$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffba6c0-5982-32ad-803c-0629be61def6.roa File: dffba6c0-5982-32ad-803c-0629be61def6.roa (raw, json) Hash identifier: QVzdxe9zozHvVDYXYHRP/uQWE0il1v/m3b5c16JQ9Pk= Subject key identifier: 25:47:39:AB:27:4C:E3:05:34:42:BF:19:46:35:9A:5F:3D:93:8A:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819350757A7E5E587A1660 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffba6c0-5982-32ad-803c-0629be61def6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:93:50:75:7a:7e:5e:58:7a:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f9746708-ba51-4220-9d8e-978a41e8db17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:b4:19:92:f0:d7:b0:a9:3a:4b:d0:d1:7a: 08:a2:1d:18:99:08:1e:b0:2c:65:78:82:f8:86:46: 1f:f7:2f:e0:13:06:a5:11:d9:20:b5:29:f1:5c:e8: 3b:31:28:30:72:f3:a0:38:8e:f5:18:82:e6:04:70: bb:64:dc:36:71:62:69:ac:52:e8:db:b1:ae:2d:14: 2a:75:4d:a0:f0:36:60:1f:f2:b7:0b:33:a6:a5:ee: 86:a6:4d:b6:8a:b8:3b:85:01:ae:cb:30:f7:4a:e6: c6:95:a1:71:29:3f:51:0f:ea:d1:d7:9c:00:92:ae: df:42:53:95:4b:ca:0f:37:90:1f:21:7c:51:d0:a5: 1e:4c:d7:2b:48:7f:9f:02:e1:2c:f5:ee:53:f0:e4: 4e:19:0a:7c:73:6a:e1:35:9a:bd:e4:ee:27:e3:56: 41:fb:d6:f8:24:fd:fa:4b:dc:a5:e8:14:62:46:1d: ed:9e:f1:6e:6b:f4:1b:89:77:b8:00:09:dc:b7:dd: 72:36:ce:e6:85:51:18:69:0a:e0:4b:17:ba:ef:20: 1f:61:50:99:2b:97:59:2c:9d:3a:04:05:a3:da:b9: 3e:21:9b:d2:56:98:5b:33:77:2b:4e:81:f7:a8:80: 36:0c:81:62:1a:15:bb:e0:d8:cc:c6:2b:b7:f7:3e: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:47:39:AB:27:4C:E3:05:34:42:BF:19:46:35:9A:5F:3D:93:8A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffba6c0-5982-32ad-803c-0629be61def6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:96:5e:3c:1f:67:34:22:b0:90:ad:61:df:95:db:2b:2b:10: 74:40:39:b9:83:8a:75:04:cb:36:c8:42:8a:0d:f9:cb:58:9d: ea:7d:3e:13:81:e0:63:4f:43:a2:21:d7:49:bb:cb:5f:37:05: c2:e8:d4:96:f7:92:a0:f6:79:45:c9:02:94:56:3a:70:e3:d9: d6:d1:3b:31:c5:c4:40:f6:b6:94:08:b9:68:29:e4:b0:54:b2: bd:72:c0:12:e3:94:f6:dc:66:c0:93:d6:33:00:49:7b:97:74: 9c:11:4f:99:b3:bb:73:21:5a:3b:2d:b0:14:f7:35:c9:96:2f: f4:64:29:3d:29:7c:99:39:a6:a0:4f:f6:7d:5c:69:a6:14:c9: d9:f4:02:0d:7a:a0:75:7d:7a:04:a1:53:ca:2f:79:0c:39:c5: 89:56:c9:3f:9d:da:cd:50:c1:c6:cd:cb:08:f6:d1:95:a5:e6: 75:2d:cc:50:d9:19:ad:25:f1:a4:d7:1f:cd:8a:7e:37:68:e8: 2c:a9:e3:ed:38:b8:57:86:67:99:1c:e6:a5:ba:80:b2:80:78: 30:5d:9b:28:97:27:a2:86:05:8b:b0:0b:3b:ac:0b:15:b1:2e: 64:3c:4e:a6:cb:22:e0:56:9f:02:03:7d:9e:0e:99:a0:34:d0: a9:55:07:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZNQdXp+Xlh6FmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjk3NDY3MDgtYmE1MS00MjIwLTlkOGUtOTc4YTQxZThkYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOS0GZLw17CpOkvQ0XoIoh0YmQgesCxleIL4 hkYf9y/gEwalEdkgtSnxXOg7MSgwcvOgOI71GILmBHC7ZNw2cWJprFLo27GuLRQq dU2g8DZgH/K3CzOmpe6Gpk22irg7hQGuyzD3SubGlaFxKT9RD+rR15wAkq7fQlOV S8oPN5AfIXxR0KUeTNcrSH+fAuEs9e5T8OROGQp8c2rhNZq95O4n41ZB+9b4JP36 S9yl6BRiRh3tnvFua/QbiXe4AAnct91yNs7mhVEYaQrgSxe67yAfYVCZK5dZLJ06 BAWj2rk+IZvSVphbM3crToH3qIA2DIFiGhW74NjMxiu39z7L6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVHOasnTOMFNEK/GUY1ml89k4pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZmYmE2YzAtNTk4Mi0z MmFkLTgwM2MtMDYyOWJlNjFkZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQzaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCWXjwfZzQisJCtYd+V2ysrEHRAObmDinUEyzbIQooN+ctYnep9PhOB 4GNPQ6Ih10m7y183BcLo1Jb3kqD2eUXJApRWOnDj2dbROzHFxED2tpQIuWgp5LBU sr1ywBLjlPbcZsCT1jMASXuXdJwRT5mzu3MhWjstsBT3NcmWL/RkKT0pfJk5pqBP 9n1caaYUydn0Ag16oHV9egShU8oveQw5xYlWyT+d2s1QwcbNywj20ZWl5nUtzFDZ Ga0l8aTXH82Kfjdo6Cyp4+04uFeGZ5kc5qW6gLKAeDBdmyiXJ6KGBYuwCzusCxWx LmQ8TqbLIuBWnwIDfZ4OmaA00KlVB0U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:26 2025 by rpki-client