$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e72b47c-f99b-370d-92e1-4e42db4b610b.roa File: 8e72b47c-f99b-370d-92e1-4e42db4b610b.roa (raw, json) Hash identifier: G7nYesJJU5pFVTRuBumpjN1t0QJpbAsKHT8dfj6m+Eo= Subject key identifier: CF:90:ED:63:0F:5E:68:D3:A9:6F:0F:C1:0C:72:F2:37:07:FC:65:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5812B4ADDD98EDD6CAEA700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e72b47c-f99b-370d-92e1-4e42db4b610b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.107.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:2b:4a:dd:d9:8e:dd:6c:ae:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2c1df548-3cdf-4a97-8eb0-45a59b5f8f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:50:69:5b:87:8e:9b:64:75:6f:07:82:1a: db:74:f7:b2:d6:d6:f3:4e:cd:00:d3:15:ce:22:0d: 41:2f:0b:d2:3b:be:f7:59:ec:7b:74:f8:dd:1c:17: ca:fe:c5:80:e9:a2:e8:af:60:0b:e7:44:99:85:62: 3c:42:57:a1:e5:8e:6d:f6:a2:de:5c:92:91:da:85: 48:38:39:50:2f:ba:4a:7e:48:70:82:17:28:fd:e6: 7e:bf:67:01:b1:5a:9b:4c:c6:a4:ee:89:4d:2e:c7: 6a:66:2b:24:17:7a:76:70:2b:bb:4a:2a:7e:45:b2: 9e:d5:2b:bd:99:92:37:94:1e:5c:80:51:8b:85:45: 14:61:55:fa:8a:77:ed:43:8f:e0:76:39:74:16:a1: 5c:2c:dd:d1:ae:08:20:49:99:6f:42:a8:ef:e3:f9: 3d:d6:37:a4:48:b6:f6:02:1e:8a:3d:83:f3:1a:c4: ee:62:0d:30:d2:07:04:04:65:1f:9f:cf:01:3f:ad: 4a:f9:9d:79:66:e7:85:e1:53:c3:8a:55:f9:6b:a1: 60:86:ca:88:f8:a1:77:9b:52:06:4e:04:cb:4e:ed: 84:8f:e3:71:3c:3a:37:7b:25:2c:b4:8b:8e:89:49: 66:56:08:27:0b:c9:2c:97:44:f7:c4:7a:e5:5d:21: 85:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:90:ED:63:0F:5E:68:D3:A9:6F:0F:C1:0C:72:F2:37:07:FC:65:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e72b47c-f99b-370d-92e1-4e42db4b610b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6b:a9:28:c7:f5:1a:61:1f:40:dd:53:b0:d7:d9:ee:cc:b5: 36:4b:65:d8:40:39:f3:27:26:64:80:e3:b4:bd:56:4b:0f:52: cd:bd:03:f8:28:40:13:74:10:95:f4:f1:65:c1:9f:da:de:76: db:13:83:0e:5e:6c:7a:71:e2:d6:8f:2e:1b:79:b7:c5:aa:8c: ca:86:70:ea:8d:67:bb:4f:a9:87:29:9f:08:ac:89:12:d3:ca: 87:14:ca:9d:81:bb:dd:26:0c:34:fb:41:e9:2a:68:43:fb:63: 32:ad:62:f5:d3:94:a0:ee:83:ef:41:0a:ad:aa:6e:cc:cb:17: 40:db:ca:51:b2:de:cf:09:0a:c3:fc:f1:03:e8:17:e1:fe:4a: 8a:14:a4:d5:45:15:84:16:3b:9d:fd:cb:58:b3:f2:61:fb:7d: 95:b2:91:d3:a8:de:2b:19:f3:25:90:53:9b:64:da:24:f8:92: 9a:8a:5c:e0:a4:60:62:7a:a8:20:6d:c9:ec:1a:b1:60:27:97: 93:da:00:54:5a:75:0a:4e:30:5d:c4:32:ba:d7:db:ee:da:77: 2b:04:23:54:0b:39:15:06:5e:34:83:0c:de:0d:c8:71:1a:8b: b5:81:d4:e0:b8:e9:2e:bb:38:71:c8:74:cc:52:fc:0f:52:28: 92:a1:1e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgStK3dmO3WyupwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmMxZGY1NDgtM2NkZi00YTk3LThlYjAtNDVhNTliNWY4ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV9QaVuHjptkdW8HghrbdPey1tbzTs0A0xXO Ig1BLwvSO773Wex7dPjdHBfK/sWA6aLor2AL50SZhWI8Qleh5Y5t9qLeXJKR2oVI ODlQL7pKfkhwghco/eZ+v2cBsVqbTMak7olNLsdqZiskF3p2cCu7Sip+RbKe1Su9 mZI3lB5cgFGLhUUUYVX6inftQ4/gdjl0FqFcLN3RrgggSZlvQqjv4/k91jekSLb2 Ah6KPYPzGsTuYg0w0gcEBGUfn88BP61K+Z15ZueF4VPDilX5a6FghsqI+KF3m1IG TgTLTu2Ej+NxPDo3eyUstIuOiUlmVggnC8ksl0T3xHrlXSGFZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Q7WMPXmjTqW8PwQxy8jcH/GXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGU3MmI0N2MtZjk5Yi0z NzBkLTkyZTEtNGU0MmRiNGI2MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2tEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxrqSjH9RphH0DdU7DX2e7MtTZLZdhAOfMnJmSA47S9VksPUs29A/go QBN0EJX08WXBn9redtsTgw5ebHpx4taPLht5t8WqjMqGcOqNZ7tPqYcpnwisiRLT yocUyp2Bu90mDDT7QekqaEP7YzKtYvXTlKDug+9BCq2qbszLF0DbylGy3s8JCsP8 8QPoF+H+SooUpNVFFYQWO539y1iz8mH7fZWykdOo3isZ8yWQU5tk2iT4kpqKXOCk YGJ6qCBtyewasWAnl5PaAFRadQpOMF3EMrrX2+7adysEI1QLORUGXjSDDN4NyHEa i7WB1OC46S67OHHIdMxS/A9SKJKhHuU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:01 2025 by rpki-client