$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa File: 621e8f01-d538-37be-9158-db873dc19707.roa (raw, json) Hash identifier: 15tBV3OPnLrqxkWw16yhRfEgG1Kf9hIVImfDeX1cch0= Subject key identifier: 07:AB:65:C2:72:6E:97:29:0F:49:39:01:19:CA:F1:72:8A:D2:6B:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581964DF45D7FA9AC230B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:96:4d:f4:5d:7f:a9:ac:23:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=feef6fbf-dce2-480d-8f55-e3dd72294dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:3b:ab:8f:fa:13:ce:30:c3:8b:c3:a9:7a: ec:08:2e:6d:4d:65:b2:48:67:a8:b4:e8:8c:ee:9c: 88:a3:8d:05:e7:81:67:ee:22:ee:c7:c1:87:ff:b1: ca:e3:ae:ef:f9:82:87:30:5a:48:bb:08:82:9f:3f: e3:94:99:36:75:cc:de:a2:43:2f:89:82:c6:5c:13: b6:cc:b5:1d:e2:2a:6f:b2:ab:32:85:f9:56:30:c5: bb:be:d3:ae:90:cc:b9:2f:39:65:fd:bc:bb:a9:6f: be:0b:52:86:75:a0:59:94:b5:6e:f5:af:cf:1b:d6: ed:cf:c7:ff:8f:cf:71:4a:1c:fe:56:13:e8:c3:28: 5e:59:08:39:5f:9c:8c:52:f0:a8:38:a0:8e:95:b2: b1:07:6f:53:3d:06:51:65:37:cf:25:30:cc:8f:ff: ce:69:9d:bf:c6:f6:e3:30:9c:29:40:b7:04:aa:93: b9:e0:1b:0d:b8:fc:c7:06:96:60:01:f7:3a:ff:84: c9:a4:85:86:f1:1b:ea:fc:97:10:92:02:82:09:77: e5:46:a0:79:1a:24:dd:85:dc:1a:9e:80:7f:1c:28: 9a:dc:9f:f8:95:cf:a2:75:dc:3e:c0:5a:49:e8:62: cb:94:86:5b:bb:5f:06:d1:45:39:bb:c4:d9:cc:b7: b7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AB:65:C2:72:6E:97:29:0F:49:39:01:19:CA:F1:72:8A:D2:6B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e7:7e:06:be:78:a1:67:d7:b5:3a:79:d1:34:f5:d4:02:41: a5:b0:5e:56:fc:31:9a:db:df:06:65:80:a4:28:bc:5e:b1:4b: 6a:dc:2c:88:80:6c:3b:b7:c3:c3:cb:83:00:81:a1:a1:da:a4: f5:70:15:4e:88:41:a6:e4:93:08:cb:ff:bb:b0:a7:62:fa:cb: df:46:8f:e6:20:0a:d7:40:e2:b1:be:b0:55:cf:14:e8:75:5d: 64:e3:a1:6d:38:e2:9c:05:e1:4f:b8:07:d8:ca:88:b8:98:2e: b4:87:23:e3:f5:f1:9f:97:64:b2:ed:a1:64:21:26:38:4f:c1: 2a:08:39:68:2e:91:68:94:92:6a:f6:5e:3f:ae:41:09:fc:e8: 15:93:9a:7c:f0:0e:9e:a7:1d:02:f8:9f:e9:4e:6f:24:1f:09: 5d:20:42:7e:5e:87:6a:4f:c5:4b:2f:14:60:3e:ae:36:77:fb: 0e:45:91:47:ff:33:bd:c8:42:63:bc:c5:d6:47:f4:0b:a7:2a: 06:f8:43:08:6b:8f:b7:bd:dd:e8:36:f3:60:3e:1a:ea:49:de: cd:8d:b3:44:36:4c:f0:a3:49:64:6e:0c:d9:f1:c3:fc:2f:7e: 16:28:29:54:ad:48:7d:b3:bf:1b:4f:98:ed:8c:a4:99:ed:fa: 26:5c:ee:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZZN9F1/qawjC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmVlZjZmYmYtZGNlMi00ODBkLThmNTUtZTNkZDcyMjk0ZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75I7q4/6E84ww4vDqXrsCC5tTWWySGeotOiM 7pyIo40F54Fn7iLux8GH/7HK467v+YKHMFpIuwiCnz/jlJk2dczeokMviYLGXBO2 zLUd4ipvsqsyhflWMMW7vtOukMy5Lzll/by7qW++C1KGdaBZlLVu9a/PG9btz8f/ j89xShz+VhPowyheWQg5X5yMUvCoOKCOlbKxB29TPQZRZTfPJTDMj//OaZ2/xvbj MJwpQLcEqpO54BsNuPzHBpZgAfc6/4TJpIWG8Rvq/JcQkgKCCXflRqB5GiTdhdwa noB/HCia3J/4lc+iddw+wFpJ6GLLlIZbu18G0UU5u8TZzLe3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAerZcJybpcpD0k5ARnK8XKK0mv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIxZThmMDEtZDUzOC0z N2JlLTkxNTgtZGI4NzNkYzE5NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvnfga+eKFn17U6edE09dQCQaWwXlb8MZrb3wZlgKQovF6xS2rcLIiA bDu3w8PLgwCBoaHapPVwFU6IQabkkwjL/7uwp2L6y99Gj+YgCtdA4rG+sFXPFOh1 XWTjoW044pwF4U+4B9jKiLiYLrSHI+P18Z+XZLLtoWQhJjhPwSoIOWgukWiUkmr2 Xj+uQQn86BWTmnzwDp6nHQL4n+lObyQfCV0gQn5eh2pPxUsvFGA+rjZ3+w5FkUf/ M73IQmO8xdZH9AunKgb4Qwhrj7e93eg282A+GupJ3s2Ns0Q2TPCjSWRuDNnxw/wv fhYoKVStSH2zvxtPmO2MpJnt+iZc7s4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:07:32 2025 by rpki-client