$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b534909-ef24-3943-9d3f-d968e3209c47.roa File: 7b534909-ef24-3943-9d3f-d968e3209c47.roa (raw, json) Hash identifier: HeorbgI0Emt09bpnGmNYHgtbZNLQiqTRvyytMP7TBUw= Subject key identifier: 67:9E:20:82:E9:75:40:21:90:93:7E:32:AD:16:14:A6:CD:7E:38:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58100DE69F1692A3E52EE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b534909-ef24-3943-9d3f-d968e3209c47.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:00:de:69:f1:69:2a:3e:52:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c77be6fa-5065-401e-86e4-b6c6d29bc9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:21:7c:e3:a5:2c:71:89:21:7b:23:f6:f9: 58:95:1e:3b:1e:82:50:91:f8:6e:40:70:c2:ef:4e: 4c:1a:63:73:62:fa:cc:54:c8:a2:c8:94:d5:44:b7: cd:72:18:59:f7:13:12:38:6a:23:c8:7b:6d:84:34: bb:81:51:a4:a1:90:72:70:3e:41:95:f4:af:05:9f: 97:12:2f:8c:3b:24:61:e9:64:25:a2:3c:33:55:63: 73:fc:d4:1d:2c:b1:96:fa:0b:46:df:67:f6:e0:1c: 5a:15:47:e8:da:cd:84:60:96:80:98:71:50:f9:db: b2:7a:34:f0:f1:0f:1b:97:92:de:c8:85:8b:a8:c7: 45:65:46:c5:d4:d9:5b:df:b0:c2:4a:62:61:a0:7e: e9:96:fb:b5:b4:5b:2f:6b:bc:8a:48:fb:bc:34:91: 0a:66:93:b6:4e:e0:a7:41:54:d2:52:bc:fe:89:ff: 39:d8:a0:f3:fd:15:05:5a:82:33:9a:68:28:a7:75: 7e:41:96:25:1b:15:8e:ed:60:97:58:93:f7:a8:ec: 48:87:3a:96:d0:8c:00:bc:d9:8b:b7:09:7f:b1:53: 9e:d9:d8:d9:1d:7c:b9:f6:6c:52:9d:84:dd:42:05: 23:d4:10:b8:3c:8a:30:2c:24:56:77:20:a4:07:05: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9E:20:82:E9:75:40:21:90:93:7E:32:AD:16:14:A6:CD:7E:38:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b534909-ef24-3943-9d3f-d968e3209c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3e:28:f5:94:26:03:da:e5:6a:64:81:29:78:a9:65:b3:6f: de:d4:42:8b:05:d2:74:be:b4:0a:81:45:1c:a3:0f:d3:f5:65: 02:b0:0c:94:24:2a:ec:e1:65:8e:d9:a2:4a:99:0b:26:c7:2a: 9f:c6:81:66:e7:91:4e:26:96:9c:26:1c:dc:d0:db:ba:5a:98: c4:c8:2b:31:5e:76:b9:94:e4:3b:00:55:27:40:af:fd:55:10: ec:0c:cb:a1:08:ef:d1:c7:77:7b:99:97:e9:df:7c:e7:ff:81: 68:8d:40:74:5a:75:d2:5c:d4:7c:5e:99:d2:8a:c7:f3:19:7c: 8c:47:ae:c2:a7:4a:8c:7e:0e:31:54:4c:e9:c7:25:10:1b:0c: 2b:d5:6f:e6:26:c0:89:92:e0:d4:42:2a:e1:85:35:67:ca:47: 2e:a6:16:63:2c:0d:6a:b5:c4:bc:1b:91:67:08:15:77:4e:07: 31:f5:b5:92:af:24:94:9f:de:f7:9b:7a:46:78:be:20:49:33: 99:c8:8e:c9:f0:02:16:49:ac:1f:82:74:cc:52:af:66:db:dd: f1:9d:a2:1d:bc:cc:bb:44:7d:b0:62:73:4c:67:8b:f0:6c:f7: ea:9c:2d:fa:43:c3:41:b7:c1:00:68:8c:34:1a:0c:96:6b:27: db:07:95:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQDeafFpKj5S7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Yzc3YmU2ZmEtNTA2NS00MDFlLTg2ZTQtYjZjNmQyOWJjOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCkhfOOlLHGJIXsj9vlYlR47HoJQkfhuQHDC 705MGmNzYvrMVMiiyJTVRLfNchhZ9xMSOGojyHtthDS7gVGkoZBycD5BlfSvBZ+X Ei+MOyRh6WQlojwzVWNz/NQdLLGW+gtG32f24BxaFUfo2s2EYJaAmHFQ+duyejTw 8Q8bl5LeyIWLqMdFZUbF1Nlb37DCSmJhoH7plvu1tFsva7yKSPu8NJEKZpO2TuCn QVTSUrz+if852KDz/RUFWoIzmmgop3V+QZYlGxWO7WCXWJP3qOxIhzqW0IwAvNmL twl/sVOe2djZHXy59mxSnYTdQgUj1BC4PIowLCRWdyCkBwUPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeeIILpdUAhkJN+Mq0WFKbNfjhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2I1MzQ5MDktZWYyNC0z OTQzLTlkM2YtZDk2OGUzMjA5YzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4+KPWUJgPa5WpkgSl4qWWzb97UQosF0nS+tAqBRRyjD9P1ZQKwDJQk KuzhZY7ZokqZCybHKp/GgWbnkU4mlpwmHNzQ27pamMTIKzFedrmU5DsAVSdAr/1V EOwMy6EI79HHd3uZl+nffOf/gWiNQHRaddJc1HxemdKKx/MZfIxHrsKnSox+DjFU TOnHJRAbDCvVb+YmwImS4NRCKuGFNWfKRy6mFmMsDWq1xLwbkWcIFXdOBzH1tZKv JJSf3vebekZ4viBJM5nIjsnwAhZJrB+CdMxSr2bb3fGdoh28zLtEfbBic0xni/Bs 9+qcLfpDw0G3wQBojDQaDJZrJ9sHlcM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:00 2025 by rpki-client