$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/595a435f-0d5d-30e0-ace7-337993c7ecc1.roa File: 595a435f-0d5d-30e0-ace7-337993c7ecc1.roa (raw, json) Hash identifier: yUwUlKFK34bGXljNNcdKOmBNqr2ROi8sBEnwy3zv+iY= Subject key identifier: BF:DD:4F:17:F1:17:17:E7:0E:A6:50:9C:CB:D3:2A:76:4C:A4:3F:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1AC8344D06B39AD17180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/595a435f-0d5d-30e0-ace7-337993c7ecc1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.107.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1a:c8:34:4d:06:b3:9a:d1:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d607c00b-6793-4e47-ab44-8a0ad60ef72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:09:f2:82:ca:d0:52:40:63:81:0b:5e:9a: ab:0e:39:d0:c0:1f:51:cc:2c:32:5c:37:82:7e:f7: 4d:df:6d:5c:7c:bc:35:f9:31:f9:a2:ee:70:02:2f: 79:65:66:7e:24:22:16:1d:c6:a4:1c:10:86:0d:9c: 3d:86:5b:a2:e8:61:8b:0d:85:03:31:1c:62:dc:69: 30:ab:0c:2b:81:c0:35:f5:47:40:2f:d9:4f:d5:16: e7:ac:a6:f1:c8:ab:5c:73:84:94:10:bf:c6:a5:09: 78:95:76:b2:48:37:25:39:90:40:ce:22:5b:7e:54: 4f:35:41:ea:1a:75:d0:e0:ef:10:d0:61:11:35:49: 97:a5:48:d0:c1:ac:f8:62:7e:9f:cc:e2:bd:5d:8e: 85:ad:53:06:f3:2a:b7:77:d3:9a:ed:53:12:e0:2d: ee:af:60:3a:4b:1f:dd:12:cb:49:ba:5c:17:98:3e: d4:ad:53:da:96:eb:89:d9:a2:bc:97:8a:28:3b:a8: ca:8a:ce:59:ee:64:6f:fe:98:64:60:c5:ac:83:c5: e8:f1:44:9d:18:d7:17:74:6a:90:77:af:a2:cd:40: c5:f6:67:c5:78:71:e9:13:f7:22:d0:e8:74:99:16: 2f:1c:f3:98:ae:33:88:64:4e:f2:6a:9a:09:17:b5: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DD:4F:17:F1:17:17:E7:0E:A6:50:9C:CB:D3:2A:76:4C:A4:3F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/595a435f-0d5d-30e0-ace7-337993c7ecc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:6b:78:d1:ed:b4:8b:91:fc:43:25:54:75:74:a2:9e:8a:8a: a2:b3:1d:f4:88:dd:1d:bc:13:1c:78:66:3a:8f:ba:ff:4b:39: bb:d2:5b:e6:50:3f:55:8b:fb:a0:b2:e8:66:c4:a6:31:ec:43: e4:8e:c7:d9:29:54:33:a8:17:08:66:52:f3:c7:88:7c:df:9c: b5:98:da:62:d4:39:63:1d:d9:a5:ed:c8:37:a6:76:44:ae:11: c0:00:62:02:45:7c:53:a8:cf:dc:24:14:7e:2e:8c:bc:c4:60: 0c:4d:4b:63:51:d0:73:a0:b5:f4:cf:03:8c:de:8b:82:6f:4c: 56:ae:8c:30:71:7a:10:d8:c8:fc:0e:67:6f:63:1b:02:a8:ef: 8f:46:1d:b9:59:1b:6d:50:a4:55:47:bb:3c:ed:60:7c:50:55: e6:fb:51:35:57:55:20:4a:e1:1e:6d:8b:8b:c0:a8:7d:fd:71: cf:9f:11:af:1f:db:c6:e9:35:4d:cf:79:79:16:d3:dd:01:68: 05:5b:1b:d2:3d:b7:97:00:2a:6f:c2:e3:48:83:14:36:b9:aa: 06:7a:ce:bc:bb:75:46:f0:2a:96:9f:0a:e4:bd:42:54:1a:33: 68:1f:57:d2:35:aa:13:f0:94:4c:61:fb:fb:5e:c9:50:ca:61: 54:bd:a5:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuxrINE0Gs5rRcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDYwN2MwMGItNjc5My00ZTQ3LWFiNDQtOGEwYWQ2MGVmNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6okJ8oLK0FJAY4ELXpqrDjnQwB9RzCwyXDeC fvdN321cfLw1+TH5ou5wAi95ZWZ+JCIWHcakHBCGDZw9hlui6GGLDYUDMRxi3Gkw qwwrgcA19UdAL9lP1RbnrKbxyKtcc4SUEL/GpQl4lXaySDclOZBAziJbflRPNUHq GnXQ4O8Q0GERNUmXpUjQwaz4Yn6fzOK9XY6FrVMG8yq3d9Oa7VMS4C3ur2A6Sx/d EstJulwXmD7UrVPaluuJ2aK8l4ooO6jKis5Z7mRv/phkYMWsg8Xo8USdGNcXdGqQ d6+izUDF9mfFeHHpE/ci0Oh0mRYvHPOYrjOIZE7yapoJF7U3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/dTxfxFxfnDqZQnMvTKnZMpD9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTk1YTQzNWYtMGQ1ZC0z MGUwLWFjZTctMzM3OTkzYzdlY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2v9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhreNHttIuR/EMlVHV0op6KiqKzHfSI3R28Exx4ZjqPuv9LObvSW+ZQ P1WL+6Cy6GbEpjHsQ+SOx9kpVDOoFwhmUvPHiHzfnLWY2mLUOWMd2aXtyDemdkSu EcAAYgJFfFOoz9wkFH4ujLzEYAxNS2NR0HOgtfTPA4zei4JvTFaujDBxehDYyPwO Z29jGwKo749GHblZG21QpFVHuzztYHxQVeb7UTVXVSBK4R5ti4vAqH39cc+fEa8f 28bpNU3PeXkW090BaAVbG9I9t5cAKm/C40iDFDa5qgZ6zry7dUbwKpafCuS9QlQa M2gfV9I1qhPwlExh+/teyVDKYVS9pXU= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:09 2025 by rpki-client