$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc509693-da92-331d-9da7-5357b2d9a5d0.roa File: dc509693-da92-331d-9da7-5357b2d9a5d0.roa (raw, json) Hash identifier: yba4MlCQ4dhilUsNC/0HMel7JRyKYqDklIzbzVIEKlo= Subject key identifier: A9:CA:0D:7D:3E:FA:3F:41:E7:55:20:FE:E8:A6:ED:73:DF:47:B2:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819635028048A5F8D8F200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc509693-da92-331d-9da7-5357b2d9a5d0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:96:35:02:80:48:a5:f8:d8:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2342ae14-4742-42c6-a77b-c699220cc691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:9d:01:d7:83:1c:2d:24:75:de:92:00:88: f6:31:98:a1:88:40:44:cf:4a:67:9f:4d:10:3b:f7: e6:38:47:d7:12:8b:4f:07:5e:89:2f:fe:6f:ec:54: cb:75:0d:ef:ed:00:fc:d4:8c:14:76:92:bd:87:ea: 0e:74:07:ca:d6:91:48:8d:bd:f9:3d:cf:d0:e9:db: 40:48:b9:4a:25:1b:77:be:68:dd:9c:3a:d4:fa:fb: 44:d8:72:25:ee:84:3b:ac:92:46:92:29:ba:59:f5: 3e:72:1f:1c:88:ed:73:43:17:39:b6:9b:87:ad:4b: a4:6e:f1:c2:be:b9:f7:fc:a2:a3:93:9c:01:3f:81: 10:91:9e:6d:c0:a6:eb:de:90:49:f5:62:d4:16:ea: 54:0d:43:2f:0e:db:f7:7f:15:5a:cb:86:d4:86:07: 72:8e:18:e0:b6:32:ab:83:71:49:17:cc:69:c4:ad: cc:44:bb:a8:ec:9c:86:9e:24:09:3c:f2:6d:01:04: 1c:a6:bd:bc:41:00:c1:c1:69:e2:aa:c4:1e:82:d4: 4d:45:84:50:10:81:fd:da:a5:50:1e:ef:ab:10:74: 23:f9:68:c0:13:32:c6:28:33:c1:85:19:ec:9d:64: ca:75:c1:7c:6b:48:b4:22:8f:aa:13:7f:0c:3c:f1: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CA:0D:7D:3E:FA:3F:41:E7:55:20:FE:E8:A6:ED:73:DF:47:B2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc509693-da92-331d-9da7-5357b2d9a5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:70:e5:4a:ba:eb:37:7a:0a:ef:8e:ed:89:04:be:27:10: 8e:fd:c1:3d:67:8a:8e:05:05:4d:66:cf:f8:77:82:5c:63:49: bd:f7:de:77:53:09:90:9f:30:e6:51:a7:a6:14:c8:db:5a:a3: dc:7b:ec:55:4b:e8:dc:40:6c:a3:10:95:23:74:1e:0c:6c:e6: 6a:b2:8a:1d:48:69:a3:60:0f:7d:9c:10:31:e0:d1:f9:dc:70: 3d:b6:5f:a9:ed:af:a5:52:40:77:47:79:ed:e8:da:44:f3:3a: 27:cf:d1:26:89:aa:10:6a:f4:e3:38:67:65:86:fb:52:a4:a1: 6b:3b:d3:d4:ac:e4:be:4c:28:99:d5:82:cd:7b:4d:c7:e7:56: 32:2e:4e:4e:64:ab:0f:cd:fc:c1:74:68:ba:dd:94:64:03:28: 8b:d9:88:b5:d3:0b:e7:80:b8:de:7c:18:e0:f6:2f:25:30:29: 5f:2d:48:3b:a2:dc:0c:39:fd:a1:00:4e:fd:24:67:56:63:9f: 70:4a:da:ed:b8:5d:de:14:ae:86:91:48:25:2c:09:f3:99:dc: 22:33:ae:c5:cb:64:40:e0:00:15:2c:c2:24:6a:25:d1:80:77: 82:b7:df:42:c9:e6:1c:f9:80:4c:6f:57:41:13:67:44:41:fd: 10:ac:0f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZY1AoBIpfjY8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjM0MmFlMTQtNDc0Mi00MmM2LWE3N2ItYzY5OTIyMGNjNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8GdAdeDHC0kdd6SAIj2MZihiEBEz0pnn00Q O/fmOEfXEotPB16JL/5v7FTLdQ3v7QD81IwUdpK9h+oOdAfK1pFIjb35Pc/Q6dtA SLlKJRt3vmjdnDrU+vtE2HIl7oQ7rJJGkim6WfU+ch8ciO1zQxc5tpuHrUukbvHC vrn3/KKjk5wBP4EQkZ5twKbr3pBJ9WLUFupUDUMvDtv3fxVay4bUhgdyjhjgtjKr g3FJF8xpxK3MRLuo7JyGniQJPPJtAQQcpr28QQDBwWniqsQegtRNRYRQEIH92qVQ Hu+rEHQj+WjAEzLGKDPBhRnsnWTKdcF8a0i0Io+qE38MPPFExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnKDX0++j9B51Ug/uim7XPfR7KQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGM1MDk2OTMtZGE5Mi0z MzFkLTlkYTctNTM1N2IyZDlhNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWMcOVKuus3egrvju2JBL4nEI79wT1nio4FBU1mz/h3glxjSb333ndT CZCfMOZRp6YUyNtao9x77FVL6NxAbKMQlSN0Hgxs5mqyih1IaaNgD32cEDHg0fnc cD22X6ntr6VSQHdHee3o2kTzOifP0SaJqhBq9OM4Z2WG+1KkoWs709Ss5L5MKJnV gs17TcfnVjIuTk5kqw/N/MF0aLrdlGQDKIvZiLXTC+eAuN58GOD2LyUwKV8tSDui 3Aw5/aEATv0kZ1Zjn3BK2u24Xd4UroaRSCUsCfOZ3CIzrsXLZEDgABUswiRqJdGA d4K330LJ5hz5gExvV0ETZ0RB/RCsD8Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:38 2025 by rpki-client