$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa File: c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa (raw, json) Hash identifier: 5G6RSPHK7tp/X/L6s7biit3MUGeZdEIm9Cmwtvrkwhg= Subject key identifier: 57:72:D2:8D:CC:DA:FF:2E:69:FC:82:EE:D9:5F:95:B4:8C:6A:E4:7E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581948948AF21A6EA19D580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:94:89:48:af:21:a6:ea:19:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=91bc53d7-a3ac-4a9c-9f88-a381af59d15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:fe:26:13:c5:14:ea:f7:7a:f7:24:67:5c: c6:c2:15:9e:2f:06:c9:bf:c1:77:74:c9:bd:90:df: b0:85:e6:84:71:58:6d:d8:9e:89:45:ce:38:16:3e: ad:38:f1:c8:79:81:f2:7b:a4:b5:4e:f5:03:25:c8: a4:cc:74:b1:f7:18:4d:3d:31:d7:64:98:95:85:6b: c4:97:a0:c6:e0:ae:e1:0c:e3:4c:11:50:05:8c:46: 30:09:18:fe:4d:bb:a5:22:fe:a3:ff:22:0e:da:e0: 3b:8c:51:e9:4c:a8:4c:40:98:86:9c:b9:4e:21:90: 38:33:f0:8b:9f:9f:dc:05:61:f8:0a:91:2c:c5:20: 21:67:ad:d0:57:9b:7e:e9:98:52:f7:71:12:44:1e: 8a:70:f7:51:39:c6:3a:de:67:9a:36:71:d1:b5:2f: 15:fb:93:fa:fa:b1:65:03:86:0d:84:ce:9f:e9:a2: e4:b7:0e:4a:93:a3:05:47:cb:1d:3a:da:09:19:52: 96:63:10:24:ca:d3:b2:da:5f:b2:5c:28:a3:d0:5b: 38:1e:dd:d5:7e:4b:8c:36:a4:0e:6c:37:8b:b8:ef: 45:1a:31:e2:54:ca:ed:c0:90:69:d8:0e:83:50:39: 1e:45:9b:b0:21:bf:58:7f:48:31:30:62:4b:b8:fc: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:72:D2:8D:CC:DA:FF:2E:69:FC:82:EE:D9:5F:95:B4:8C:6A:E4:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7e:4b:7e:78:13:1e:d3:7e:45:f3:4d:f5:23:46:d5:cd:32: c0:53:c6:b7:92:14:19:9b:ef:8d:22:88:9b:a3:bf:04:74:7c: bf:b8:0b:b8:0b:95:7e:6d:93:3b:ee:0c:b1:c0:8f:c1:14:e4: d4:a1:88:95:45:0f:ce:9d:1e:68:63:2d:47:e4:e7:b1:f9:f1: 0d:40:a3:eb:a7:96:f4:c1:8f:01:e3:1b:1e:f3:22:2d:38:d0: 5e:1d:a5:f6:5e:56:c8:a2:cc:60:4a:3a:3f:fb:b3:6f:d0:82: 5b:3c:83:5e:db:c5:df:9e:88:ce:6d:0b:d3:b3:bf:1f:f3:8d: 29:ca:93:b0:f7:38:66:d1:4d:2d:a3:49:8c:08:c1:c1:3b:0f: 29:87:53:fa:39:2e:f1:ac:67:9e:62:94:ed:4c:fb:a2:4b:f9: be:ec:c7:39:76:1e:ab:5f:fd:c4:9a:20:26:9a:5c:eb:21:87: 0e:f5:59:ba:e3:5f:82:b1:6e:b7:8f:43:1e:30:10:99:e9:d5: 77:79:fb:6f:30:a6:e0:9f:fc:95:d1:07:89:d7:7e:c9:cc:d5: e0:97:b4:57:63:dc:45:79:8f:8c:7d:0e:d1:d1:c0:75:34:e2: 14:52:6f:31:15:25:f5:6c:01:06:13:3f:da:ed:a3:fa:e4:f0: 85:5d:ab:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZSJSK8hpuoZ1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTFiYzUzZDctYTNhYy00YTljLTlmODgtYTM4MWFmNTlkMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSX+JhPFFOr3evckZ1zGwhWeLwbJv8F3dMm9 kN+wheaEcVht2J6JRc44Fj6tOPHIeYHye6S1TvUDJcikzHSx9xhNPTHXZJiVhWvE l6DG4K7hDONMEVAFjEYwCRj+TbulIv6j/yIO2uA7jFHpTKhMQJiGnLlOIZA4M/CL n5/cBWH4CpEsxSAhZ63QV5t+6ZhS93ESRB6KcPdROcY63meaNnHRtS8V+5P6+rFl A4YNhM6f6aLktw5Kk6MFR8sdOtoJGVKWYxAkytOy2l+yXCij0Fs4Ht3VfkuMNqQO bDeLuO9FGjHiVMrtwJBp2A6DUDkeRZuwIb9Yf0gxMGJLuPwHhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdy0o3M2v8uafyC7tlflbSMauR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZjNjE1ZTUtMWIxNC0z ZDdjLTg2YzEtMmMwZDIwZTk3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN+S354Ex7TfkXzTfUjRtXNMsBTxreSFBmb740iiJujvwR0fL+4C7gL lX5tkzvuDLHAj8EU5NShiJVFD86dHmhjLUfk57H58Q1Ao+unlvTBjwHjGx7zIi04 0F4dpfZeVsiizGBKOj/7s2/Qgls8g17bxd+eiM5tC9Ozvx/zjSnKk7D3OGbRTS2j SYwIwcE7DymHU/o5LvGsZ55ilO1M+6JL+b7sxzl2Hqtf/cSaICaaXOshhw71Wbrj X4KxbrePQx4wEJnp1Xd5+28wpuCf/JXRB4nXfsnM1eCXtFdj3EV5j4x9DtHRwHU0 4hRSbzEVJfVsAQYTP9rto/rk8IVdq2g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:31 2025 by rpki-client