$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa File: d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa (raw, json) Hash identifier: bqtwZIVDsdGiVE8GywFvU/EftDs2p8DyhaNLhEKl/EI= Subject key identifier: 37:40:D1:8E:89:9D:55:49:81:F6:B8:97:55:E4:D5:69:71:8C:C1:0F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FD78546AE49C15A98880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fd:78:54:6a:e4:9c:15:a9:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=43739dc0-2557-477e-bef8-01de0966b848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:15:ef:81:33:4d:20:4f:e7:2c:d7:fd:78: f6:aa:11:f6:22:d3:89:76:bf:3f:c7:70:9e:bc:30: 33:81:8d:58:1b:fe:de:a6:81:cc:7a:27:b1:7f:b0: 71:a1:8e:51:1f:0f:f8:57:71:54:ab:d6:1f:ba:0c: 7f:9e:ed:9c:29:59:c1:e7:8a:25:3f:d8:2e:b1:e4: 7c:9e:90:33:a5:18:ee:b9:48:0e:72:a9:f1:88:57: 4e:d9:40:27:76:d8:d1:41:3f:03:50:1c:a7:80:12: e6:ab:19:67:2f:c7:dc:ea:4c:8b:a9:95:45:72:fa: ed:dd:11:be:2f:5b:2e:9d:9d:a1:4d:c0:1d:6d:da: 7b:2a:84:bf:6e:e7:22:62:e9:5f:37:6f:54:82:d8: 78:ec:6e:e3:54:35:63:c2:65:cb:4e:73:22:2a:2c: e0:f7:66:fd:84:e3:0f:58:d5:0f:c5:4d:23:8a:36: 0a:b4:32:07:51:eb:b0:71:0b:b4:a0:c2:f7:8d:f9: 4d:2e:19:a5:59:48:75:d3:36:33:47:27:31:40:d4: 3a:c4:19:4f:17:29:65:a1:b1:07:81:e2:2e:1b:db: 32:4c:5d:f2:48:8f:00:c7:e4:62:e4:a0:29:7f:51: 1f:08:e0:91:e8:7c:7a:e2:b0:b0:44:ad:d6:87:0f: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:D1:8E:89:9D:55:49:81:F6:B8:97:55:E4:D5:69:71:8C:C1:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cd:04:e5:fa:68:1d:26:8d:31:6c:48:4c:c1:1a:d4:d4:32: ba:fd:0d:2c:b0:b4:19:db:5b:41:ed:9c:61:28:ba:f7:fb:c0: 40:d9:eb:52:6b:06:f7:e8:32:03:9e:33:d0:db:ea:94:22:6b: d4:10:19:d0:cb:09:8b:f1:96:f1:f0:31:ea:4a:4b:88:e2:32: 75:af:4a:fa:8c:13:9a:18:0a:e4:a5:38:41:30:dc:cb:f0:54: 78:a6:5f:93:79:26:3d:3f:ff:45:64:b5:6d:73:4d:24:4d:cf: 80:9e:ee:44:ca:97:b4:83:4c:7d:f4:74:0a:50:3b:e1:4f:dc: 95:14:bc:e1:ff:7b:d7:45:0d:41:eb:cd:ab:8b:dd:b8:3e:28: b6:75:60:61:be:4c:be:dd:89:80:af:72:c9:50:a9:47:9e:29: 5f:85:a5:f0:32:3d:4d:32:1c:89:a1:42:61:e8:4f:63:3b:d2: a0:cc:2b:d7:12:79:7d:31:c7:a7:2a:7e:be:3c:76:b7:a0:30: a1:d3:14:94:18:6d:c4:3f:3c:73:d3:8b:c2:02:3f:fa:f6:03: 3c:e9:0e:9a:8f:12:e4:12:11:fa:42:7f:46:36:b7:cc:ff:57: 1d:0b:00:03:aa:e1:c9:3c:d0:14:f4:91:fe:8a:e6:cf:1b:7a: 20:6d:2d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgP14VGrknBWpiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDM3MzlkYzAtMjU1Ny00NzdlLWJlZjgtMDFkZTA5NjZiODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD8V74EzTSBP5yzX/Xj2qhH2ItOJdr8/x3Ce vDAzgY1YG/7epoHMeiexf7BxoY5RHw/4V3FUq9Yfugx/nu2cKVnB54olP9guseR8 npAzpRjuuUgOcqnxiFdO2UAndtjRQT8DUByngBLmqxlnL8fc6kyLqZVFcvrt3RG+ L1sunZ2hTcAdbdp7KoS/buciYulfN29Ugth47G7jVDVjwmXLTnMiKizg92b9hOMP WNUPxU0jijYKtDIHUeuwcQu0oML3jflNLhmlWUh10zYzRycxQNQ6xBlPFyllobEH geIuG9syTF3ySI8Ax+Ri5KApf1EfCOCR6Hx64rCwRK3Whw/abQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdA0Y6JnVVJgfa4l1Xk1WlxjMEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDMzYzI4YjUtNTgwOS0z ZGFkLWFmZjMtNWFlOGE1ZTc1ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvNBOX6aB0mjTFsSEzBGtTUMrr9DSywtBnbW0HtnGEouvf7wEDZ61Jr BvfoMgOeM9Db6pQia9QQGdDLCYvxlvHwMepKS4jiMnWvSvqME5oYCuSlOEEw3Mvw VHimX5N5Jj0//0VktW1zTSRNz4Ce7kTKl7SDTH30dApQO+FP3JUUvOH/e9dFDUHr zauL3bg+KLZ1YGG+TL7diYCvcslQqUeeKV+FpfAyPU0yHImhQmHoT2M70qDMK9cS eX0xx6cqfr48dregMKHTFJQYbcQ/PHPTi8ICP/r2AzzpDpqPEuQSEfpCf0Y2t8z/ Vx0LAAOq4ck80BT0kf6K5s8beiBtLTA= -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:34 2025 by rpki-client