$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89f140f4-e63b-3ddd-89f2-282f589bdec6.roa File: 89f140f4-e63b-3ddd-89f2-282f589bdec6.roa (raw, json) Hash identifier: 4o4xzOmYF+Awa8dMbulISmAq2KKXMUHYKfNQTbB2YGY= Subject key identifier: 4A:52:6E:67:58:80:47:CE:CA:B0:0D:BE:9E:88:27:15:51:5C:8E:CE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA55BA73DDF13B0BFC9300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89f140f4-e63b-3ddd-89f2-282f589bdec6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:55:ba:73:dd:f1:3b:0b:fc:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8da305f1-f0d5-40bc-a400-6962d6d1341f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4b:91:06:2e:c7:ce:6c:6e:17:1a:f9:e0:a0: ee:71:b6:df:5e:c4:c1:76:56:f9:80:56:89:ff:cc: 17:00:db:b6:2c:df:ba:23:17:8d:7d:5f:1e:e7:5f: fc:50:e8:9c:29:13:95:2a:f1:47:2d:6c:32:55:04: ab:d9:c1:6a:38:2e:89:16:e8:ed:5e:44:5e:bb:ec: 57:d9:5b:8e:e1:75:aa:97:a4:e5:98:31:66:e6:40: 85:f5:ea:ff:fe:40:b8:99:0a:9b:ed:d4:5b:36:78: e3:5e:73:1d:68:fb:47:96:05:c6:70:cb:99:8e:19: 7b:92:09:34:25:d9:d3:28:50:45:7e:e0:52:2f:4a: 1f:b8:72:d5:45:56:ab:11:4f:88:27:50:cd:64:fe: 08:2f:76:7f:84:68:e1:29:11:f6:6e:e9:6e:88:3a: c4:4d:7d:a7:51:c6:84:8e:df:b0:58:1e:df:82:ae: 40:77:e0:04:03:91:55:58:dd:02:e4:f9:47:0e:09: c4:03:5e:63:89:bd:10:bf:ba:6b:1e:4b:ac:37:0c: 6b:0c:c8:21:1f:0c:9a:64:a2:a9:3d:85:1b:83:f6: 23:48:11:c5:fe:52:59:e8:29:bb:f3:f6:86:9c:f5: 3d:74:b4:96:96:f6:2e:94:ef:67:54:26:92:fd:6d: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:6E:67:58:80:47:CE:CA:B0:0D:BE:9E:88:27:15:51:5C:8E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89f140f4-e63b-3ddd-89f2-282f589bdec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c6:5e:e6:d0:a5:18:31:6d:ae:94:cf:87:b4:83:54:5e:8b: 50:3f:4c:d4:40:d6:98:70:26:30:14:2b:8d:17:97:74:ca:82: 52:8c:33:92:54:c1:87:66:87:77:54:db:a0:08:98:7d:62:f9: 16:ee:aa:69:fd:61:aa:0a:9a:47:cf:f3:46:39:39:4f:cc:c1: 52:2b:d3:f7:02:1f:83:36:00:7c:f0:c8:b4:50:03:39:ef:4d: 08:24:3f:9e:ed:73:f4:3c:62:0d:65:c5:20:aa:86:cf:16:33: d3:d0:4e:cb:6c:0c:b2:4f:16:7b:90:96:61:5a:e4:fe:3b:c2: 45:e1:4c:cf:b5:03:d0:c1:c6:ed:d8:de:6f:4e:b1:43:d4:c7: f2:25:b8:a7:8b:c1:84:fe:b4:f5:37:fe:ef:ec:31:2f:d3:3a: 7e:d0:8c:94:16:05:fb:d3:0a:90:70:9c:25:97:fb:f3:21:ac: 89:c0:14:3e:34:ba:98:b4:3d:0a:08:59:45:37:50:e5:5a:6b: 15:06:82:f1:c3:5d:00:52:6c:19:ed:f2:1a:4e:39:02:f3:c6: ed:0f:45:1f:e4:71:03:1d:63:01:80:61:91:d2:63:74:99:dd: 87:8c:9f:01:33:1d:14:18:37:f2:c1:da:1d:69:57:24:ae:22: 4b:ec:03:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulW6c93xOwv8kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGRhMzA1ZjEtZjBkNS00MGJjLWE0MDAtNjk2MmQ2ZDEzNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEuRBi7HzmxuFxr54KDucbbfXsTBdlb5gFaJ /8wXANu2LN+6IxeNfV8e51/8UOicKROVKvFHLWwyVQSr2cFqOC6JFujtXkReu+xX 2VuO4XWql6TlmDFm5kCF9er//kC4mQqb7dRbNnjjXnMdaPtHlgXGcMuZjhl7kgk0 JdnTKFBFfuBSL0ofuHLVRVarEU+IJ1DNZP4IL3Z/hGjhKRH2buluiDrETX2nUcaE jt+wWB7fgq5Ad+AEA5FVWN0C5PlHDgnEA15jib0Qv7prHkusNwxrDMghHwyaZKKp PYUbg/YjSBHF/lJZ6Cm78/aGnPU9dLSWlvYulO9nVCaS/W0nYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpSbmdYgEfOyrANvp6IJxVRXI7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODlmMTQwZjQtZTYzYi0z ZGRkLTg5ZjItMjgyZjU4OWJkZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArGXubQpRgxba6Uz4e0g1Rei1A/TNRA1phwJjAUK40Xl3TKglKMM5JU wYdmh3dU26AImH1i+Rbuqmn9YaoKmkfP80Y5OU/MwVIr0/cCH4M2AHzwyLRQAznv TQgkP57tc/Q8Yg1lxSCqhs8WM9PQTstsDLJPFnuQlmFa5P47wkXhTM+1A9DBxu3Y 3m9OsUPUx/IluKeLwYT+tPU3/u/sMS/TOn7QjJQWBfvTCpBwnCWX+/MhrInAFD40 upi0PQoIWUU3UOVaaxUGgvHDXQBSbBnt8hpOOQLzxu0PRR/kcQMdYwGAYZHSY3SZ 3YeMnwEzHRQYN/LB2h1pVySuIkvsA+I= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:57 2025 by rpki-client