$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/670ef5b8-2390-388a-8a7c-5f82436f0e7d.roa File: 670ef5b8-2390-388a-8a7c-5f82436f0e7d.roa (raw, json) Hash identifier: fKtxWQ9IjNFYovgxA7Lea0XJ3zBkIgxnhk1yMfuHWZE= Subject key identifier: 54:14:B5:AC:32:50:12:63:2E:85:9D:5C:8C:25:67:1F:A2:73:99:31 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819471F6D6A6DC74C23840 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/670ef5b8-2390-388a-8a7c-5f82436f0e7d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:94:71:f6:d6:a6:dc:74:c2:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0870a569-096f-4d8d-a2c6-70243cb22f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:12:13:8a:cb:b3:95:59:d2:d6:2f:83:ef: e1:af:b4:d6:c9:2d:87:e1:32:94:99:b7:ca:d8:54: 2f:b4:53:61:f2:73:f2:64:bb:b9:b2:e0:cf:df:3a: d6:4a:40:b6:78:ba:9f:f9:c5:8c:98:85:52:43:03: 68:9c:0d:06:58:a8:f1:95:43:f5:39:0e:40:ff:64: d8:34:f2:27:28:11:86:61:99:80:7d:9a:0d:f1:de: 03:34:11:5e:1f:03:c5:37:d4:ac:44:77:8b:1c:af: 4b:e2:9c:41:be:de:27:64:ff:28:3b:df:4b:c0:2d: 3e:e1:19:de:3a:0d:a8:67:2a:47:74:77:10:fa:dd: 08:65:22:e1:bf:a3:a3:33:3f:71:a6:4e:82:41:ee: 23:16:68:27:f3:4b:1c:a3:bd:b2:79:7e:2f:cd:ec: 74:e3:97:0c:08:65:23:ac:ff:a5:1f:e8:71:78:94: 5b:87:c1:d3:89:2a:16:fe:de:8f:9a:06:ca:68:31: 6f:b3:75:3d:ba:47:2c:de:52:2a:02:f8:18:4a:cd: f3:bd:40:37:ea:10:4e:fd:36:00:5d:ec:58:bf:75: 8d:d9:e5:8c:69:00:ff:d1:40:14:22:96:82:cb:91: fe:84:95:2c:56:ef:39:0b:d8:c0:0f:0c:0c:11:76: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:B5:AC:32:50:12:63:2E:85:9D:5C:8C:25:67:1F:A2:73:99:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/670ef5b8-2390-388a-8a7c-5f82436f0e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a2:fe:9c:d5:5d:38:56:a6:87:c1:91:c4:75:d2:bc:27:ef: 71:bc:ec:a1:cb:39:64:01:16:7e:02:f5:9e:06:ce:26:72:54: b4:35:b2:07:3c:fa:fb:19:98:97:5a:34:6b:36:f4:60:df:b4: 7f:23:f7:06:c2:52:95:57:87:70:59:a7:b7:5e:0b:33:b0:d8: 61:81:90:49:3b:be:be:2b:33:d9:c9:dc:e5:35:e1:57:2b:67: 0a:de:57:d0:e7:02:8f:a0:6f:05:34:c8:1d:b9:79:9b:d2:df: 72:e0:1d:8f:f7:59:11:74:78:cc:cc:9b:34:24:85:d1:1b:35: 67:f8:f6:02:ce:5c:92:14:be:f0:b9:1a:fd:a6:90:36:8e:ec: 1b:d2:35:ae:ce:cd:cb:dc:0a:96:00:ec:2e:b1:38:73:8e:a4: 2e:2a:d0:12:5e:a5:66:7a:f7:c4:13:c8:02:1f:d1:fc:4b:62: 61:30:c4:a5:a9:8e:bf:49:64:67:db:cb:3a:b4:1a:10:c3:d8: 1c:f4:1e:18:fe:4f:ed:63:eb:7f:bb:94:da:78:1c:63:d5:25: 05:de:58:0f:60:35:e4:99:31:ba:29:98:11:a1:f2:b3:56:60: 90:22:2d:63:c9:da:02:00:60:f9:0f:20:17:11:f4:84:06:ca: 4d:55:7c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZRx9tam3HTCOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDg3MGE1NjktMDk2Zi00ZDhkLWEyYzYtNzAyNDNjYjIyZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ASE4rLs5VZ0tYvg+/hr7TWyS2H4TKUmbfK 2FQvtFNh8nPyZLu5suDP3zrWSkC2eLqf+cWMmIVSQwNonA0GWKjxlUP1OQ5A/2TY NPInKBGGYZmAfZoN8d4DNBFeHwPFN9SsRHeLHK9L4pxBvt4nZP8oO99LwC0+4Rne Og2oZypHdHcQ+t0IZSLhv6OjMz9xpk6CQe4jFmgn80sco72yeX4vzex045cMCGUj rP+lH+hxeJRbh8HTiSoW/t6PmgbKaDFvs3U9ukcs3lIqAvgYSs3zvUA36hBO/TYA XexYv3WN2eWMaQD/0UAUIpaCy5H+hJUsVu85C9jADwwMEXaQnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQUtawyUBJjLoWdXIwlZx+ic5kxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjcwZWY1YjgtMjM5MC0z ODhhLThhN2MtNWY4MjQzNmYwZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+i/pzVXThWpofBkcR10rwn73G87KHLOWQBFn4C9Z4GziZyVLQ1sgc8 +vsZmJdaNGs29GDftH8j9wbCUpVXh3BZp7deCzOw2GGBkEk7vr4rM9nJ3OU14Vcr ZwreV9DnAo+gbwU0yB25eZvS33LgHY/3WRF0eMzMmzQkhdEbNWf49gLOXJIUvvC5 Gv2mkDaO7BvSNa7OzcvcCpYA7C6xOHOOpC4q0BJepWZ698QTyAIf0fxLYmEwxKWp jr9JZGfbyzq0GhDD2Bz0Hhj+T+1j63+7lNp4HGPVJQXeWA9gNeSZMbopmBGh8rNW YJAiLWPJ2gIAYPkPIBcR9IQGyk1VfAY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:37 2025 by rpki-client