$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd195b4-217d-3cbd-933e-cac4108029c3.roa File: 1dd195b4-217d-3cbd-933e-cac4108029c3.roa (raw, json) Hash identifier: Z+9izz3rNuH0kUMwJixnvrpn4rrZqqvBIhQ13N0WkYg= Subject key identifier: 52:0E:F3:4D:BD:8F:57:E0:DA:06:7C:DC:74:18:0A:99:BF:F5:AD:C6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA63AE6110AAFF32A57780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd195b4-217d-3cbd-933e-cac4108029c3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.104.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:63:ae:61:10:aa:ff:32:a5:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4292a4ac-e048-472a-836d-9dc2cca3c9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:e8:a2:9c:44:74:74:ac:1d:3c:d7:c1:0a: a4:f1:1f:4b:32:3e:d3:eb:15:49:9c:56:cc:bd:f1: 1b:b1:3e:1c:25:69:5f:f9:f2:0e:1a:a7:ee:d4:1f: 4e:fd:ca:9d:1d:93:8b:c3:df:2d:ff:69:bc:01:87: 38:fa:2c:3a:65:d8:51:e1:f1:47:db:0c:e1:b5:53: 06:c7:65:c4:c9:7e:6f:8f:59:9a:d6:08:5d:2f:1b: b3:9d:bf:18:2a:e8:f2:43:e3:2d:95:05:7c:3a:91: 45:5c:8c:2c:6c:36:21:e0:7e:8c:60:80:3d:2b:ff: ad:2c:f4:c9:7c:c0:36:e0:70:18:47:56:db:5e:5a: f7:8a:e7:de:f6:be:fc:5a:8c:78:98:d7:dc:81:fe: 40:06:78:5f:f4:15:2a:bc:da:83:45:94:9a:60:70: 51:47:84:e4:11:3b:f8:78:19:09:d6:3c:45:a5:3e: f7:b8:de:f9:d5:d8:e3:63:06:92:33:ae:a6:89:ab: 65:a5:ad:de:0a:00:86:fb:5c:d0:13:c1:38:a8:1d: 77:7e:29:57:56:75:41:bc:35:2b:43:ab:25:27:86: ca:b2:84:91:14:95:ee:9a:bf:67:17:cb:28:46:6a: f7:52:04:be:23:40:2d:10:58:56:b8:5b:1b:ab:f3: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0E:F3:4D:BD:8F:57:E0:DA:06:7C:DC:74:18:0A:99:BF:F5:AD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd195b4-217d-3cbd-933e-cac4108029c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a9:84:2e:ea:da:05:9d:e2:10:d0:7a:34:9e:23:74:85:37: 4f:c5:3b:75:21:63:f4:42:1e:b3:24:f1:78:d7:84:ac:70:8c: 3a:d1:93:8e:06:f9:c8:96:0a:c5:20:ec:dc:70:9f:d0:47:46: 4c:3c:82:dd:1e:86:93:a6:96:e0:cd:83:76:d3:18:e1:b9:a4: b8:49:71:ad:d5:69:96:d1:95:d3:4f:cf:1c:72:cb:a1:4e:e7: 3b:8c:23:c6:59:1e:3f:94:5a:96:5d:24:37:63:d2:f0:3d:ed: 81:79:9d:8a:84:2b:f3:43:04:db:dc:7d:b6:93:bb:20:fa:a5: 8e:b5:d9:05:f4:f5:92:d8:85:30:b9:92:99:c8:02:a6:40:48: 33:51:52:9e:8e:1c:0d:2b:03:59:2c:a1:7c:29:d3:d2:bf:12: f2:4e:17:cd:23:13:ae:6e:75:0d:85:7e:5c:a2:e1:88:19:2d: a7:b4:ab:cf:d7:74:02:8a:81:92:19:80:8a:ae:74:6c:32:fa: 51:ee:02:b8:02:b6:01:ac:fa:5f:f5:35:48:17:4c:6f:57:96: 14:95:17:02:1d:5c:36:73:ae:89:3c:be:6e:cf:b7:43:c4:bb: 46:01:1a:1d:a4:08:25:43:83:d8:6f:ec:be:9b:57:7b:f1:90: a1:5d:b6:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumOuYRCq/zKld4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDI5MmE0YWMtZTA0OC00NzJhLTgzNmQtOWRjMmNjYTNjOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLoopxEdHSsHTzXwQqk8R9LMj7T6xVJnFbM vfEbsT4cJWlf+fIOGqfu1B9O/cqdHZOLw98t/2m8AYc4+iw6ZdhR4fFH2wzhtVMG x2XEyX5vj1ma1ghdLxuznb8YKujyQ+MtlQV8OpFFXIwsbDYh4H6MYIA9K/+tLPTJ fMA24HAYR1bbXlr3iufe9r78Wox4mNfcgf5ABnhf9BUqvNqDRZSaYHBRR4TkETv4 eBkJ1jxFpT73uN751djjYwaSM66miatlpa3eCgCG+1zQE8E4qB13filXVnVBvDUr Q6slJ4bKsoSRFJXumr9nF8soRmr3UgS+I0AtEFhWuFsbq/OSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIO8029j1fg2gZ83HQYCpm/9a3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWRkMTk1YjQtMjE3ZC0z Y2JkLTkzM2UtY2FjNDEwODAyOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2ghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaphC7q2gWd4hDQejSeI3SFN0/FO3UhY/RCHrMk8XjXhKxwjDrRk44G +ciWCsUg7Nxwn9BHRkw8gt0ehpOmluDNg3bTGOG5pLhJca3VaZbRldNPzxxyy6FO 5zuMI8ZZHj+UWpZdJDdj0vA97YF5nYqEK/NDBNvcfbaTuyD6pY612QX09ZLYhTC5 kpnIAqZASDNRUp6OHA0rA1ksoXwp09K/EvJOF80jE65udQ2Fflyi4YgZLae0q8/X dAKKgZIZgIqudGwy+lHuArgCtgGs+l/1NUgXTG9XlhSVFwIdXDZzrok8vm7Pt0PE u0YBGh2kCCVDg9hv7L6bV3vxkKFdtsY= -----END CERTIFICATE-----Generated at Tue Apr 29 21:09:19 2025 by rpki-client