$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db33167f-24a6-381e-94c2-62c7691fc986.roa File: db33167f-24a6-381e-94c2-62c7691fc986.roa (raw, json) Hash identifier: AV2xRQbGP7Kk4do3i81BrIqgXLZg/uY13WETzL3gOys= Subject key identifier: 92:AA:76:4D:AB:41:D1:B4:F6:15:CF:5C:16:BC:2B:70:0B:5D:C9:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB0E36507C5C658DF3DA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db33167f-24a6-381e-94c2-62c7691fc986.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 75.107.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:0e:36:50:7c:5c:65:8d:f3:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=71d1b36f-6497-4fe0-9e14-1c9413570613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:4b:52:7c:8c:05:33:d3:3a:3b:bf:66:5b: 5a:87:e8:11:39:4b:55:f5:c4:b7:7c:c8:c0:9d:02: 56:53:74:5b:45:6a:53:1e:ff:a2:05:bb:28:d2:73: bf:a0:6b:0c:14:ae:df:2c:d3:c7:d4:cc:c4:88:fc: aa:12:5d:35:ba:c5:55:5b:f3:75:36:4e:e8:53:48: 92:69:62:af:7a:6c:78:f0:1f:f6:4f:8b:5f:84:c8: 3e:0c:43:0f:fa:f8:a3:21:ee:cd:94:c2:ac:ac:c9: 2d:87:b2:88:54:ae:db:ef:5b:3c:dc:d8:41:74:2a: 60:58:9c:25:ec:64:45:83:3c:70:57:01:fb:53:38: b1:34:0d:e0:04:57:f2:33:28:ac:eb:e2:8d:c0:e3: 6c:b9:f6:d1:69:6d:9c:20:87:bc:d7:2f:45:28:87: ca:93:3c:e8:bf:a5:21:b3:91:9b:d7:a1:66:a3:18: b5:f0:28:0a:3d:e7:42:fb:be:4e:5e:0d:2e:ab:87: 8a:b6:40:1c:bc:f8:da:18:d7:67:c3:08:e2:66:cb: e4:85:19:10:ac:dc:7c:35:40:09:25:5f:5e:05:ad: 5a:ed:32:61:d5:52:6b:21:3d:c2:b4:f0:64:27:b7: 0f:33:bb:c0:9d:6a:40:fa:47:a7:43:11:77:a6:a4: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AA:76:4D:AB:41:D1:B4:F6:15:CF:5C:16:BC:2B:70:0B:5D:C9:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db33167f-24a6-381e-94c2-62c7691fc986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c4:18:6a:70:03:f1:b6:6e:e6:80:13:17:58:3e:46:32:4d: 55:19:5a:08:6b:3c:96:f5:5f:6e:0a:dd:bc:d3:2f:07:62:b5: 31:f2:d7:27:f3:8d:e7:64:2e:51:e3:2c:29:fc:f7:70:ae:70: 1d:cb:5c:89:83:8b:72:32:f0:ee:8b:a6:71:2e:e6:ca:c5:72: 50:92:b8:a6:0e:ac:82:67:68:6d:e2:b8:65:28:5b:12:08:70: f2:91:a7:0e:86:dd:3a:8e:0e:ec:00:3d:c0:37:e8:65:00:41: 80:ce:79:b6:8f:70:18:c8:7f:3b:63:b3:3f:f5:00:e2:09:cf: eb:7a:15:87:d7:8a:03:b9:5e:b5:9a:59:c0:c5:72:26:53:1a: eb:07:4d:53:9a:18:8b:4b:0c:b0:c6:9a:d2:03:b4:41:da:ca: 3a:de:13:c9:1d:bc:05:4e:00:50:d8:d1:4a:9d:45:61:f2:03: a1:9f:27:2a:b8:d5:35:93:15:c4:72:30:65:4c:95:fa:b7:60: 31:db:42:c2:1b:20:85:38:90:99:97:8d:03:cc:65:95:aa:67: d3:73:f4:74:96:4a:e7:6a:48:fc:44:91:a1:f0:74:50:07:f2: 2a:7b:f4:1b:63:14:fd:9f:c0:36:9b:e3:e2:41:91:b2:10:e7: 15:00:a2:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuw42UHxcZY3z2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzFkMWIzNmYtNjQ5Ny00ZmUwLTllMTQtMWM5NDEzNTcwNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApblLUnyMBTPTOju/Zltah+gROUtV9cS3fMjA nQJWU3RbRWpTHv+iBbso0nO/oGsMFK7fLNPH1MzEiPyqEl01usVVW/N1Nk7oU0iS aWKvemx48B/2T4tfhMg+DEMP+vijIe7NlMKsrMkth7KIVK7b71s83NhBdCpgWJwl 7GRFgzxwVwH7UzixNA3gBFfyMyis6+KNwONsufbRaW2cIIe81y9FKIfKkzzov6Uh s5Gb16Fmoxi18CgKPedC+75OXg0uq4eKtkAcvPjaGNdnwwjiZsvkhRkQrNx8NUAJ JV9eBa1a7TJh1VJrIT3CtPBkJ7cPM7vAnWpA+kenQxF3pqQkiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKqdk2rQdG09hXPXBa8K3ALXcmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGIzMzE2N2YtMjRhNi0z ODFlLTk0YzItNjJjNzY5MWZjOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2sSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/EGGpwA/G2buaAExdYPkYyTVUZWghrPJb1X24K3bzTLwditTHy1yfz jedkLlHjLCn893CucB3LXImDi3Iy8O6LpnEu5srFclCSuKYOrIJnaG3iuGUoWxII cPKRpw6G3TqODuwAPcA36GUAQYDOebaPcBjIfztjsz/1AOIJz+t6FYfXigO5XrWa WcDFciZTGusHTVOaGItLDLDGmtIDtEHayjreE8kdvAVOAFDY0UqdRWHyA6GfJyq4 1TWTFcRyMGVMlfq3YDHbQsIbIIU4kJmXjQPMZZWqZ9Nz9HSWSudqSPxEkaHwdFAH 8ip79BtjFP2fwDab4+JBkbIQ5xUAojs= -----END CERTIFICATE-----Generated at Sun Apr 27 17:59:43 2025 by rpki-client