$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d36170d4-298d-3e3b-9bd3-0530c3b0e8a0.roa File: d36170d4-298d-3e3b-9bd3-0530c3b0e8a0.roa (raw, json) Hash identifier: NmUikjVAQlCMOJgrtz60T9d7NgdmlEqWWXKF/imvy08= Subject key identifier: DA:FF:75:E7:29:D3:F8:93:B0:8C:7C:6A:EE:41:0D:16:ED:7E:D1:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA658B69DC22F88B18E000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d36170d4-298d-3e3b-9bd3-0530c3b0e8a0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.104.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:65:8b:69:dc:22:f8:8b:18:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7e59cc6e-07f8-4ff6-a311-90bcbeab5d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:a5:7b:40:c3:25:91:63:60:4d:15:a5:d1: fb:cb:fe:fa:35:a0:41:81:cf:b4:b8:2d:ef:24:55: 1f:7a:9b:95:89:5c:33:3b:07:8d:0a:b8:ae:7a:a8: 83:2a:57:1a:68:d4:0b:64:df:67:d1:a8:df:57:19: 82:2f:d6:fa:f1:bb:1a:28:50:f5:5e:9f:51:cb:96: 2e:b3:05:7e:81:b4:29:7a:d9:7d:07:1a:f5:24:63: 64:49:c9:48:92:13:86:51:2b:9e:f8:97:35:f7:40: d5:30:7a:01:a6:18:44:cb:11:01:0b:da:4f:6e:9f: a1:9a:96:ae:b9:2d:7c:c9:f5:90:47:3a:c4:3b:31: dc:9c:d7:53:81:2a:2f:0f:f1:17:15:74:e3:67:b3: f8:ec:de:88:55:a3:0f:47:25:aa:43:29:47:03:14: d3:6e:87:d5:77:dc:4b:e5:cb:64:ba:cb:f2:ce:32: b1:1b:8e:c9:32:78:fc:6b:84:4e:70:a4:fd:70:8b: 90:e3:fb:b7:4b:e0:0d:75:b6:e8:b5:ce:17:07:b2: f4:7c:61:24:9e:e9:8c:b6:a2:a4:23:d2:ec:c9:3c: 83:82:08:5d:88:a2:87:d6:aa:d3:6d:c3:69:57:3e: e1:84:a8:a9:47:c2:a3:d5:af:2b:d3:d1:2b:e8:8c: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FF:75:E7:29:D3:F8:93:B0:8C:7C:6A:EE:41:0D:16:ED:7E:D1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d36170d4-298d-3e3b-9bd3-0530c3b0e8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:85:d0:29:5e:45:37:10:e1:ec:6e:7b:2e:61:bd:a1:32:8d: 5b:2b:e9:ad:04:be:1e:cc:2e:d7:40:54:15:4b:fd:ea:39:e3: bc:bf:f2:c5:45:28:19:11:ec:6a:b7:e4:25:90:db:02:5f:5f: 0a:6c:bc:2d:47:2d:ca:db:16:d0:bc:51:4a:83:60:b9:25:b6: f4:cd:53:5f:50:ca:91:fe:bf:c2:cd:5a:e8:da:c4:40:f2:dc: 77:7a:6e:4e:de:7c:9e:fa:fa:d8:ab:a6:2f:6f:8e:05:e0:81: 0a:49:8e:09:d9:74:ac:e9:e2:08:74:7b:85:6e:2d:42:7b:5e: 60:4f:b5:9d:d5:46:49:a8:35:86:ce:b7:9b:65:97:ab:e4:d2: 1f:20:5f:59:e6:02:c9:79:2b:84:b1:44:11:19:44:b9:ba:d3: 4d:3e:d5:50:df:69:08:eb:d4:d3:9b:c1:a3:15:60:d9:a0:04: 90:81:09:5b:39:cd:d9:45:74:87:21:f0:be:c7:86:1c:c4:20: 0b:e0:da:51:e5:39:79:93:07:b4:dc:27:41:a5:8c:66:bb:65: a7:60:98:5b:27:ac:f3:e0:8c:e3:52:44:8d:6d:34:b6:c8:48: f4:b0:6d:5a:a0:13:7a:64:da:e8:1e:1b:7e:ac:68:aa:0a:3f: d8:26:c4:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumWLadwi+IsY4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2U1OWNjNmUtMDdmOC00ZmY2LWEzMTEtOTBiY2JlYWI1ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKale0DDJZFjYE0VpdH7y/76NaBBgc+0uC3v JFUfepuViVwzOweNCriueqiDKlcaaNQLZN9n0ajfVxmCL9b68bsaKFD1Xp9Ry5Yu swV+gbQpetl9Bxr1JGNkSclIkhOGUSue+Jc190DVMHoBphhEyxEBC9pPbp+hmpau uS18yfWQRzrEOzHcnNdTgSovD/EXFXTjZ7P47N6IVaMPRyWqQylHAxTTbofVd9xL 5ctkusvyzjKxG47JMnj8a4ROcKT9cIuQ4/u3S+ANdbbotc4XB7L0fGEknumMtqKk I9LsyTyDgghdiKKH1qrTbcNpVz7hhKipR8Kj1a8r09Er6IyafwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr/decp0/iTsIx8au5BDRbtftFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDM2MTcwZDQtMjk4ZC0z ZTNiLTliZDMtMDUzMGMzYjBlOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+F0CleRTcQ4exuey5hvaEyjVsr6a0Evh7MLtdAVBVL/eo547y/8sVF KBkR7Gq35CWQ2wJfXwpsvC1HLcrbFtC8UUqDYLkltvTNU19QypH+v8LNWujaxEDy 3Hd6bk7efJ76+tirpi9vjgXggQpJjgnZdKzp4gh0e4VuLUJ7XmBPtZ3VRkmoNYbO t5tll6vk0h8gX1nmAsl5K4SxRBEZRLm6000+1VDfaQjr1NObwaMVYNmgBJCBCVs5 zdlFdIch8L7HhhzEIAvg2lHlOXmTB7TcJ0GljGa7ZadgmFsnrPPgjONSRI1tNLbI SPSwbVqgE3pk2ugeG36saKoKP9gmxD4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:42 2025 by rpki-client