$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20d8e46-37fe-3577-808b-ada5d14f1e19.roa File: d20d8e46-37fe-3577-808b-ada5d14f1e19.roa (raw, json) Hash identifier: /EJ2NUjFq8RvoQcOt4Il+LZEilu4jNvXyzfJ4V//844= Subject key identifier: C0:C5:F0:92:F7:74:FB:DC:98:91:71:8E:43:C8:59:1D:CE:6D:64:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58195B02FB8A3BD54F1AC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20d8e46-37fe-3577-808b-ada5d14f1e19.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:95:b0:2f:b8:a3:bd:54:f1:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=36c2e763-78b1-4986-bd90-123d83fc558c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:9c:46:98:bd:90:e0:76:df:35:ad:d8:2e: 42:e0:d1:27:a8:e6:f3:1b:1d:a7:66:a1:04:7b:16: 85:a6:cc:de:15:27:23:8a:ab:19:cc:91:1d:f0:d9: 21:c2:c8:40:eb:ff:90:80:8d:fd:ad:8c:21:a2:99: f6:0e:fc:e1:b8:9a:a6:8b:75:56:91:d6:64:e5:5f: c5:a7:81:97:b9:cd:8f:6f:da:14:03:e9:f6:6c:d5: e9:03:73:25:a2:27:b7:a9:68:dd:60:b4:86:83:75: 70:11:f1:61:63:d7:1d:e2:fb:10:3b:c5:96:7b:24: 27:5f:b2:ea:8a:a1:e0:a8:08:d1:2f:36:a9:ed:08: c8:aa:7d:4f:23:4f:5e:9f:3e:fb:f3:55:1d:7a:36: ef:db:4b:0a:90:4e:9b:aa:ee:f2:63:91:13:ad:31: 12:d2:ec:11:e7:ab:d7:9d:c7:06:a2:8b:0f:44:92: f3:58:33:03:aa:1b:09:f6:4f:3e:59:27:85:1c:36: b7:63:84:5c:e5:11:6d:6a:94:79:ba:53:81:2d:35: 6a:ab:e2:4f:69:77:f0:e4:40:67:68:6a:c3:0e:41: b6:8a:e3:3b:fe:31:4e:bc:47:d1:dd:46:df:30:71: 87:e9:f3:0a:57:43:83:42:bc:ab:51:33:d1:b6:34: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C5:F0:92:F7:74:FB:DC:98:91:71:8E:43:C8:59:1D:CE:6D:64:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20d8e46-37fe-3577-808b-ada5d14f1e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:06:d8:41:ad:11:cc:b2:b8:0c:c6:08:84:a7:d2:3b:1d:47: f2:26:c1:6d:76:9c:53:91:bb:65:fe:22:00:35:bc:3e:22:03: d2:e4:f2:0c:d6:55:fd:d8:99:6e:72:32:f7:6f:3d:88:9a:aa: b8:9f:68:b8:4d:54:97:91:ed:20:ed:90:71:eb:68:c0:70:f6: 55:ed:44:b8:e4:25:98:ba:bf:a1:0d:98:c1:6e:2f:48:83:b6: 16:a4:d3:97:18:e3:86:11:ba:8f:1d:ea:35:5e:e3:76:4e:15: 56:ad:b4:a3:1f:8e:b3:a1:a5:72:2f:78:1a:5a:f8:98:78:e2: c6:97:5d:3d:b4:bb:8b:a6:a4:5a:c3:7f:4f:9e:ad:35:d7:e2: 32:6b:ed:72:ea:c8:62:fc:be:ea:52:79:e7:30:79:b2:48:fd: a5:2c:92:72:28:04:16:e7:47:b1:97:84:3d:3b:18:37:90:74: c2:46:a0:15:77:c7:8c:54:a8:7c:5b:30:f0:61:77:d7:63:f6: 37:53:80:e9:0d:3c:99:35:c8:36:8a:d7:3e:a7:e7:d6:15:d7: b3:6b:69:13:59:05:22:13:9b:d6:79:d5:6f:34:d0:cd:19:6a: 22:53:5e:a9:be:d9:ce:4e:36:4e:12:bd:05:6b:1f:1e:29:eb: 01:89:85:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZWwL7ijvVTxrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzZjMmU3NjMtNzhiMS00OTg2LWJkOTAtMTIzZDgzZmM1NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFWcRpi9kOB23zWt2C5C4NEnqObzGx2nZqEE exaFpszeFScjiqsZzJEd8NkhwshA6/+QgI39rYwhopn2DvzhuJqmi3VWkdZk5V/F p4GXuc2Pb9oUA+n2bNXpA3Mloie3qWjdYLSGg3VwEfFhY9cd4vsQO8WWeyQnX7Lq iqHgqAjRLzap7QjIqn1PI09enz7781Udejbv20sKkE6bqu7yY5ETrTES0uwR56vX nccGoosPRJLzWDMDqhsJ9k8+WSeFHDa3Y4Rc5RFtapR5ulOBLTVqq+JPaXfw5EBn aGrDDkG2iuM7/jFOvEfR3UbfMHGH6fMKV0ODQryrUTPRtjQ3qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDF8JL3dPvcmJFxjkPIWR3ObWT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDIwZDhlNDYtMzdmZS0z NTc3LTgwOGItYWRhNWQxNGYxZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzblMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8G2EGtEcyyuAzGCISn0jsdR/ImwW12nFORu2X+IgA1vD4iA9Lk8gzW Vf3YmW5yMvdvPYiaqrifaLhNVJeR7SDtkHHraMBw9lXtRLjkJZi6v6ENmMFuL0iD thak05cY44YRuo8d6jVe43ZOFVattKMfjrOhpXIveBpa+Jh44saXXT20u4umpFrD f0+erTXX4jJr7XLqyGL8vupSeecwebJI/aUsknIoBBbnR7GXhD07GDeQdMJGoBV3 x4xUqHxbMPBhd9dj9jdTgOkNPJk1yDaK1z6n59YV17NraRNZBSITm9Z51W800M0Z aiJTXqm+2c5ONk4SvQVrHx4p6wGJhYs= -----END CERTIFICATE-----Generated at Sat Apr 12 00:00:04 2025 by rpki-client