$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a17ef828-79f4-3e2d-afd5-07f55cd62328.roa File: a17ef828-79f4-3e2d-afd5-07f55cd62328.roa (raw, json) Hash identifier: CT7RJWs4yisU0LBnrOXY9mkgk/rxM/zywmvoHdws9E0= Subject key identifier: 78:A5:78:54:B5:4D:D8:F2:FE:34:2F:EE:28:41:8C:25:89:39:3D:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADF3918268887E7652880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a17ef828-79f4-3e2d-afd5-07f55cd62328.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:df:39:18:26:88:87:e7:65:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=979dac09-3451-4282-a116-f864415e359a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9a:0d:2a:8e:4f:87:b6:f0:7e:da:b8:ba:56: fd:db:af:ed:9b:a8:5a:63:14:2a:bd:70:ce:6c:75: 99:07:1a:f0:59:27:13:bf:6f:a6:ba:e3:b3:86:40: 38:22:49:f1:a8:ba:14:63:60:63:35:78:b2:8c:10: e9:5d:88:d8:48:87:c5:a8:5b:2b:bd:60:1a:85:16: b0:8b:5b:d0:f9:9f:cc:89:53:1a:57:b7:93:9c:88: b1:2c:35:6c:d6:00:ae:42:b7:3c:e4:a3:3d:be:62: 74:d4:63:31:06:a0:89:66:e8:1c:97:74:c8:2b:32: a8:c5:5a:ca:ae:23:45:62:c2:ab:02:86:3a:c9:f3: 9d:bf:db:5e:86:90:14:4b:73:4d:22:55:1b:39:26: 1c:cc:82:fc:d1:76:8b:14:9b:ed:8d:cc:b6:98:b4: 95:dd:b5:be:9d:50:ae:bc:83:6f:ab:f8:25:57:ce: 73:7f:b0:93:95:7c:e7:31:17:39:30:18:ce:da:b4: 9b:ff:b6:49:ee:60:39:6a:f4:cd:02:8e:7f:d7:08: 85:33:c4:08:65:3b:1d:0e:ad:1a:f7:81:29:21:9d: 2a:7b:80:75:ca:21:ba:e1:8f:e4:8a:53:3d:90:b9: d2:a0:01:5c:c6:f1:e5:77:3b:cd:7d:45:7b:91:75: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A5:78:54:B5:4D:D8:F2:FE:34:2F:EE:28:41:8C:25:89:39:3D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a17ef828-79f4-3e2d-afd5-07f55cd62328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1c:cc:57:6a:cc:52:d1:d0:7f:94:e7:81:68:d1:66:13:c4: 6a:86:28:90:3c:f8:9a:c9:f3:6b:1e:0a:65:9e:4c:e1:5a:a9: b5:f6:80:ab:5d:07:5b:9f:99:89:59:00:64:70:61:1f:63:ce: b0:c4:ec:f6:fd:58:7a:0b:b2:9d:c3:24:10:a4:7c:f0:b5:80: 6d:b1:a8:a9:1f:5c:8e:c0:48:1a:c2:69:73:cf:35:87:ca:d1: af:f4:11:af:05:fe:b7:8d:72:7d:b0:93:b1:64:a5:19:13:4d: 7f:12:89:b1:43:e9:cb:64:76:62:2b:0d:b0:82:ca:42:54:4c: 73:06:e2:ee:72:45:cc:53:ed:37:59:a7:7d:65:a7:cc:7b:b2: 13:81:dd:b7:6b:e7:07:25:97:e9:d0:37:7d:bf:ea:cf:57:c2: 3e:f0:87:d6:b0:c3:47:51:1a:44:0b:fa:e3:d0:32:99:53:da: b7:16:07:4b:84:5b:a9:24:84:e9:de:80:4a:10:d6:d7:7b:89: cb:4c:8c:94:9e:f8:38:11:43:6f:e5:f0:6c:19:ce:09:c2:be: 70:40:6e:bc:5f:cb:41:5d:cf:d5:08:d4:bf:0d:68:e4:1a:3c: d9:0e:24:eb:08:45:0b:48:75:cd:85:0e:d7:d2:11:da:01:83: f2:99:21:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkut85GCaIh+dlKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTc5ZGFjMDktMzQ1MS00MjgyLWExMTYtZjg2NDQxNWUzNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5oNKo5Ph7bwftq4ulb926/tm6haYxQqvXDO bHWZBxrwWScTv2+muuOzhkA4IknxqLoUY2BjNXiyjBDpXYjYSIfFqFsrvWAahRaw i1vQ+Z/MiVMaV7eTnIixLDVs1gCuQrc85KM9vmJ01GMxBqCJZugcl3TIKzKoxVrK riNFYsKrAoY6yfOdv9tehpAUS3NNIlUbOSYczIL80XaLFJvtjcy2mLSV3bW+nVCu vINvq/glV85zf7CTlXznMRc5MBjO2rSb/7ZJ7mA5avTNAo5/1wiFM8QIZTsdDq0a 94EpIZ0qe4B1yiG64Y/kilM9kLnSoAFcxvHldzvNfUV7kXW9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHileFS1Tdjy/jQv7ihBjCWJOT0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTE3ZWY4MjgtNzlmNC0z ZTJkLWFmZDUtMDdmNTVjZDYyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQczFdqzFLR0H+U54Fo0WYTxGqGKJA8+JrJ82seCmWeTOFaqbX2gKtd B1ufmYlZAGRwYR9jzrDE7Pb9WHoLsp3DJBCkfPC1gG2xqKkfXI7ASBrCaXPPNYfK 0a/0Ea8F/reNcn2wk7FkpRkTTX8SibFD6ctkdmIrDbCCykJUTHMG4u5yRcxT7TdZ p31lp8x7shOB3bdr5wcll+nQN32/6s9Xwj7wh9aww0dRGkQL+uPQMplT2rcWB0uE W6kkhOnegEoQ1td7ictMjJSe+DgRQ2/l8GwZzgnCvnBAbrxfy0Fdz9UI1L8NaOQa PNkOJOsIRQtIdc2FDtfSEdoBg/KZIR0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:27:07 2025 by rpki-client