$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa File: 621e8f01-d538-37be-9158-db873dc19707.roa (raw, json) Hash identifier: wDYlQmqscKRxZqrtboLgUpAXYMhywROX7lB7FxCkVIY= Subject key identifier: 39:0E:11:EE:19:1B:A4:7B:43:92:86:AE:C2:69:D0:8B:CC:B1:19:D4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE01B244262E6F0FCE280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:1b:24:42:62:e6:f0:fc:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=eef74788-32d6-4920-81ae-13d5be70179b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9c:77:ea:33:0f:73:4b:22:04:40:80:2f:19: 88:3c:05:16:c1:ad:de:d8:b5:ff:86:c5:f8:65:1b: e6:cb:71:c8:47:50:0e:c7:26:05:73:3c:f1:f7:4a: 03:2c:b4:88:0a:f4:cc:1e:9d:dc:90:ca:e5:5c:49: 12:d2:98:23:23:d0:74:ce:ac:d2:a0:b1:ac:6e:15: 42:52:ab:ae:c7:62:39:ba:3a:0e:ba:15:cf:ff:51: 6e:5b:3a:60:43:04:5e:32:2e:16:5b:73:30:16:32: 62:36:7d:23:3f:39:d7:77:2f:76:5f:cb:7c:12:b2: 13:bc:62:bb:ec:8c:1a:2b:4e:c9:d8:ae:1a:80:49: 89:91:2d:14:23:de:72:ec:56:f0:42:e5:a0:d5:94: c1:9d:da:50:78:f0:09:58:79:e1:30:7c:5f:c3:e4: b9:ec:83:88:6a:cb:ae:f5:12:f0:d3:da:7f:42:72: 7d:31:1a:0e:5b:45:c4:38:82:62:e1:f2:40:87:f8: 47:64:a2:e8:99:d0:77:c0:7f:07:3f:ae:4b:2a:ef: ac:96:b1:87:77:4c:c1:41:96:c7:cd:9f:d5:b8:5e: c7:fe:ca:0c:c2:94:19:f7:c5:47:c7:2d:82:5d:21: 2a:6a:94:ba:87:76:de:b9:a3:da:a0:2e:77:34:a7: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0E:11:EE:19:1B:A4:7B:43:92:86:AE:C2:69:D0:8B:CC:B1:19:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/621e8f01-d538-37be-9158-db873dc19707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6a:b3:bc:18:04:6f:0b:64:fb:59:4d:38:79:cb:88:01:a6: 94:61:1a:c1:ec:ae:2f:55:49:33:3c:3c:89:69:08:62:ef:96: 04:b0:cc:dd:9e:a8:e7:f9:f3:17:db:b1:04:c1:7f:00:16:b6: d1:b2:3b:34:1a:0d:3d:1e:9e:e9:e4:08:7e:7f:38:e5:be:b2: 8e:63:ae:3b:85:86:b5:0c:fd:f9:ad:f4:39:f8:2e:f6:2a:e6: f4:9d:58:96:42:63:7a:09:77:ac:be:ab:24:c9:75:07:6b:2c: 2c:f8:41:40:14:db:be:91:6e:81:47:1e:64:32:29:ae:14:fa: ae:f1:b0:f8:1b:49:92:33:49:a8:52:b0:f2:23:47:e9:c9:04: c0:17:6d:63:92:fa:02:49:c8:20:04:28:8f:98:d8:ad:61:80: 22:d2:96:c0:b6:5c:e4:56:21:60:fd:81:da:5c:02:70:98:1f: 2e:47:df:29:3b:b3:42:e4:f2:0b:d0:75:6e:52:25:1a:9e:b9: ab:4e:ae:93:31:a9:c1:5c:0f:5c:56:0d:c7:96:d2:ca:25:32: ed:f2:37:fc:67:0c:c2:10:d4:23:ba:bb:11:be:c3:c2:85:49: 97:0a:30:27:95:a7:31:7a:53:f0:08:5a:03:ba:48:49:e6:fd: c8:d8:c6:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuAbJEJi5vD84oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWVmNzQ3ODgtMzJkNi00OTIwLTgxYWUtMTNkNWJlNzAxNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Zx36jMPc0siBECALxmIPAUWwa3e2LX/hsX4 ZRvmy3HIR1AOxyYFczzx90oDLLSICvTMHp3ckMrlXEkS0pgjI9B0zqzSoLGsbhVC Uquux2I5ujoOuhXP/1FuWzpgQwReMi4WW3MwFjJiNn0jPznXdy92X8t8ErITvGK7 7IwaK07J2K4agEmJkS0UI95y7FbwQuWg1ZTBndpQePAJWHnhMHxfw+S57IOIasuu 9RLw09p/QnJ9MRoOW0XEOIJi4fJAh/hHZKLomdB3wH8HP65LKu+slrGHd0zBQZbH zZ/VuF7H/soMwpQZ98VHxy2CXSEqapS6h3beuaPaoC53NKepdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkOEe4ZG6R7Q5KGrsJp0IvMsRnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjIxZThmMDEtZDUzOC0z N2JlLTkxNTgtZGI4NzNkYzE5NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFqs7wYBG8LZPtZTTh5y4gBppRhGsHsri9VSTM8PIlpCGLvlgSwzN2e qOf58xfbsQTBfwAWttGyOzQaDT0enunkCH5/OOW+so5jrjuFhrUM/fmt9Dn4LvYq 5vSdWJZCY3oJd6y+qyTJdQdrLCz4QUAU276RboFHHmQyKa4U+q7xsPgbSZIzSahS sPIjR+nJBMAXbWOS+gJJyCAEKI+Y2K1hgCLSlsC2XORWIWD9gdpcAnCYHy5H3yk7 s0Lk8gvQdW5SJRqeuatOrpMxqcFcD1xWDceW0solMu3yN/xnDMIQ1CO6uxG+w8KF SZcKMCeVpzF6U/AIWgO6SEnm/cjYxrg= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:39 2025 by rpki-client