$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8e70db2-a16b-34b7-b0cd-00698ceda65e.roa File: b8e70db2-a16b-34b7-b0cd-00698ceda65e.roa (raw, json) Hash identifier: fIEE1tY4KQ/8gGUa7MEt0Zk99QzAZKyXxS53/VRGAvQ= Subject key identifier: 25:A5:68:35:5D:51:22:B6:FC:A8:BC:55:E1:49:1F:8D:FC:B8:91:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAF18450DE565A8D393100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8e70db2-a16b-34b7-b0cd-00698ceda65e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.104.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:f1:84:50:de:56:5a:8d:39:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ece329d5-1e69-497d-a499-af8b22077f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:ce:4f:59:88:93:45:7f:6d:2a:f4:cb:93: 0c:68:bd:b1:64:ab:88:9b:10:02:f9:3b:c3:aa:87: 2c:5d:11:42:e1:80:48:59:fb:7b:4c:29:89:be:da: 04:f6:cd:8d:26:55:c8:27:1e:bc:1f:dd:24:cd:21: 22:72:0b:f1:a9:75:2b:4b:68:e8:77:1b:b0:ff:3a: e3:13:9a:4c:89:d5:37:81:d3:bc:41:fe:3c:0f:88: 21:0c:e7:89:d1:1d:c6:2d:58:58:0b:9f:de:5f:4f: 68:40:70:64:cf:43:de:0e:79:e3:29:07:ee:51:0d: ae:1c:e2:e9:da:41:46:b9:b2:66:a8:ac:ed:87:5c: 57:b2:31:69:2a:c4:1e:19:0a:51:8a:7d:be:e7:de: d1:45:23:27:a1:16:53:2d:a8:c3:4c:56:82:36:f3: c1:6e:78:da:72:fe:1a:84:37:05:92:33:8a:d5:87: 14:fb:64:22:ea:4d:43:78:5b:06:df:e8:8c:54:02: 88:e1:2e:6d:e0:7d:4f:c4:f3:2f:3c:cf:c9:d8:bd: 97:d6:39:34:9f:48:e8:5d:f9:ef:9d:48:b6:8f:26: 6e:0a:92:3d:a6:30:2b:b7:25:27:3b:c3:3b:53:c1: b5:b8:e2:4f:5c:fa:1e:e9:bd:f4:2a:30:a7:6e:e5: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:68:35:5D:51:22:B6:FC:A8:BC:55:E1:49:1F:8D:FC:B8:91:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8e70db2-a16b-34b7-b0cd-00698ceda65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e5:c6:87:b8:56:5e:a5:9b:5e:b4:4b:2a:95:c9:51:7e:36: 60:2d:78:34:ba:b6:9e:6a:87:63:93:2d:57:8a:9c:61:87:82: 84:db:a6:e2:86:f0:ce:48:0f:cb:58:75:27:cb:9a:7d:a4:eb: 5e:34:81:48:25:8c:ef:e9:3f:e9:20:d8:9f:29:2c:cb:c3:28: 5a:73:be:b4:fd:a0:c8:54:26:fd:04:20:5e:20:a5:8b:ad:f9: b2:72:87:bd:76:44:dd:bb:54:88:5d:80:b7:ca:47:10:30:09: 10:5e:eb:e0:b9:74:53:3f:06:6c:6f:00:cb:30:93:7b:5b:35: e2:4f:25:c4:4c:f1:94:12:68:de:09:36:cb:8a:3f:03:b9:06: 1d:75:a7:73:ec:3c:4b:56:25:ae:e0:a8:d0:e2:d9:82:68:fc: 41:ae:2d:98:76:fe:d9:97:81:62:14:35:94:d4:61:d2:8b:8a: c2:fc:09:6b:f3:31:86:55:f1:3b:00:85:86:fe:a6:75:87:f3: 0d:e0:ee:b8:c1:72:60:29:e7:7e:e0:44:06:45:da:16:60:74: b4:49:6c:c5:d2:79:8e:32:f7:7b:32:86:58:ec:c8:9a:ef:8e: e4:27:58:9d:1d:23:92:97:8f:a2:11:b8:fd:81:ec:a5:06:3b: af:90:ae:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuvGEUN5WWo05MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWNlMzI5ZDUtMWU2OS00OTdkLWE0OTktYWY4YjIyMDc3ZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV3OT1mIk0V/bSr0y5MMaL2xZKuImxAC+TvD qocsXRFC4YBIWft7TCmJvtoE9s2NJlXIJx68H90kzSEicgvxqXUrS2jodxuw/zrj E5pMidU3gdO8Qf48D4ghDOeJ0R3GLVhYC5/eX09oQHBkz0PeDnnjKQfuUQ2uHOLp 2kFGubJmqKzth1xXsjFpKsQeGQpRin2+597RRSMnoRZTLajDTFaCNvPBbnjacv4a hDcFkjOK1YcU+2Qi6k1DeFsG3+iMVAKI4S5t4H1PxPMvPM/J2L2X1jk0n0joXfnv nUi2jyZuCpI9pjArtyUnO8M7U8G1uOJPXPoe6b30KjCnbuUygQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWlaDVdUSK2/Ki8VeFJH438uJHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhlNzBkYjItYTE2Yi0z NGI3LWIwY2QtMDA2OThjZWRhNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/lxoe4Vl6lm160SyqVyVF+NmAteDS6tp5qh2OTLVeKnGGHgoTbpuKG 8M5ID8tYdSfLmn2k6140gUgljO/pP+kg2J8pLMvDKFpzvrT9oMhUJv0EIF4gpYut +bJyh712RN27VIhdgLfKRxAwCRBe6+C5dFM/BmxvAMswk3tbNeJPJcRM8ZQSaN4J NsuKPwO5Bh11p3PsPEtWJa7gqNDi2YJo/EGuLZh2/tmXgWIUNZTUYdKLisL8CWvz MYZV8TsAhYb+pnWH8w3g7rjBcmAp537gRAZF2hZgdLRJbMXSeY4y93syhljsyJrv juQnWJ0dI5KXj6IRuP2B7KUGO6+QrsQ= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:42 2025 by rpki-client