$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa File: 8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa (raw, json) Hash identifier: gyqvWvlpH5C2uNIPaViAm6q2JltjiOJ9cPj/j+K7JZM= Subject key identifier: D5:F5:29:DB:EF:E0:F3:24:D9:FB:8C:AD:8A:F8:3B:BD:B2:E2:38:2B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819466903563D4411316C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:94:66:90:35:63:d4:41:13:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=028f1f37-5465-4e52-bd82-d6416a0e9f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:ad:64:db:8f:c2:32:b2:d2:96:aa:68:9b: 26:f3:dc:d7:9b:38:79:5b:02:1a:a1:42:24:3e:41: 99:93:67:bd:d0:0e:17:f7:a0:d4:8f:f0:3c:0b:3f: 49:bd:9d:1d:de:a9:e3:2f:bd:e6:83:93:6c:a7:ca: 56:16:8e:9a:08:08:93:bf:df:e7:ef:f0:f1:87:eb: 29:f2:b3:9d:53:40:0f:02:f5:f8:c9:3a:d5:e7:d4: 15:8f:3c:2b:31:72:b0:11:48:1b:d0:5a:e0:bb:b1: 09:18:94:32:01:67:fd:8c:c9:34:07:5c:86:f8:5b: 16:8f:42:b7:da:b4:9e:0d:a8:9a:a3:6b:15:dc:4d: 58:ff:bd:25:77:7e:1b:6d:69:2c:5c:fc:65:b3:32: 53:87:c0:ff:1c:c8:a3:ca:12:e5:62:c9:cb:b9:06: a0:ba:e7:df:03:eb:3e:95:fc:55:45:db:16:30:b1: 73:2b:f9:e3:9f:bc:52:92:45:4b:f1:9c:be:4d:4f: 77:83:77:ca:9a:da:25:90:23:90:c6:db:61:60:5a: cd:84:25:7a:b1:dd:11:e5:8c:95:a2:ee:0d:e2:ea: 87:e3:6a:2b:a7:00:79:7a:10:5d:ad:e5:e4:47:f4: 0b:40:17:b9:94:8e:54:36:91:75:8a:a8:eb:9f:de: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F5:29:DB:EF:E0:F3:24:D9:FB:8C:AD:8A:F8:3B:BD:B2:E2:38:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d9:80:bf:e9:6c:e8:bf:57:d3:37:f6:06:09:8c:ce:55:cb: b6:5b:13:2d:df:18:c9:ba:45:68:b7:68:48:63:01:19:b7:b3: 5f:98:fd:50:34:c3:ce:cf:ac:a1:e4:a8:a8:4f:a6:1a:51:43: 91:53:a9:72:98:66:3f:6a:5c:fb:00:ba:fd:5a:17:d5:de:53: d5:c1:c6:02:27:a9:f6:7a:cc:6c:0a:b3:67:fc:71:7d:f0:69: 27:b5:a7:6f:2b:32:70:d2:1b:cf:1a:e8:1c:e8:8e:b9:10:a4: 1b:56:11:c2:83:7c:5a:4e:4c:4e:3f:63:fe:ad:56:1e:fd:34: 5f:a1:85:ff:5e:9a:73:63:e8:68:72:ea:87:e6:12:99:54:f3: 0e:fb:d8:e7:ba:45:d9:e7:2f:7f:ee:59:fe:6b:dc:1c:60:0b: ec:5b:fa:1e:74:9f:f0:d0:f5:c2:11:66:50:17:db:c6:9f:8d: 1c:4a:9e:72:bc:f3:a8:89:33:a7:06:1a:88:2e:06:72:78:bc: 95:97:a4:d5:bd:be:73:1f:d5:fc:0f:b3:f2:44:82:99:79:86: e2:cc:f1:e5:5f:71:5c:dd:30:20:db:55:ab:3d:99:cd:c4:c8: ab:fd:14:53:dd:fc:ed:ec:e1:8a:44:55:43:a9:ca:1f:b5:cd: e1:0c:f4:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZRmkDVj1EETFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDI4ZjFmMzctNTQ2NS00ZTUyLWJkODItZDY0MTZhMGU5ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ytZNuPwjKy0paqaJsm89zXmzh5WwIaoUIk PkGZk2e90A4X96DUj/A8Cz9JvZ0d3qnjL73mg5Nsp8pWFo6aCAiTv9/n7/Dxh+sp 8rOdU0APAvX4yTrV59QVjzwrMXKwEUgb0Frgu7EJGJQyAWf9jMk0B1yG+FsWj0K3 2rSeDaiao2sV3E1Y/70ld34bbWksXPxlszJTh8D/HMijyhLlYsnLuQaguuffA+s+ lfxVRdsWMLFzK/njn7xSkkVL8Zy+TU93g3fKmtolkCOQxtthYFrNhCV6sd0R5YyV ou4N4uqH42orpwB5ehBdreXkR/QLQBe5lI5UNpF1iqjrn94pUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX1Kdvv4PMk2fuMrYr4O72y4jgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYxN2Q4NjMtMmNlOC0z MWY1LWJhZTEtZTlmYTdkOGIzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7ZgL/pbOi/V9M39gYJjM5Vy7ZbEy3fGMm6RWi3aEhjARm3s1+Y/VA0 w87PrKHkqKhPphpRQ5FTqXKYZj9qXPsAuv1aF9XeU9XBxgInqfZ6zGwKs2f8cX3w aSe1p28rMnDSG88a6BzojrkQpBtWEcKDfFpOTE4/Y/6tVh79NF+hhf9emnNj6Ghy 6ofmEplU8w772Oe6RdnnL3/uWf5r3BxgC+xb+h50n/DQ9cIRZlAX28afjRxKnnK8 86iJM6cGGoguBnJ4vJWXpNW9vnMf1fwPs/JEgpl5huLM8eVfcVzdMCDbVas9mc3E yKv9FFPd/O3s4YpEVUOpyh+1zeEM9PA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:00 2025 by rpki-client