$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0590a976-fb41-3cae-90a6-d1c09ee6f540.roa File: 0590a976-fb41-3cae-90a6-d1c09ee6f540.roa (raw, json) Hash identifier: lnWYXs6mNqaJPIxNGuQKvb3FFS0gwT7h4vIUYricLj4= Subject key identifier: C4:AB:C2:8D:23:C6:0D:78:B0:85:1B:A1:E3:21:21:BE:78:80:B3:22 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA7B444EDCF5C0FF350380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0590a976-fb41-3cae-90a6-d1c09ee6f540.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.107.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:7b:44:4e:dc:f5:c0:ff:35:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=07a7fef5-452b-4d5e-b9c5-d8a295a118d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:80:d7:27:39:ea:06:fb:17:50:50:81:4a: 3d:5b:37:08:18:06:b5:9d:b7:63:c7:4c:e0:10:d0: 45:69:31:b5:e9:6e:e4:3f:c8:bc:81:38:b7:f6:dd: 23:12:d0:db:73:df:31:21:5c:6d:41:c5:61:05:ee: 97:48:a6:bd:28:1b:9f:01:71:26:48:57:d2:7e:00: fd:dd:fc:22:15:64:24:6c:a8:95:a2:6d:4f:24:c5: 33:1b:5e:7e:8f:76:da:44:ee:29:d7:30:f3:49:7c: e7:b7:60:a7:e2:0e:8c:45:40:46:ad:74:be:44:7b: 42:80:02:a7:15:7d:6b:8a:1f:e2:4c:21:ed:89:0f: 19:71:9c:a1:47:12:9b:1d:71:44:24:3f:f7:e2:70: 4f:87:23:f3:96:43:46:79:d1:74:29:0e:cf:a4:13: f5:88:d7:b4:48:84:fd:20:c2:08:09:0d:ff:21:7b: 88:56:dc:d8:53:a6:30:9e:d8:fb:43:04:d8:87:1a: 89:d7:ac:87:39:f8:af:f4:30:41:cd:14:08:3a:b8: d0:e3:84:24:ae:81:0f:22:22:83:c1:61:55:10:69: 1c:85:64:cb:b0:c4:70:43:24:ff:39:27:55:d8:bf: 75:76:eb:93:4e:6e:e8:f4:2d:77:a3:1d:5d:e7:7e: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:C2:8D:23:C6:0D:78:B0:85:1B:A1:E3:21:21:BE:78:80:B3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0590a976-fb41-3cae-90a6-d1c09ee6f540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:43:20:11:d4:c7:4e:04:13:c6:d5:dd:90:b6:59:b4:d0: e5:14:53:b7:31:ec:3c:11:70:c8:b9:1c:7e:03:d5:34:cb:81: 27:7d:82:0b:96:80:99:27:56:84:1e:3c:c5:68:c7:88:27:11: d5:20:a0:91:8c:13:42:0f:e2:a1:bb:ed:b7:03:7b:fa:29:f6: 35:76:55:77:4d:8c:cb:bc:90:65:17:fb:39:70:d2:ce:aa:29: f6:9f:d9:43:3b:ac:b1:fc:57:34:16:7f:0a:38:3c:e3:fb:c2: 8b:4c:66:b7:74:31:ca:c6:59:3d:40:1a:68:2d:6c:62:ee:54: 17:66:16:45:8e:f1:cf:35:cf:f5:d0:25:cb:d5:d9:14:c4:84: b4:16:0b:9e:37:a7:86:a2:f9:0f:0f:31:4e:23:d7:36:a9:69: 09:3e:c0:68:a4:0e:d4:aa:74:30:54:14:be:0a:1c:3f:45:7c: a9:4b:ba:a7:a2:e5:74:c0:c5:25:02:bc:68:b3:42:2c:08:55: 14:07:8e:ed:6a:c7:ec:c6:52:93:85:af:a5:59:73:0e:bd:c2: 3a:d8:1c:0f:9a:27:15:06:35:fe:cb:e3:d0:c9:e3:5c:df:e2: 34:99:c6:90:d0:ba:ab:9d:2b:53:8b:7a:4c:9e:60:a7:1e:0a: 1a:2d:2e:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuntETtz1wP81A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDdhN2ZlZjUtNDUyYi00ZDVlLWI5YzUtZDhhMjk1YTExOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2mA1yc56gb7F1BQgUo9WzcIGAa1nbdjx0zg ENBFaTG16W7kP8i8gTi39t0jEtDbc98xIVxtQcVhBe6XSKa9KBufAXEmSFfSfgD9 3fwiFWQkbKiVom1PJMUzG15+j3baRO4p1zDzSXznt2Cn4g6MRUBGrXS+RHtCgAKn FX1rih/iTCHtiQ8ZcZyhRxKbHXFEJD/34nBPhyPzlkNGedF0KQ7PpBP1iNe0SIT9 IMIICQ3/IXuIVtzYU6Ywntj7QwTYhxqJ16yHOfiv9DBBzRQIOrjQ44QkroEPIiKD wWFVEGkchWTLsMRwQyT/OSdV2L91duuTTm7o9C13ox1d537xMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSrwo0jxg14sIUboeMhIb54gLMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDU5MGE5NzYtZmI0MS0z Y2FlLTkwYTYtZDFjMDllZTZmNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFlQyAR1MdOBBPG1d2Qtlm00OUUU7cx7DwRcMi5HH4D1TTLgSd9gguW gJknVoQePMVox4gnEdUgoJGME0IP4qG77bcDe/op9jV2VXdNjMu8kGUX+zlw0s6q Kfaf2UM7rLH8VzQWfwo4POP7wotMZrd0McrGWT1AGmgtbGLuVBdmFkWO8c81z/XQ JcvV2RTEhLQWC543p4ai+Q8PMU4j1zapaQk+wGikDtSqdDBUFL4KHD9FfKlLuqei 5XTAxSUCvGizQiwIVRQHju1qx+zGUpOFr6VZcw69wjrYHA+aJxUGNf7L49DJ41zf 4jSZxpDQuqudK1OLekyeYKceChotLr0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:26 2025 by rpki-client