$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa File: b995e288-53e8-3b22-b9c9-4d8646d3c448.roa (raw, json) Hash identifier: aasznwGQtTEim6780cl1omLPbhh+YovtcLMz8EW5nno= Subject key identifier: D1:54:65:FA:90:D6:88:A2:4E:B0:26:EE:90:24:DD:18:29:91:AE:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581BB98DE41453B07197580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.107.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:bb:98:de:41:45:3b:07:19:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a7b4c7f0-1b0c-4758-a6d8-3ea0bcbe4a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:b0:8d:e2:a7:45:ec:ce:bd:b0:26:62:fe: 6e:11:a3:d1:32:0d:e1:9e:8f:bf:81:dc:5e:2d:b9: 59:4c:9c:8b:31:ab:f0:6e:3a:71:ab:0a:97:fc:0f: 3b:16:00:e3:fc:9f:3c:6f:7d:e2:32:38:fc:57:5f: 00:62:57:ff:c8:aa:30:7a:43:91:10:4d:e4:79:c9: b7:00:6b:06:9b:39:b6:8d:57:42:f0:c4:c8:eb:18: f4:9a:85:3f:ff:13:e2:13:5f:6c:fe:a5:4f:0a:ae: 46:e6:f6:c8:86:92:45:07:44:88:80:ae:7f:f7:90: c2:98:d0:88:70:eb:1b:27:46:2c:3e:36:7c:cb:96: fe:f4:9f:a6:8d:11:77:f4:fe:5a:f2:30:97:14:c0: 06:cd:a2:e2:aa:de:71:7c:d9:f7:3e:cd:aa:29:e1: 2a:da:b3:07:ee:f4:68:c3:d4:85:2c:e4:f0:a7:67: b2:37:3a:c6:b7:b9:53:bf:33:ea:a6:f0:d5:d3:7b: 88:f0:9f:39:bc:07:8d:ff:d8:7a:ff:69:ef:c1:75: 24:27:97:b6:e9:9f:28:71:02:78:56:ac:1a:fb:c9: 03:2c:28:e1:3a:33:03:48:37:53:23:01:c7:8f:79: 1a:00:35:f8:fe:54:ca:f7:04:fc:f5:2b:de:17:c9: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:65:FA:90:D6:88:A2:4E:B0:26:EE:90:24:DD:18:29:91:AE:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6c:20:af:bc:1c:19:dd:c3:00:46:c1:c6:96:db:d7:05:ff: 05:c1:fd:6f:31:7c:4f:a5:d8:0a:54:10:85:aa:bc:48:73:72: 57:76:c8:97:01:5e:da:05:ef:ef:fb:70:7c:84:6f:f6:7f:ab: 27:3b:ba:f4:3f:ee:fe:a4:af:9b:ec:d3:5f:7e:76:32:bd:ea: 12:53:f7:d0:b8:65:85:56:89:1f:31:d6:17:5d:95:9d:2b:ab: 4e:fa:10:4e:85:3d:38:ce:78:b2:29:6e:ad:e8:09:26:c5:4c: ca:77:53:61:8c:bf:6a:1a:bd:06:8d:d3:b1:8c:b2:39:ed:41: 00:21:6f:06:a9:98:c8:70:93:5c:86:be:7d:cc:2a:86:0f:27: 08:41:1a:24:89:70:76:e7:32:da:a1:91:45:9b:83:96:5d:69: 35:f4:68:93:30:49:4a:2f:39:ac:55:70:37:54:45:40:56:12: 72:3e:c4:c7:f1:0d:d7:5d:f4:b5:38:0b:14:44:12:ef:fa:8d: ab:33:21:f9:e1:6b:c7:0f:f4:7f:7e:7b:dc:a7:4f:f4:6d:22: 11:55:f9:97:83:91:e6:ae:4f:72:5e:92:2d:0d:0e:aa:98:0e: b6:07:ce:9b:52:87:89:77:af:15:de:28:1e:61:a3:38:dc:ef: 13:bd:85:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgbuY3kFFOwcZdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTdiNGM3ZjAtMWIwYy00NzU4LWE2ZDgtM2VhMGJjYmU0YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoECwjeKnRezOvbAmYv5uEaPRMg3hno+/gdxe LblZTJyLMavwbjpxqwqX/A87FgDj/J88b33iMjj8V18AYlf/yKowekOREE3kecm3 AGsGmzm2jVdC8MTI6xj0moU//xPiE19s/qVPCq5G5vbIhpJFB0SIgK5/95DCmNCI cOsbJ0YsPjZ8y5b+9J+mjRF39P5a8jCXFMAGzaLiqt5xfNn3Ps2qKeEq2rMH7vRo w9SFLOTwp2eyNzrGt7lTvzPqpvDV03uI8J85vAeN/9h6/2nvwXUkJ5e26Z8ocQJ4 Vqwa+8kDLCjhOjMDSDdTIwHHj3kaADX4/lTK9wT89SveF8mImwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFUZfqQ1oiiTrAm7pAk3Rgpka4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk5NWUyODgtNTNlOC0z YjIyLWI5YzktNGQ4NjQ2ZDNjNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNsIK+8HBndwwBGwcaW29cF/wXB/W8xfE+l2ApUEIWqvEhzcld2yJcB XtoF7+/7cHyEb/Z/qyc7uvQ/7v6kr5vs019+djK96hJT99C4ZYVWiR8x1hddlZ0r q076EE6FPTjOeLIpbq3oCSbFTMp3U2GMv2oavQaN07GMsjntQQAhbwapmMhwk1yG vn3MKoYPJwhBGiSJcHbnMtqhkUWbg5ZdaTX0aJMwSUovOaxVcDdURUBWEnI+xMfx Dddd9LU4CxREEu/6jaszIfnha8cP9H9+e9ynT/RtIhFV+ZeDkeauT3Jeki0NDqqY DrYHzptSh4l3rxXeKB5hozjc7xO9heU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:13 2025 by rpki-client