a9d9-7d3bb53ec246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:64:20:55:3d:66:be:2c:e8:db:e7:c6:82: 81:b1:83:3a:02:4d:bc:f5:9c:97:85:16:9d:11:ac: 47:41:5a:19:85:b0:8c:49:84:02:a3:b9:9b:0c:42: 9d:06:26:35:f4:f8:d6:68:65:4a:ae:43:01:13:6f: 0f:f8:e2:1d:c1:87:58:da:c5:9b:d5:fa:67:0c:71: 7b:67:7f:c3:49:d4:0b:f3:d5:8d:20:af:1b:8f:0a: 98:79:5b:38:e6:d1:f8:48:9f:0e:68:83:0a:62:3e: 19:f9:67:25:c0:e8:d8:e2:08:7f:31:fb:3a:de:78: 60:56:e6:1c:67:6f:e1:17:b6:ed:4f:1f:cc:99:71: 28:ee:39:07:24:7b:fc:2f:47:6a:73:de:a6:97:3e: 85:d1:5f:80:e0:a8:39:9e:87:dd:af:e7:be:ce:c2: 33:5d:10:00:97:f1:79:4a:f8:46:69:91:67:ef:25: 29:40:85:f9:c1:97:33:65:0e:9c:6a:d3:10:38:bd: 4e:66:af:09:dc:3e:10:fc:4f:5b:cc:07:5a:12:71: 07:66:93:bb:89:80:b7:f5:ab:ce:47:33:0d:77:f5: bf:b8:a7:70:f0:6c:03:0c:82:ad:0b:2a:76:66:4b: 6f:1d:b4:23:c0:1c:a7:42:9b:e0:70:d2:e2:09:e2: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:F7:4A:16:8D:EB:5D:63:83:56:17:70:CE:F1:90:EA:0B:33:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ed9cfe-033c-3377-96b8-1dc6d2eb67f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:a0:19:70:30:cb:9d:b1:c8:7b:aa:6c:8c:af:a3:49:1c:43: 3d:55:ed:4f:46:48:d1:68:0d:62:1e:2c:f1:80:1b:31:7b:5d: 08:b5:db:22:bc:ed:92:6b:c6:99:0d:00:93:5e:c9:d2:45:4b: f2:5e:e5:ec:c9:e6:64:29:0d:53:f8:88:6a:95:72:93:8c:f2: 93:de:8c:99:8b:54:b8:96:1e:9c:6d:0c:fc:95:0d:96:4e:25: 24:6a:27:26:52:22:34:b3:be:a0:a7:71:cb:34:5f:e0:c6:67: 92:a8:05:fa:4f:3c:95:53:b1:0f:4b:d2:76:f2:36:4f:a5:1d: f6:29:0f:43:61:e7:dd:76:73:c3:0c:f2:4b:c9:e0:ac:3a:02: 5a:9e:15:93:2c:dd:00:cb:eb:20:41:ab:e1:e2:cb:80:c7:73: 46:69:ce:ad:96:a6:1e:41:35:43:f4:83:3f:5b:b2:93:40:0f: ce:77:5d:5d:de:e2:42:e0:ec:b1:2a:4f:d5:c8:98:41:d1:a3: 72:8c:88:12:39:11:cb:e7:32:b0:12:00:e2:0a:19:a4:eb:04: 0e:c8:a7:bc:4a:6f:d4:bf:0f:b7:e8:a2:37:44:45:70:0f:6c: b1:69:44:93:0b:88:82:1b:e4:06:97:e3:90:ef:9a:ba:83:6a: fd:8e:9e:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRUC38cpUKDLXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGUxYTAyZTctMjIwZi00NmI0LWE5ZDktN2QzYmI1M2VjMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ZkIFU9Zr4s6NvnxoKBsYM6Ak289ZyXhRad EaxHQVoZhbCMSYQCo7mbDEKdBiY19PjWaGVKrkMBE28P+OIdwYdY2sWb1fpnDHF7 Z3/DSdQL89WNIK8bjwqYeVs45tH4SJ8OaIMKYj4Z+WclwOjY4gh/Mfs63nhgVuYc Z2/hF7btTx/MmXEo7jkHJHv8L0dqc96mlz6F0V+A4Kg5nofdr+e+zsIzXRAAl/F5 SvhGaZFn7yUpQIX5wZczZQ6catMQOL1OZq8J3D4Q/E9bzAdaEnEHZpO7iYC39avO RzMNd/W/uKdw8GwDDIKtCyp2ZktvHbQjwBynQpvgcNLiCeLddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwm90oWjetdY4NWF3DO8ZDqCzOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjBlZDljZmUtMDMzYy0z Mzc3LTk2YjgtMWRjNmQyZWI2N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2haMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOgGXAwy52xyHuqbIyvo0kcQz1V7U9GSNFoDWIeLPGAGzF7XQi12yK8 7ZJrxpkNAJNeydJFS/Je5ezJ5mQpDVP4iGqVcpOM8pPejJmLVLiWHpxtDPyVDZZO JSRqJyZSIjSzvqCnccs0X+DGZ5KoBfpPPJVTsQ9L0nbyNk+lHfYpD0Nh5912c8MM 8kvJ4Kw6AlqeFZMs3QDL6yBBq+Hiy4DHc0Zpzq2Wph5BNUP0gz9bspNAD853XV3e 4kLg7LEqT9XImEHRo3KMiBI5EcvnMrASAOIKGaTrBA7Ip7xKb9S/D7foojdERXAP bLFpRJMLiIIb5AaX45DvmrqDav2OnhE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:45:56 2025 by rpki-client