$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd517d5f-422c-372a-be66-581f93f16a62.roa File: fd517d5f-422c-372a-be66-581f93f16a62.roa (raw, json) Hash identifier: UfcH/jiRQe58OpbEaWj+JzS+ax/wbkClZXwawwrOLLo= Subject key identifier: 53:20:F6:05:56:19:C8:88:E1:C2:2E:FF:19:A2:F8:0A:3A:AC:98:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5812D57148588A4E56AEF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd517d5f-422c-372a-be66-581f93f16a62.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 75.107.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:2d:57:14:85:88:a4:e5:6a:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1dfa03f8-c6aa-4c5a-a6a4-74575755b223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:70:d2:83:c3:7d:14:54:6a:b8:ab:74:69: bd:f7:cf:10:9c:19:70:aa:c3:b5:27:1d:05:73:df: ee:fe:ed:79:1a:b5:48:81:8d:fc:75:d4:b8:80:d5: 56:82:44:7c:12:95:ab:fb:a5:00:06:fb:10:6e:3f: b7:5c:15:83:0f:f3:51:04:17:7c:fe:5c:d0:1f:f1: f9:f5:b8:0b:a2:5b:d7:c9:fa:0e:72:98:b3:7e:8b: 3d:ce:b9:c8:10:79:6e:f8:2f:f2:ed:e6:42:37:9d: a5:03:07:e0:77:f2:66:b2:4d:f0:43:6b:17:15:d9: c9:a4:45:19:80:79:62:04:95:82:0e:08:ba:cc:16: 9d:29:c7:ff:ce:62:9a:91:f3:4c:32:7b:d3:5a:f8: 5f:b2:0c:14:6b:23:71:3a:2d:95:e4:69:f6:8e:42: c2:31:37:3b:c0:4d:8a:85:df:9e:5b:24:12:59:71: e3:49:7f:28:80:52:9f:0d:30:4c:16:0f:ff:eb:87: 4b:d0:11:ad:59:08:e8:4c:01:f3:c3:26:3e:80:77: 71:62:25:33:e4:54:6a:7c:0c:f0:12:65:ca:3e:f3: 2e:44:b3:00:17:02:46:95:3f:54:73:0f:50:ce:6a: 47:98:ee:45:be:6b:e1:51:24:c2:39:ba:9c:7c:4d: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:20:F6:05:56:19:C8:88:E1:C2:2E:FF:19:A2:F8:0A:3A:AC:98:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd517d5f-422c-372a-be66-581f93f16a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:49:46:e0:2b:30:c6:64:a5:29:47:bd:70:a0:5e:9b:0f:69: 73:c1:7c:14:4f:5e:91:fb:2f:0f:b2:de:7c:15:6f:7b:79:60: 71:fd:0d:c0:90:39:0a:6e:08:18:6d:ee:f4:9d:90:b8:b2:34: 61:74:87:81:f8:10:dd:b4:c6:4d:24:89:b8:c6:69:12:86:cc: 1a:f7:f6:97:a9:16:c1:7e:ba:63:7d:17:8a:9c:76:87:c6:8c: a7:9d:95:65:3c:9d:ca:89:50:4c:84:38:39:4a:aa:34:76:cf: 9d:19:24:4c:ed:8d:30:bf:26:30:96:dd:0c:7c:12:69:31:82: d7:7f:e7:cb:73:a3:20:e7:9d:81:90:e6:33:e3:6b:a4:4f:52: a2:dd:f4:45:d9:53:a0:c5:47:ab:91:cd:b1:c3:72:9e:bf:8e: e4:82:4b:65:d6:88:f3:9d:a5:c1:c1:83:39:9b:29:92:27:4f: ca:ed:df:c2:d5:d3:69:cd:1e:a9:25:23:be:84:e2:c0:96:5c: 42:40:e1:e0:54:e9:b0:c8:b3:a1:e9:6f:35:bc:c4:ca:f3:31: 66:27:fb:13:5d:4e:b1:bd:f4:95:1a:45:15:2f:76:a4:bf:03: be:6b:df:97:50:96:a6:e6:de:c7:ff:3c:6d:d1:5f:71:52:80: a4:25:d4:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgS1XFIWIpOVq7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWRmYTAzZjgtYzZhYS00YzVhLWE2YTQtNzQ1NzU3NTViMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOJw0oPDfRRUarirdGm9988QnBlwqsO1Jx0F c9/u/u15GrVIgY38ddS4gNVWgkR8EpWr+6UABvsQbj+3XBWDD/NRBBd8/lzQH/H5 9bgLolvXyfoOcpizfos9zrnIEHlu+C/y7eZCN52lAwfgd/Jmsk3wQ2sXFdnJpEUZ gHliBJWCDgi6zBadKcf/zmKakfNMMnvTWvhfsgwUayNxOi2V5Gn2jkLCMTc7wE2K hd+eWyQSWXHjSX8ogFKfDTBMFg//64dL0BGtWQjoTAHzwyY+gHdxYiUz5FRqfAzw EmXKPvMuRLMAFwJGlT9Ucw9QzmpHmO5FvmvhUSTCObqcfE2LpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMg9gVWGciI4cIu/xmi+Ao6rJiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmQ1MTdkNWYtNDIyYy0z NzJhLWJlNjYtNTgxZjkzZjE2YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2uVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9JRuArMMZkpSlHvXCgXpsPaXPBfBRPXpH7Lw+y3nwVb3t5YHH9DcCQ OQpuCBht7vSdkLiyNGF0h4H4EN20xk0kibjGaRKGzBr39pepFsF+umN9F4qcdofG jKedlWU8ncqJUEyEODlKqjR2z50ZJEztjTC/JjCW3Qx8Emkxgtd/58tzoyDnnYGQ 5jPja6RPUqLd9EXZU6DFR6uRzbHDcp6/juSCS2XWiPOdpcHBgzmbKZInT8rt38LV 02nNHqklI76E4sCWXEJA4eBU6bDIs6HpbzW8xMrzMWYn+xNdTrG99JUaRRUvdqS/ A75r35dQlqbm3sf/PG3RX3FSgKQl1Lg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:58 2025 by rpki-client