$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/514bc400-999f-3f9f-a607-1f2c1d888890.roa File: 514bc400-999f-3f9f-a607-1f2c1d888890.roa (raw, json) Hash identifier: 6P4DslFJkU7SxK9Ayw1um3UAdRxG1fU2Y4V3lyzzM4M= Subject key identifier: E7:73:49:A1:E9:65:60:41:98:2B:36:4F:A5:E2:BC:FF:DA:99:AC:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADBCD90E9D65558E7CDE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/514bc400-999f-3f9f-a607-1f2c1d888890.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 75.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:db:cd:90:e9:d6:55:58:e7:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5ae93962-832b-40eb-9281-864381821d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:93:9d:6b:0e:b4:7b:1f:b7:40:47:d2:9f: 27:f4:22:71:ae:4a:90:6d:19:f0:8f:37:0b:16:8a: 75:ca:53:df:0e:6d:a5:cb:46:2f:2a:15:31:d4:e5: 8d:b2:10:39:24:3e:24:c8:15:64:d4:71:38:8e:40: f5:9f:b7:6b:5f:ae:0a:57:0c:96:a5:66:e5:bd:18: eb:79:2b:01:f1:44:22:8d:7d:64:1b:e6:1b:de:4e: 75:64:2f:cf:07:37:0c:2f:49:49:cf:e0:11:1a:c0: 94:df:6b:ed:58:74:f2:77:74:de:f4:05:f8:2b:b6: 4d:4f:3a:0a:cc:6a:40:f1:7c:8c:89:32:42:47:4e: 49:20:8a:2a:db:b4:29:2c:bd:04:b5:4c:1f:f9:f6: 82:4e:2e:49:df:9d:e9:67:49:4d:18:8e:0f:d2:80: 85:6d:4b:ac:ef:a4:57:22:74:1e:23:e7:f5:7f:75: 4c:1e:4e:3a:b4:36:15:c8:b7:ed:e2:0e:c1:2e:0d: fc:52:7a:e2:9f:d9:38:d4:4b:b8:d9:87:d6:ef:bf: 12:31:93:de:76:e5:ec:6f:16:4c:a2:8b:12:4b:ed: 26:14:e5:f8:b4:30:48:ff:69:79:58:75:20:9f:22: 27:8e:d3:bb:ae:71:9c:34:6f:21:c1:aa:ad:78:c1: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:73:49:A1:E9:65:60:41:98:2B:36:4F:A5:E2:BC:FF:DA:99:AC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/514bc400-999f-3f9f-a607-1f2c1d888890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e6:90:9f:22:f8:d8:1b:03:ee:72:42:7e:1c:05:be:89:df: 7d:cc:72:45:be:ca:32:4b:51:b3:00:2d:d1:e1:70:b0:f6:21: 88:4d:a9:f0:f9:0e:81:c6:7f:b7:d8:8e:5b:33:10:f3:ad:3b: 84:00:84:a2:91:e9:bd:77:f9:1a:3a:0a:3e:98:e5:19:78:a7: b6:3b:07:2e:f1:d5:8d:00:a9:82:ee:32:ab:6f:a0:b0:fb:f3: 3d:9b:2f:5b:3b:1d:5b:43:77:5e:be:25:a6:da:83:64:02:1b: 18:cd:56:32:a1:0a:0e:40:2c:ab:86:c5:5f:73:cc:0c:5c:6c: 0f:9e:de:12:48:b5:d2:ec:12:af:82:7e:77:41:ed:6f:e8:cb: 5f:bc:a1:1f:b9:f6:63:16:68:36:62:92:4e:07:ee:a9:ab:e0: 05:02:67:66:c0:7e:10:ca:83:4b:85:0f:0b:5b:40:7a:10:1e: d4:39:04:5c:4f:b6:84:2f:3c:b2:24:1e:45:bf:b6:62:72:05: 68:19:41:dc:b1:ac:f9:eb:01:4c:67:3c:07:c8:0c:99:0f:8f: 5b:27:39:75:fd:e3:08:4a:8e:f0:27:93:52:45:b6:c5:33:71: 39:ee:f3:98:94:e6:50:2a:b0:35:15:35:09:65:54:80:c5:88: 95:86:de:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutvNkOnWVVjnzeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWFlOTM5NjItODMyYi00MGViLTkyODEtODY0MzgxODIxZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxqTnWsOtHsft0BH0p8n9CJxrkqQbRnwjzcL Fop1ylPfDm2ly0YvKhUx1OWNshA5JD4kyBVk1HE4jkD1n7drX64KVwyWpWblvRjr eSsB8UQijX1kG+Yb3k51ZC/PBzcML0lJz+ARGsCU32vtWHTyd3Te9AX4K7ZNTzoK zGpA8XyMiTJCR05JIIoq27QpLL0EtUwf+faCTi5J353pZ0lNGI4P0oCFbUus76RX InQeI+f1f3VMHk46tDYVyLft4g7BLg38Unrin9k41Eu42YfW778SMZPeduXsbxZM oosSS+0mFOX4tDBI/2l5WHUgnyInjtO7rnGcNG8hwaqteMEqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdzSaHpZWBBmCs2T6XivP/amaywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTE0YmM0MDAtOTk5Zi0z ZjlmLWE2MDctMWYyYzFkODg4ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrmkJ8i+NgbA+5yQn4cBb6J333MckW+yjJLUbMALdHhcLD2IYhNqfD5 DoHGf7fYjlszEPOtO4QAhKKR6b13+Ro6Cj6Y5Rl4p7Y7By7x1Y0AqYLuMqtvoLD7 8z2bL1s7HVtDd16+Jabag2QCGxjNVjKhCg5ALKuGxV9zzAxcbA+e3hJItdLsEq+C fndB7W/oy1+8oR+59mMWaDZikk4H7qmr4AUCZ2bAfhDKg0uFDwtbQHoQHtQ5BFxP toQvPLIkHkW/tmJyBWgZQdyxrPnrAUxnPAfIDJkPj1snOXX94whKjvAnk1JFtsUz cTnu85iU5lAqsDUVNQllVIDFiJWG3nI= -----END CERTIFICATE-----Generated at Fri May 9 02:58:33 2025 by rpki-client