$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa File: 8dfafc76-a0e4-3760-af6d-44f2966b4425.roa (raw, json) Hash identifier: mDle4/hqnJzG+eCndQ6MCk+ibSMK17yhRvs8I3K2zls= Subject key identifier: CF:3E:2A:4E:1C:FF:90:06:62:03:7E:C4:A1:07:E9:D3:AA:31:36:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581950115C4F9259BFF0500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:95:01:15:c4:f9:25:9b:ff:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f1d5a72d-1bb8-4f8c-958e-c24d3a5bf4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:ab:d9:84:c5:29:98:7b:e7:bd:26:bd:98: 98:22:f2:17:cb:50:03:d4:59:80:33:28:9b:7f:ac: 8c:78:29:36:5e:6e:e2:0e:6c:1e:e4:6e:fb:79:0f: 93:7e:80:cb:39:02:4a:56:4c:06:ce:e0:c8:ae:3f: ac:62:8b:46:2b:94:75:66:47:4f:88:bb:28:d9:83: 42:05:bb:8d:4c:8c:5d:ff:70:c8:f8:1b:37:fe:dd: e4:37:d1:61:ee:6c:78:12:9f:61:06:5c:82:3a:f8: bf:1b:51:80:4c:15:23:c5:fe:47:07:95:a3:15:43: 50:09:45:22:02:78:45:11:7c:bb:e8:fc:7f:2c:e4: 99:a1:2c:88:17:7e:cd:34:a2:7f:06:a8:0b:de:4b: 1d:50:61:fa:e5:0c:1f:da:48:44:fa:a5:a3:5d:4e: b6:e6:86:01:f7:85:fa:3a:61:c2:74:4e:68:82:94: 5c:f2:40:e4:bf:55:65:bb:b4:1b:97:24:7a:9f:ab: c8:1d:73:4f:ce:6e:df:cb:b3:1a:0b:8c:3f:2f:99: 2f:be:a4:e0:4b:43:98:8c:84:c4:1a:78:5c:82:0d: d4:e0:fb:e7:d7:91:c3:19:9f:dc:1f:ef:8d:32:6a: 2b:33:49:14:b8:a5:e5:67:8f:9f:d6:2d:a0:62:0c: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:2A:4E:1C:FF:90:06:62:03:7E:C4:A1:07:E9:D3:AA:31:36:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:11:38:55:58:2e:f5:7c:5e:de:f1:f3:cd:80:61:0f:3d:2c: 33:b0:2e:a1:61:e9:11:8d:65:d3:6a:1a:1d:3f:3f:5b:c7:57: 40:a7:9f:f5:67:ea:17:ab:ab:66:9a:1f:70:e3:21:ed:7e:af: 23:51:64:33:dc:d1:57:2a:f1:7f:ab:37:d9:3e:40:9c:e3:62: 1d:a8:ed:89:51:97:47:0c:b0:46:6c:f8:e7:4c:64:e5:b6:3c: 5a:ac:d3:3d:63:bf:ec:fa:c2:cc:85:12:e9:d5:17:f7:b4:42: 74:3d:44:c7:8f:22:da:cf:32:59:56:e5:db:87:61:5d:f6:b6: e7:da:a4:51:ff:e2:f6:37:1e:7b:d2:e6:1a:a9:9d:a7:7d:24: 96:51:aa:13:32:67:69:b9:82:4f:07:84:a8:bd:da:6f:e6:9a: 3c:0b:0a:80:48:d7:55:d4:fa:a2:62:88:e9:19:ab:c7:bf:c6: fd:4b:15:41:52:3b:93:16:90:64:97:b3:60:79:3b:9d:50:cd: a0:c9:b2:b6:8e:37:f8:99:ef:ea:92:d4:99:e9:8e:b2:1e:f4: 7f:fc:e6:30:b2:4d:c7:71:97:cd:86:66:cc:de:f9:be:08:51: 04:d2:19:91:e5:ba:47:32:65:c9:08:61:5b:56:d2:59:ac:2c: b0:33:18:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZUBFcT5JZv/BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjFkNWE3MmQtMWJiOC00ZjhjLTk1OGUtYzI0ZDNhNWJmNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytSr2YTFKZh7570mvZiYIvIXy1AD1FmAMyib f6yMeCk2Xm7iDmwe5G77eQ+TfoDLOQJKVkwGzuDIrj+sYotGK5R1ZkdPiLso2YNC BbuNTIxd/3DI+Bs3/t3kN9Fh7mx4Ep9hBlyCOvi/G1GATBUjxf5HB5WjFUNQCUUi AnhFEXy76Px/LOSZoSyIF37NNKJ/BqgL3ksdUGH65Qwf2khE+qWjXU625oYB94X6 OmHCdE5ogpRc8kDkv1Vlu7QblyR6n6vIHXNPzm7fy7MaC4w/L5kvvqTgS0OYjITE Gnhcgg3U4Pvn15HDGZ/cH++NMmorM0kUuKXlZ4+f1i2gYgyIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8+Kk4c/5AGYgN+xKEH6dOqMTZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRmYWZjNzYtYTBlNC0z NzYwLWFmNmQtNDRmMjk2NmI0NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQza8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcROFVYLvV8Xt7x882AYQ89LDOwLqFh6RGNZdNqGh0/P1vHV0Cnn/Vn 6herq2aaH3DjIe1+ryNRZDPc0Vcq8X+rN9k+QJzjYh2o7YlRl0cMsEZs+OdMZOW2 PFqs0z1jv+z6wsyFEunVF/e0QnQ9RMePItrPMllW5duHYV32tufapFH/4vY3HnvS 5hqpnad9JJZRqhMyZ2m5gk8HhKi92m/mmjwLCoBI11XU+qJiiOkZq8e/xv1LFUFS O5MWkGSXs2B5O51QzaDJsraON/iZ7+qS1JnpjrIe9H/85jCyTcdxl82GZsze+b4I UQTSGZHlukcyZckIYVtW0lmsLLAzGE8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:34 2025 by rpki-client