$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa File: 6477d61b-0201-3736-9656-a4dbe46fd5f7.roa (raw, json) Hash identifier: DAmuf2SiTXImnj8eRZtP4B/PixjtFxT8feiz+jOwJD0= Subject key identifier: 81:E1:B1:D2:07:CB:8B:64:FF:E7:A9:EE:32:29:35:22:A7:5F:8D:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA53D42CD669ECC3B76220 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:53:d4:2c:d6:69:ec:c3:b7:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=885bd502-fbe3-482b-8cff-c9d635956eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:77:6c:9f:24:5a:ad:89:f9:02:06:05:0e: c5:96:91:7c:24:7f:ba:82:b6:93:50:46:f0:7b:d3: 29:47:32:ad:e7:5b:a8:5e:ec:85:c3:6c:a0:fd:8b: 5e:01:4c:9c:10:37:ef:6a:28:74:1a:fa:7a:b1:18: 81:66:16:f5:6c:8d:77:d0:53:21:61:03:33:87:19: 76:68:2d:6a:7e:b4:be:eb:5b:3c:72:d5:22:f0:0c: 95:bb:94:3b:ee:42:c8:05:c9:4a:f6:04:d6:ac:1f: 81:d9:da:5b:c5:68:7f:80:9d:4f:40:35:fa:f5:fe: 45:27:e8:f0:37:46:d6:53:cd:e3:0a:79:8c:7b:67: 74:dc:7a:22:c2:30:0d:7a:c1:90:ec:82:bb:3e:31: 6e:5c:4c:3f:78:f3:8f:58:b2:a3:62:96:9d:70:e1: d7:73:d3:b3:48:4e:b6:2e:52:03:58:0d:dc:5c:8e: 77:a2:28:87:45:c8:8a:68:57:56:2a:00:d2:ba:6d: 59:81:b3:33:48:65:d1:80:93:95:0d:01:f8:d7:79: a7:b2:b6:a4:9d:57:75:43:db:c1:c0:7b:fa:00:b0: 78:6b:01:0d:92:37:ab:76:83:41:a7:47:7d:2b:9d: 50:d8:10:8e:fa:6e:d9:58:f7:1f:5a:9b:63:29:5a: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E1:B1:D2:07:CB:8B:64:FF:E7:A9:EE:32:29:35:22:A7:5F:8D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4a:57:f1:88:13:7e:ef:45:79:61:20:4e:5e:5e:46:3b:23: cc:a6:3c:26:50:17:da:b0:83:c7:e2:ae:1d:22:e6:a6:b5:d1: 89:ad:1b:f0:9f:ef:7c:f8:9e:c4:da:ca:bb:07:e8:a1:32:23: df:d9:58:df:e6:f1:c7:17:b2:5b:fd:cb:5d:6f:f7:93:8f:c0: 90:47:da:16:c8:09:8e:80:bf:35:ec:59:56:9c:2a:3d:d4:4c: cd:3c:f2:fe:1d:e6:4f:09:4d:28:e9:30:1b:63:7a:c7:c9:1f: be:8e:e3:b0:9c:43:f8:66:90:87:17:d3:65:dc:ea:ad:39:88: b6:18:78:b5:1b:6e:68:bb:ba:63:44:ac:26:b2:4e:fa:c2:17: ab:2d:83:6c:ca:4b:99:92:c9:77:24:ca:7f:6d:71:6d:82:3c: f5:fc:db:1b:f5:34:e2:d1:7c:d1:48:98:18:35:83:da:27:0c: a5:97:81:1a:24:06:88:ab:fb:5f:d2:a3:71:6b:b2:38:5b:9d: d7:ae:9f:78:95:91:d8:5f:8c:62:ed:ce:59:c1:fc:d4:6f:ea: ac:d2:64:09:f2:27:89:5f:71:ae:69:39:c5:ff:96:9d:a4:e7: 2c:5e:e0:fa:3d:16:6a:84:ac:a5:8e:42:44:cb:06:86:15:d7: 21:c6:2d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulPULNZp7MO3YiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODg1YmQ1MDItZmJlMy00ODJiLThjZmYtYzlkNjM1OTU2ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaJ3bJ8kWq2J+QIGBQ7FlpF8JH+6graTUEbw e9MpRzKt51uoXuyFw2yg/YteAUycEDfvaih0Gvp6sRiBZhb1bI130FMhYQMzhxl2 aC1qfrS+61s8ctUi8AyVu5Q77kLIBclK9gTWrB+B2dpbxWh/gJ1PQDX69f5FJ+jw N0bWU83jCnmMe2d03HoiwjANesGQ7IK7PjFuXEw/ePOPWLKjYpadcOHXc9OzSE62 LlIDWA3cXI53oiiHRciKaFdWKgDSum1ZgbMzSGXRgJOVDQH413mnsraknVd1Q9vB wHv6ALB4awENkjerdoNBp0d9K51Q2BCO+m7ZWPcfWptjKVqpjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHhsdIHy4tk/+ep7jIpNSKnX41kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQ3N2Q2MWItMDIwMS0z NzM2LTk2NTYtYTRkYmU0NmZkNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtKV/GIE37vRXlhIE5eXkY7I8ymPCZQF9qwg8firh0i5qa10YmtG/Cf 73z4nsTayrsH6KEyI9/ZWN/m8ccXslv9y11v95OPwJBH2hbICY6AvzXsWVacKj3U TM088v4d5k8JTSjpMBtjesfJH76O47CcQ/hmkIcX02Xc6q05iLYYeLUbbmi7umNE rCayTvrCF6stg2zKS5mSyXckyn9tcW2CPPX82xv1NOLRfNFImBg1g9onDKWXgRok Boir+1/So3Frsjhbndeun3iVkdhfjGLtzlnB/NRv6qzSZAnyJ4lfca5pOcX/lp2k 5yxe4Po9FmqErKWOQkTLBoYV1yHGLQQ= -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:37 2025 by rpki-client