$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bfb3971-29c4-34b7-8b98-e951fab7cdc8.roa File: 7bfb3971-29c4-34b7-8b98-e951fab7cdc8.roa (raw, json) Hash identifier: dED275oHXm7L75Q1Vlz6EurqQGMxjifprKLbIpoYc3s= Subject key identifier: 3F:7A:E3:0B:1B:23:90:F1:B3:8B:09:C4:CA:BF:99:DA:1D:5B:F2:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A942D21287DD6DFA3A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bfb3971-29c4-34b7-8b98-e951fab7cdc8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.104.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a9:42:d2:12:87:dd:6d:fa:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5f892331-a86d-4dfd-9b35-8c76f59a9d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:26:03:88:d7:78:61:f0:88:f7:48:3d:86: b3:96:eb:e1:1c:c2:6c:f3:86:d6:12:42:cb:42:a6: 04:75:45:31:35:74:fe:65:4c:ad:7e:df:a3:9e:4e: ad:55:0c:ce:61:78:10:46:a7:14:54:2d:ce:6e:6f: 4b:cf:d8:af:2d:ff:3e:ee:c9:05:3b:da:e1:ea:94: 78:66:67:27:64:1f:39:09:6f:dc:c3:6a:ba:08:94: 8c:64:60:b8:97:0e:43:08:67:9a:07:33:90:a2:f5: 3c:3f:72:84:be:ec:de:b5:5c:6e:8d:6a:82:2b:2d: 1d:e5:00:8a:19:e6:50:e6:4e:dd:00:ad:c8:a7:13: bd:15:89:f3:e0:4e:c9:c7:ba:2c:66:26:72:be:f3: ad:d1:68:de:03:a0:79:89:b9:33:8f:ff:ec:ab:35: c4:c3:7a:86:2e:25:08:fc:f7:e1:47:c8:b6:70:df: f1:db:e3:8b:cf:c6:eb:ec:4b:bd:b1:9b:2b:74:cc: b2:01:1d:3d:d5:6e:20:56:dd:fe:09:d1:c7:54:c3: 14:f3:fb:3a:fe:48:8d:c5:55:cf:6c:98:ad:a4:11: 74:ad:b3:08:36:05:ae:c0:53:ab:ac:50:ad:0c:5c: 7b:3b:ad:31:15:42:bc:6a:a9:16:49:a0:81:2e:78: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:E3:0B:1B:23:90:F1:B3:8B:09:C4:CA:BF:99:DA:1D:5B:F2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bfb3971-29c4-34b7-8b98-e951fab7cdc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ec:88:3e:db:6b:8d:86:0f:f3:5d:75:9f:52:56:17:56:a6: da:ba:54:e3:5e:02:59:7d:ab:0c:56:0b:49:4d:9c:ae:3e:74: e5:7e:fd:ac:ed:d4:0d:b4:9f:9d:bd:92:78:df:dc:d9:dd:a5: 0b:2f:1b:f7:65:c2:22:bf:43:6c:16:b7:7e:cb:7c:76:c3:2e: 3e:51:08:5d:f1:7b:50:97:bb:86:98:6d:7f:5b:12:5d:5b:e1: 7d:33:5f:7c:87:a6:d4:f8:88:ba:45:73:f9:00:54:d2:de:57: 54:7b:35:46:bc:90:ba:e8:dc:6d:6a:3a:67:33:94:db:1a:05: 79:57:e1:86:33:6a:d4:a4:d4:86:eb:80:c3:c8:93:87:87:8a: da:69:e7:aa:8d:7b:2a:e9:4e:1d:20:b4:36:29:8d:70:1e:8a: 30:ac:dd:f9:48:11:77:10:64:35:22:26:5e:4c:08:37:c5:c3: 66:cb:52:21:de:60:44:c7:67:01:ed:38:31:ef:7b:d4:bf:cb: 91:3a:fe:c9:34:ee:d3:f5:0f:50:71:25:ab:9a:b3:5f:b8:19: b3:d5:2b:1b:bf:23:dc:2c:0a:47:a9:3c:47:32:7f:46:30:dd: 27:ab:f5:42:9c:ef:35:15:1c:42:15:9d:b3:37:38:1e:9e:30: 91:44:26:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgalC0hKH3W36OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWY4OTIzMzEtYTg2ZC00ZGZkLTliMzUtOGM3NmY1OWE5ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivgmA4jXeGHwiPdIPYazluvhHMJs84bWEkLL QqYEdUUxNXT+ZUytft+jnk6tVQzOYXgQRqcUVC3Obm9Lz9ivLf8+7skFO9rh6pR4 ZmcnZB85CW/cw2q6CJSMZGC4lw5DCGeaBzOQovU8P3KEvuzetVxujWqCKy0d5QCK GeZQ5k7dAK3IpxO9FYnz4E7Jx7osZiZyvvOt0WjeA6B5ibkzj//sqzXEw3qGLiUI /PfhR8i2cN/x2+OLz8br7Eu9sZsrdMyyAR091W4gVt3+CdHHVMMU8/s6/kiNxVXP bJitpBF0rbMINgWuwFOrrFCtDFx7O60xFUK8aqkWSaCBLnhgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD964wsbI5Dxs4sJxMq/mdodW/L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2JmYjM5NzEtMjljNC0z NGI3LThiOTgtZTk1MWZhYjdjZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2jXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHsiD7ba42GD/NddZ9SVhdWptq6VONeAll9qwxWC0lNnK4+dOV+/azt 1A20n529knjf3NndpQsvG/dlwiK/Q2wWt37LfHbDLj5RCF3xe1CXu4aYbX9bEl1b 4X0zX3yHptT4iLpFc/kAVNLeV1R7NUa8kLro3G1qOmczlNsaBXlX4YYzatSk1Ibr gMPIk4eHitpp56qNeyrpTh0gtDYpjXAeijCs3flIEXcQZDUiJl5MCDfFw2bLUiHe YETHZwHtODHve9S/y5E6/sk07tP1D1BxJauas1+4GbPVKxu/I9wsCkepPEcyf0Yw 3Ser9UKc7zUVHEIVnbM3OB6eMJFEJuA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:19 2025 by rpki-client