$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc7de3cf-fd42-3c26-aeda-4d4f90eebd84.roa File: dc7de3cf-fd42-3c26-aeda-4d4f90eebd84.roa (raw, json) Hash identifier: nNW6UZG1sWOHEUS3OeDu8UIsj6GYRkTNhmYDfuGQ1vA= Subject key identifier: F6:BB:F3:CB:79:C2:52:D8:5B:06:D8:27:B0:0B:5C:10:E2:AF:25:FB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58129A7D31EA51135BE7700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc7de3cf-fd42-3c26-aeda-4d4f90eebd84.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.107.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:29:a7:d3:1e:a5:11:35:be:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c7e548cf-d07b-484e-bd5f-da6dd552bf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e2:17:e1:2e:f1:b4:2a:1a:9f:40:a5:e6:99: ac:a4:0a:cd:fd:18:09:f3:14:23:ae:eb:8a:32:59: 15:c0:69:a6:4c:cc:3b:cf:78:40:a1:e9:51:80:85: b4:c8:df:9f:80:9b:19:55:fa:6a:59:52:6c:fb:1e: e4:23:0e:78:2a:0b:19:12:fe:83:c4:78:f4:48:dc: 3c:b8:bb:a7:d5:b6:94:63:ec:ec:6d:d2:bc:25:75: 47:e8:38:c3:88:db:87:95:e9:54:ae:11:0e:d2:b6: 5e:86:f4:90:bb:d4:2e:aa:86:fd:ec:1b:7c:6f:c9: f0:fe:55:ee:7d:ba:07:30:9b:24:7b:cf:04:a1:c7: dc:3b:80:6f:04:b0:a6:e7:04:47:75:10:72:7e:11: 8e:78:5d:51:ee:3b:26:ec:21:26:ca:9a:51:5a:e1: 8c:d2:48:88:d6:90:25:e9:a9:99:17:f3:f4:dd:2a: 82:10:ec:e1:eb:3f:2a:8c:6d:73:3c:25:b5:a7:96: 12:58:c2:36:9c:d6:b9:df:ea:2b:f3:59:42:4d:2c: 27:e4:2d:db:18:3d:80:9f:8e:fc:1d:49:9f:b4:7e: 60:85:ba:7b:e3:82:05:e2:f4:8c:23:76:0a:ca:5e: 7e:60:56:0b:ad:1d:f0:78:4f:72:91:86:13:d0:1a: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:F3:CB:79:C2:52:D8:5B:06:D8:27:B0:0B:5C:10:E2:AF:25:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc7de3cf-fd42-3c26-aeda-4d4f90eebd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:29:32:ac:74:40:de:a0:3e:16:58:cf:1e:ca:2a:a3:2b:fa: 0e:79:07:95:00:0c:8e:ba:23:c9:12:50:d6:3b:28:02:e8:43: ae:56:f0:fe:19:dc:16:93:51:80:35:f1:65:01:95:10:f3:e1: 07:d6:ce:33:66:ab:24:ee:92:8e:85:db:d9:1c:83:5f:4e:59: 34:a1:22:31:3d:b6:24:d1:4d:50:9e:9c:f3:76:ed:58:97:43: 83:15:59:a1:71:f1:46:44:e9:2b:03:26:d7:9f:5e:ca:61:f3: 3b:51:1f:d8:6b:8b:a3:eb:cb:cb:cf:1d:0e:e8:b8:fe:4f:88: ab:a5:57:12:c9:a6:61:50:3f:e6:57:6e:f4:d8:d9:71:ef:91: b6:b0:a8:b6:9b:7a:20:ee:9f:4f:4f:f3:ac:ca:58:5a:7d:6e: 8b:a8:2b:70:8c:47:9b:79:18:28:d4:b8:20:95:41:4a:fd:8b: 0a:f5:b6:67:46:bd:f3:b6:fb:19:e6:d7:2a:cc:82:cd:19:53: 08:de:ef:18:1f:a0:97:2f:7c:87:a2:f2:29:0d:87:b0:1e:40: 23:ab:04:74:a3:c0:cc:03:8f:4a:da:14:65:28:1e:fc:ce:e9: b9:07:f5:8a:8d:bc:9d:70:5e:70:14:06:13:0e:f2:62:dd:62: 46:55:10:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgSmn0x6lETW+dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzdlNTQ4Y2YtZDA3Yi00ODRlLWJkNWYtZGE2ZGQ1NTJiZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+IX4S7xtCoan0Cl5pmspArN/RgJ8xQjruuK MlkVwGmmTMw7z3hAoelRgIW0yN+fgJsZVfpqWVJs+x7kIw54KgsZEv6DxHj0SNw8 uLun1baUY+zsbdK8JXVH6DjDiNuHlelUrhEO0rZehvSQu9Quqob97Bt8b8nw/lXu fboHMJske88EocfcO4BvBLCm5wRHdRByfhGOeF1R7jsm7CEmyppRWuGM0kiI1pAl 6amZF/P03SqCEOzh6z8qjG1zPCW1p5YSWMI2nNa53+or81lCTSwn5C3bGD2An478 HUmftH5ghbp744IF4vSMI3YKyl5+YFYLrR3weE9ykYYT0Bp38wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa788t5wlLYWwbYJ7ALXBDiryX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGM3ZGUzY2YtZmQ0Mi0z YzI2LWFlZGEtNGQ0ZjkwZWViZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2sCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwpMqx0QN6gPhZYzx7KKqMr+g55B5UADI66I8kSUNY7KALoQ65W8P4Z 3BaTUYA18WUBlRDz4QfWzjNmqyTuko6F29kcg19OWTShIjE9tiTRTVCenPN27ViX Q4MVWaFx8UZE6SsDJtefXsph8ztRH9hri6Pry8vPHQ7ouP5PiKulVxLJpmFQP+ZX bvTY2XHvkbawqLabeiDun09P86zKWFp9bouoK3CMR5t5GCjUuCCVQUr9iwr1tmdG vfO2+xnm1yrMgs0ZUwje7xgfoJcvfIei8ikNh7AeQCOrBHSjwMwDj0raFGUoHvzO 6bkH9YqNvJ1wXnAUBhMO8mLdYkZVEKE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:50 2025 by rpki-client