$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa File: 598bf124-57c3-3876-867e-23f6de1c1741.roa (raw, json) Hash identifier: sIpL41sja3tBu8W2kgxmJgV126lEgjsItLpaPpaUJOs= Subject key identifier: BB:14:3C:49:D0:8B:61:2C:B5:BA:B6:66:3D:FF:27:0E:D6:BB:84:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA533C6DEC9F9A212BFF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:53:3c:6d:ec:9f:9a:21:2b:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8449a6e1-89de-4e07-ad11-b6d95f51ed51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:1f:d3:91:d1:26:e3:b6:cb:4c:0c:f1:5d: 10:55:a5:aa:89:63:8d:d8:9b:b9:33:3a:3a:42:c1: 8f:e6:ca:e4:ae:04:3b:b9:4b:68:84:20:77:19:45: 5c:d0:50:68:04:e1:e9:6d:03:28:cf:e8:3c:bd:6e: e2:7a:bd:e6:c8:40:fb:a8:f3:b7:c6:0a:71:ef:90: 9d:36:ab:cf:e7:c5:67:4a:a5:60:10:49:2a:bd:05: bb:37:dc:fc:c5:cd:1d:4b:9d:c2:1b:62:6f:8e:c5: 62:86:51:48:d1:04:b5:cd:9d:52:93:7a:64:90:69: 8b:63:52:7a:1d:57:de:b1:58:8a:e0:ff:54:1f:70: 2b:c1:35:ba:2c:42:5a:f6:5a:b3:7b:27:6b:02:07: ce:5e:94:b4:e9:b0:6e:a5:75:7a:32:11:fd:d0:93: a9:46:0e:04:a4:04:c5:2e:76:59:c8:b3:cc:4d:17: b9:bd:43:b8:9e:6e:4e:78:15:20:63:80:c4:88:70: a4:66:ac:19:80:12:bd:0e:5e:bc:11:d9:2f:b3:f5: 74:15:22:8d:fe:05:c5:c1:c7:b9:65:dc:44:6e:4e: 9f:b2:a4:82:f9:39:f3:be:c7:2b:14:81:f1:b5:6b: 18:df:34:6f:0a:94:93:77:7f:a2:c9:bd:6d:0f:21: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:14:3C:49:D0:8B:61:2C:B5:BA:B6:66:3D:FF:27:0E:D6:BB:84:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:87:92:67:71:ed:e2:3d:fc:36:90:53:f5:83:24:62:aa:72: 08:5c:fb:d9:fc:71:69:71:f5:ce:2e:64:4d:2e:23:aa:13:6b: 4f:3e:91:af:2f:c8:3f:ce:2a:a4:89:85:96:c3:2c:dc:da:9e: f5:8d:6b:bf:5c:dd:2e:43:76:7b:7e:ab:7f:f2:f6:12:43:b8: e7:05:3d:1e:45:d0:30:3c:1d:53:64:8f:b0:c1:69:9a:c5:e7: 48:31:09:cd:4a:24:38:79:9b:bc:15:e2:bf:fb:33:d5:71:02: ab:8f:ce:30:66:3b:c8:27:37:a7:b3:60:58:91:ec:4b:39:58: 5c:ed:6f:33:9b:5c:96:43:f1:37:f8:32:00:55:e1:b3:bf:1a: 86:c7:0b:9b:fc:16:3f:7e:8b:7b:7f:05:61:be:8d:ea:be:16: b5:fa:48:f4:00:23:a9:b5:69:92:81:f6:37:f7:7c:56:ef:4c: 57:3f:79:f2:f1:5a:bf:2e:71:7d:07:1d:4f:74:77:81:e6:b7: c1:26:89:0f:b4:fd:ac:ca:75:c6:27:0f:59:2a:d5:4f:ea:ca: e1:ee:eb:a6:06:cf:ae:7f:64:2a:87:9b:46:b8:e0:c6:72:54: fc:fe:f7:0b:18:e4:3f:d3:a3:52:10:c6:c3:e2:ff:80:13:a5: 7a:dc:fc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulM8beyfmiEr/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODQ0OWE2ZTEtODlkZS00ZTA3LWFkMTEtYjZkOTVmNTFlZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYQf05HRJuO2y0wM8V0QVaWqiWON2Ju5Mzo6 QsGP5srkrgQ7uUtohCB3GUVc0FBoBOHpbQMoz+g8vW7ier3myED7qPO3xgpx75Cd NqvP58VnSqVgEEkqvQW7N9z8xc0dS53CG2JvjsVihlFI0QS1zZ1Sk3pkkGmLY1J6 HVfesViK4P9UH3ArwTW6LEJa9lqzeydrAgfOXpS06bBupXV6MhH90JOpRg4EpATF LnZZyLPMTRe5vUO4nm5OeBUgY4DEiHCkZqwZgBK9Dl68Edkvs/V0FSKN/gXFwce5 ZdxEbk6fsqSC+TnzvscrFIHxtWsY3zRvCpSTd3+iyb1tDyH3pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsUPEnQi2Estbq2Zj3/Jw7Wu4RsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTk4YmYxMjQtNTdjMy0z ODc2LTg2N2UtMjNmNmRlMWMxNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqHkmdx7eI9/DaQU/WDJGKqcghc+9n8cWlx9c4uZE0uI6oTa08+ka8v yD/OKqSJhZbDLNzanvWNa79c3S5Ddnt+q3/y9hJDuOcFPR5F0DA8HVNkj7DBaZrF 50gxCc1KJDh5m7wV4r/7M9VxAquPzjBmO8gnN6ezYFiR7Es5WFztbzObXJZD8Tf4 MgBV4bO/GobHC5v8Fj9+i3t/BWG+jeq+FrX6SPQAI6m1aZKB9jf3fFbvTFc/efLx Wr8ucX0HHU90d4Hmt8EmiQ+0/azKdcYnD1kq1U/qyuHu66YGz65/ZCqHm0a44MZy VPz+9wsY5D/To1IQxsPi/4ATpXrc/KE= -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:03 2025 by rpki-client