$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa0a1899-6de9-396a-862b-401742c870d8.roa File: fa0a1899-6de9-396a-862b-401742c870d8.roa (raw, json) Hash identifier: wJz1OnZOURXr/UrjGa0i1mEobfWfp6pHeJWjvZjCLyk= Subject key identifier: 59:FE:1B:FB:2A:E8:BF:77:26:FC:05:52:8C:D2:77:E3:5B:64:40:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581B566252D9DF16237E4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa0a1899-6de9-396a-862b-401742c870d8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.106.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:b5:66:25:2d:9d:f1:62:37:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e013f50d-2dae-4010-8a5d-7b5d2e25c1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:b3:ef:40:1f:66:6a:eb:f7:62:59:53:17: 39:9e:60:cf:39:5c:64:35:2d:0a:fa:76:74:f8:88: 5e:e6:16:fd:8e:f2:6c:28:13:ee:7f:d6:e6:d7:5e: 80:57:dd:23:75:43:13:30:71:3e:3a:35:40:aa:d2: bd:de:f7:57:c7:b1:1c:2d:7e:3d:d7:d3:69:0a:8a: fd:39:70:ea:c6:c2:1e:af:c2:1e:36:70:f9:61:56: bd:91:44:00:6f:74:ce:e5:9c:13:c7:7a:6b:cc:84: 7e:3a:bf:3e:19:06:b5:57:8f:34:77:b4:6f:82:70: e7:67:1a:39:ab:60:65:91:1b:49:0c:0c:f7:8c:d3: 1b:34:53:fe:35:a9:d5:e8:cf:f5:e8:c1:2b:79:c9: 42:61:cc:ba:48:6b:4f:b1:81:f3:16:c3:1e:6f:94: b2:b4:49:8d:94:be:15:e1:ef:72:cc:75:19:1e:91: d6:d5:12:84:17:05:4b:33:fd:e2:be:90:66:a8:0c: 72:bd:a9:da:7c:b9:5b:a0:e4:d7:f5:62:95:08:88: a1:8a:18:24:b5:ac:07:c2:1a:cf:e9:8a:8b:5f:ae: 91:df:41:44:5f:17:23:46:af:aa:21:d5:13:24:71: 19:13:f1:0c:a3:56:17:11:35:b7:e6:b6:09:93:c2: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:1B:FB:2A:E8:BF:77:26:FC:05:52:8C:D2:77:E3:5B:64:40:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa0a1899-6de9-396a-862b-401742c870d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.106.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:29:43:06:49:70:85:70:68:8f:9f:99:91:f3:c0:36:be:0a: 5b:35:b9:ab:83:a6:e8:63:f1:eb:d6:9d:06:64:89:84:7b:58: 7f:8e:05:59:c6:7c:c4:aa:8f:06:32:a6:90:78:a1:40:47:68: c8:46:2b:4f:17:2c:d9:b0:a3:c7:db:03:6a:18:23:78:29:c5: ed:28:36:44:b9:d8:3b:17:8b:4b:87:20:a0:ac:44:94:db:22: 6c:89:4b:bd:c5:bf:fb:99:33:75:dc:cb:21:cf:23:c0:47:74: d6:74:5a:aa:0d:4b:f2:b1:10:b8:c2:32:bc:dd:d9:69:8c:d9: 9b:78:fc:c8:71:51:6b:a5:13:46:8f:55:d8:28:ca:ba:74:d3: 25:02:9f:92:f5:5b:f1:f1:0d:26:60:49:02:f0:b2:13:6a:e8: ab:2e:7b:ed:f8:da:5c:ba:d6:07:13:ec:11:1d:61:77:e2:c2: 31:7f:68:8d:db:d1:a1:ed:aa:fa:9d:21:21:2c:b2:62:ff:0f: 3f:35:5b:b1:13:08:38:78:e2:8d:43:ae:c4:bd:cd:8a:ab:a5: 2c:4d:ae:ca:b0:76:11:be:01:91:b4:e0:c9:9b:fe:71:7a:f2: e4:8a:95:e9:9a:c4:5d:b6:5f:2f:72:e1:6b:b4:14:93:ca:d0: 67:97:49:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgbVmJS2d8WI35MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTAxM2Y1MGQtMmRhZS00MDEwLThhNWQtN2I1ZDJlMjVjMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEGz70AfZmrr92JZUxc5nmDPOVxkNS0K+nZ0 +Ihe5hb9jvJsKBPuf9bm116AV90jdUMTMHE+OjVAqtK93vdXx7EcLX4919NpCor9 OXDqxsIer8IeNnD5YVa9kUQAb3TO5ZwTx3przIR+Or8+GQa1V480d7RvgnDnZxo5 q2BlkRtJDAz3jNMbNFP+NanV6M/16MEreclCYcy6SGtPsYHzFsMeb5SytEmNlL4V 4e9yzHUZHpHW1RKEFwVLM/3ivpBmqAxyvanafLlboOTX9WKVCIihihgktawHwhrP 6YqLX66R30FEXxcjRq+qIdUTJHEZE/EMo1YXETW35rYJk8IXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+G/sq6L93JvwFUozSd+NbZEBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEwYTE4OTktNmRlOS0z OTZhLTg2MmItNDAxNzQyYzg3MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2rvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgpQwZJcIVwaI+fmZHzwDa+Cls1uauDpuhj8evWnQZkiYR7WH+OBVnG fMSqjwYyppB4oUBHaMhGK08XLNmwo8fbA2oYI3gpxe0oNkS52DsXi0uHIKCsRJTb ImyJS73Fv/uZM3XcyyHPI8BHdNZ0WqoNS/KxELjCMrzd2WmM2Zt4/MhxUWulE0aP Vdgoyrp00yUCn5L1W/HxDSZgSQLwshNq6Ksue+342ly61gcT7BEdYXfiwjF/aI3b 0aHtqvqdISEssmL/Dz81W7ETCDh44o1DrsS9zYqrpSxNrsqwdhG+AZG04Mmb/nF6 8uSKlemaxF22Xy9y4Wu0FJPK0GeXSX0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:45 2025 by rpki-client