$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa File: f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa (raw, json) Hash identifier: KETTdU77xwtGI95J2S7SpoGQFGwJO7/O7jE+PfWpixo= Subject key identifier: 04:70:54:3A:07:43:42:10:69:26:C8:A1:F1:A2:FF:13:9C:EC:90:39 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848CDE114E876FAF23F0AA04980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7155 IP address blocks: 75.104.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:14:e8:76:fa:f2:3f:0a:a0:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=5052f5e2-7382-4850-8df4-5ba0b304d41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:2e:41:fd:b0:8f:be:51:48:6d:16:7f:a2: 8a:ab:d6:17:42:b1:9b:60:b4:39:ce:16:c1:4b:b1: 4c:55:a6:e2:8f:f4:71:e9:55:8d:0a:d3:e8:e3:5a: 71:68:86:b1:01:ca:7a:79:b9:58:62:7a:65:29:ce: 04:c8:97:f5:bc:af:30:a8:61:a4:a9:f9:2f:5c:bc: d6:f3:8a:c5:58:ca:40:b4:77:2d:32:de:d9:6b:55: 27:aa:3d:4d:33:a7:fc:2d:e5:74:9d:65:16:10:06: 09:ac:a0:62:7a:cd:24:50:56:68:79:6b:ab:da:65: 70:d3:44:8b:5b:a9:7a:9c:2a:ee:1a:c6:55:82:7d: cd:5e:9a:61:9e:93:ad:e1:2b:29:b6:a3:68:e3:17: cd:cf:f3:dd:8a:e9:f2:47:c0:f6:b8:55:6d:f7:fb: 5a:e0:8e:bc:dd:03:e2:43:dd:3d:87:2d:bc:2c:af: 33:ef:a7:eb:35:b7:e1:22:b8:7f:05:f0:a9:7c:6f: 73:be:3e:85:03:3e:25:cd:4f:93:02:30:09:80:01: fb:63:05:ff:f0:e3:a0:1b:6e:37:82:40:31:78:4f: 51:41:b4:84:e1:92:9f:60:ba:47:c7:5d:69:4d:c8: c3:f2:13:1f:a8:42:24:f4:e2:1f:51:60:22:ba:eb: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:70:54:3A:07:43:42:10:69:26:C8:A1:F1:A2:FF:13:9C:EC:90:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a2:8d:87:b3:6a:0f:6a:18:2a:d6:d8:03:66:ef:5f:b0:eb: 41:5c:1b:00:1e:05:6c:91:dd:41:0d:bd:07:4b:e1:ae:c5:cf: bd:72:9f:c2:77:c1:87:c6:26:7d:6c:c1:d0:8a:7c:c1:a9:94: 44:0c:9d:9a:a0:0f:5f:06:2c:e9:11:9e:a8:31:e7:34:ec:34: a4:42:d8:53:b4:eb:62:1a:e0:e5:27:ee:4a:05:57:19:96:12: 69:df:ce:cc:7a:0a:1a:72:59:8d:6a:f0:8e:bd:22:b5:4d:ab: 16:f4:bf:2d:ad:1f:78:c8:fd:17:1e:62:b2:03:0b:7b:e7:cf: 3f:72:a9:c2:25:30:e9:8c:3c:ed:0e:99:51:be:72:b2:b2:f6: 6e:98:54:c8:07:e7:ed:53:f4:ff:41:fd:cb:eb:9a:8c:57:19: 5e:b5:ba:82:59:d8:23:98:c9:da:ad:90:31:b1:44:22:a5:80: 80:60:22:4d:a5:61:d7:ec:7b:b2:5e:33:22:e5:d0:9b:8b:e8: 2d:70:04:55:58:ad:3b:00:f8:90:91:c6:91:e7:b2:d6:e8:ce: ca:75:6a:27:fa:e2:03:4b:43:fe:36:1f:c9:0b:5e:b7:e8:b0: 75:f2:8c:d4:dd:e4:aa:ea:c1:cc:d0:99:35:44:aa:50:08:38: 49:70:09:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RTodvryPwqgSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NTA1MmY1ZTItNzM4Mi00ODUwLThkZjQtNWJhMGIzMDRkNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3MuQf2wj75RSG0Wf6KKq9YXQrGbYLQ5zhbB S7FMVabij/Rx6VWNCtPo41pxaIaxAcp6eblYYnplKc4EyJf1vK8wqGGkqfkvXLzW 84rFWMpAtHctMt7Za1Unqj1NM6f8LeV0nWUWEAYJrKBies0kUFZoeWur2mVw00SL W6l6nCruGsZVgn3NXpphnpOt4SsptqNo4xfNz/PdiunyR8D2uFVt9/ta4I683QPi Q909hy28LK8z76frNbfhIrh/BfCpfG9zvj6FAz4lzU+TAjAJgAH7YwX/8OOgG243 gkAxeE9RQbSE4ZKfYLpHx11pTcjD8hMfqEIk9OIfUWAiuuub8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARwVDoHQ0IQaSbIofGi/xOc7JA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjBhOGFlZTgtNjQyZC0z ZWNhLTg2ZjAtOTNmYjBiNmE1ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS2hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqijYezag9qGCrW2ANm71+w60FcGwAeBWyR3UENvQdL4a7Fz71yn8J3 wYfGJn1swdCKfMGplEQMnZqgD18GLOkRnqgx5zTsNKRC2FO062Ia4OUn7koFVxmW Emnfzsx6ChpyWY1q8I69IrVNqxb0vy2tH3jI/RceYrIDC3vnzz9yqcIlMOmMPO0O mVG+crKy9m6YVMgH5+1T9P9B/cvrmoxXGV61uoJZ2COYydqtkDGxRCKlgIBgIk2l Ydfse7JeMyLl0JuL6C1wBFVYrTsA+JCRxpHnstbozsp1aif64gNLQ/42H8kLXrfo sHXyjNTd5KrqwczQmTVEqlAIOElwCSc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:02 2025 by rpki-client