$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aefed390-afa9-3e63-99a0-82b3546ddf5a.roa File: aefed390-afa9-3e63-99a0-82b3546ddf5a.roa (raw, json) Hash identifier: ueftY3OxJBTbGlTAYRhfto3SuKW6d4Z3tM4wdoeAV4Y= Subject key identifier: D0:C6:78:27:95:A2:24:AC:BF:43:30:73:08:BB:FE:58:FD:21:B7:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB12E3452E7D4C2711E180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aefed390-afa9-3e63-99a0-82b3546ddf5a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.107.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:12:e3:45:2e:7d:4c:27:11:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=460e3689-c9da-4a68-89be-fa4a9c260971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a9:ff:3c:72:df:af:06:10:37:00:ba:aa:29: 2c:59:e6:a1:59:f3:01:c0:6d:0d:80:cb:85:ea:f4: b6:f9:d8:62:17:d5:5a:c5:96:2d:28:22:1b:52:33: b5:4b:d4:a2:82:d5:40:c9:01:47:fb:e7:d8:03:e3: 50:cc:eb:ba:14:44:9e:5f:51:7e:c4:f9:52:76:5d: 0e:e9:08:7d:4f:1a:81:39:04:b9:2c:2e:a8:8c:49: dc:0f:1a:ba:50:6d:3f:e2:e0:0a:4e:1f:c9:10:b8: e6:98:ce:a8:43:c8:6b:bb:48:75:ac:1a:a3:30:3d: 1e:51:77:3d:9b:cf:1e:9b:34:e0:c1:20:6f:da:5c: ff:dd:e2:56:78:79:7c:91:5a:86:a2:4f:d4:75:55: ce:e9:23:1c:a1:6b:9c:6b:78:f0:3c:fa:62:bf:6c: 25:09:8b:a8:b7:6a:08:c6:2b:e5:a2:2d:85:61:e7: 0a:57:13:0a:e0:9b:6e:5e:81:13:1f:43:3a:90:f6: ed:b4:a5:fb:81:1a:2c:3a:8e:9f:a1:7f:8e:15:4d: a1:1b:c0:6c:e3:33:bc:4e:fe:3e:a8:00:08:90:2b: f6:f2:40:77:a9:f1:89:7b:d4:d1:a5:12:d9:34:01: 1e:cc:8f:f6:fa:76:48:49:26:ee:8b:af:ae:25:41: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C6:78:27:95:A2:24:AC:BF:43:30:73:08:BB:FE:58:FD:21:B7:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aefed390-afa9-3e63-99a0-82b3546ddf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:3e:3f:5b:8f:88:c1:48:70:34:62:e2:cc:07:9e:05:34:25: e8:f7:cb:22:41:75:c9:dd:4b:65:20:26:f8:90:b6:3a:d7:04: 5e:f0:f2:dd:a8:ea:6a:b0:ee:15:94:64:47:c7:87:e3:18:c0: 6b:30:5c:3c:4e:87:bd:10:53:d0:bd:ee:4b:b9:cc:cf:25:65: 94:6f:5b:5f:cf:47:3b:dc:80:8c:fb:84:48:0a:96:fa:9f:b6: 93:af:fd:70:c9:f9:5a:5a:a8:5d:5f:a6:b1:02:47:47:cd:e1: 61:8d:e4:7e:e5:ba:36:46:cb:ee:bc:02:2e:16:97:2a:18:8f: 68:74:2a:b7:63:65:1d:3c:83:6d:43:33:25:6e:5d:07:76:e4: 95:b7:70:0e:54:ae:75:a2:48:7f:44:03:f8:c2:28:1f:18:77: 53:33:8d:b2:33:02:f2:2e:47:a3:e7:a3:3e:bc:05:85:11:a4: d7:fc:02:df:c5:a3:30:77:52:6b:1c:9b:44:5a:f1:2b:65:15: 17:a0:3c:88:78:17:c9:01:13:af:6a:92:d8:57:ca:24:35:80: ae:30:d6:d5:17:29:f1:58:4f:28:72:96:d1:17:cb:46:c9:e0: 76:97:2f:ef:31:5e:a3:45:f3:0f:84:8b:1f:83:3d:cc:37:91: d8:30:a9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuxLjRS59TCcR4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDYwZTM2ODktYzlkYS00YTY4LTg5YmUtZmE0YTljMjYwOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjan/PHLfrwYQNwC6qiksWeahWfMBwG0NgMuF 6vS2+dhiF9VaxZYtKCIbUjO1S9SigtVAyQFH++fYA+NQzOu6FESeX1F+xPlSdl0O 6Qh9TxqBOQS5LC6ojEncDxq6UG0/4uAKTh/JELjmmM6oQ8hru0h1rBqjMD0eUXc9 m88emzTgwSBv2lz/3eJWeHl8kVqGok/UdVXO6SMcoWuca3jwPPpiv2wlCYuot2oI xivloi2FYecKVxMK4JtuXoETH0M6kPbttKX7gRosOo6foX+OFU2hG8Bs4zO8Tv4+ qAAIkCv28kB3qfGJe9TRpRLZNAEezI/2+nZISSbui6+uJUEg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDGeCeVoiSsv0Mwcwi7/lj9IbcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWVmZWQzOTAtYWZhOS0z ZTYzLTk5YTAtODJiMzU0NmRkZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2t3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ+P1uPiMFIcDRi4swHngU0Jej3yyJBdcndS2UgJviQtjrXBF7w8t2o 6mqw7hWUZEfHh+MYwGswXDxOh70QU9C97ku5zM8lZZRvW1/PRzvcgIz7hEgKlvqf tpOv/XDJ+VpaqF1fprECR0fN4WGN5H7lujZGy+68Ai4WlyoYj2h0KrdjZR08g21D MyVuXQd25JW3cA5UrnWiSH9EA/jCKB8Yd1MzjbIzAvIuR6Pnoz68BYURpNf8At/F ozB3Umscm0Ra8StlFRegPIh4F8kBE69qkthXyiQ1gK4w1tUXKfFYTyhyltEXy0bJ 4HaXL+8xXqNF8w+Eix+DPcw3kdgwqZY= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:39 2025 by rpki-client