$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7c35db4-b546-3afa-b7f8-c6a30377f483.roa File: b7c35db4-b546-3afa-b7f8-c6a30377f483.roa (raw, json) Hash identifier: rG9pAUNI4vao60io6QMqotos5H4zujwP6JxeKxP0roU= Subject key identifier: 77:27:CB:E7:5E:B2:67:0F:85:D3:70:2C:F0:52:D5:F7:13:00:3D:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA54B4A54D3E7031D53180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7c35db4-b546-3afa-b7f8-c6a30377f483.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:54:b4:a5:4d:3e:70:31:d5:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3ffe57db-8f16-4ec1-a56c-a074e3f7b865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:bf:f6:3b:38:c1:d9:1e:30:9a:2f:00:8b: a9:39:69:ef:d8:8f:78:80:43:6d:c2:73:97:e1:74: 16:7c:eb:31:07:a8:0a:5e:07:96:66:5c:92:83:8c: a6:79:de:aa:42:00:27:f0:ae:ab:d8:c9:6d:fc:5d: 50:5b:59:ab:0b:80:85:6d:eb:2f:ac:ae:1f:86:54: a1:82:85:0b:7e:c9:51:69:55:dc:5e:44:79:7e:be: c5:d6:1c:42:0a:59:44:94:db:48:f7:23:19:28:44: eb:78:d5:f8:16:6f:b4:ab:c6:6d:86:8c:27:ea:04: 35:7b:8f:8c:48:b9:ef:0d:f7:26:62:f2:b9:5b:ed: e6:d8:62:d9:c5:53:3e:c1:5b:17:47:43:5a:33:1a: 65:1c:e5:94:10:6f:56:fd:86:c1:b1:94:dc:ae:ea: 19:89:40:66:dd:6a:e9:bf:75:9f:26:62:5b:de:60: 52:b7:de:a6:05:2b:63:7b:1e:3f:24:4a:6f:a9:ab: 5a:34:ee:25:a1:36:1e:dc:89:a9:fb:f6:4f:b2:9b: 0d:c8:87:ab:1c:94:65:6f:28:ec:11:c9:bb:0b:19: 94:5c:fc:66:d5:90:47:d1:93:cb:b2:88:08:f7:79: 37:23:97:19:1e:ae:1e:34:11:aa:f1:2b:b3:8c:a8: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:27:CB:E7:5E:B2:67:0F:85:D3:70:2C:F0:52:D5:F7:13:00:3D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7c35db4-b546-3afa-b7f8-c6a30377f483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cb:42:10:43:e9:3e:95:3c:55:36:c4:24:8d:ac:dc:e6:ee: 1b:c8:ca:16:aa:15:10:22:d8:ab:71:1a:90:48:c8:82:51:2a: e9:b1:bc:29:fa:e0:20:b9:ae:ed:fd:28:b6:fd:9a:04:1a:a4: 71:d6:04:19:81:2b:62:b6:39:1e:59:84:c3:3f:c1:56:c7:c6: 54:00:07:1a:8e:20:4a:57:ee:2c:ba:67:f8:3d:cf:4c:93:4e: c9:b5:58:ac:71:42:7f:80:ae:9a:a1:ca:af:f7:37:3c:f8:cd: 1b:30:c1:20:76:c3:5d:05:6d:dd:72:35:ab:b6:6f:15:49:c9: 3f:45:a1:d9:14:5e:6d:52:0d:02:f2:3b:e6:0a:47:0a:9d:60: 7f:58:12:12:14:f8:f0:3f:15:8c:7d:4c:f1:fb:2d:f7:ff:cc: 29:44:26:e7:d4:cc:9e:38:22:f9:ed:91:e2:68:f4:8f:62:76: 57:24:ba:93:e5:68:18:d2:80:ec:ae:ab:ac:7c:f6:48:1d:fd: 11:f6:2f:79:70:7d:2e:7c:48:9b:d4:b8:1d:36:f8:42:54:81: 43:99:10:e7:56:76:0c:9c:5c:50:d0:18:01:a9:bb:bb:34:3e: c3:f7:c8:d5:e4:78:19:47:3e:65:78:89:b7:d2:ed:b0:c1:f6: e8:0a:6d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulS0pU0+cDHVMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2ZmZTU3ZGItOGYxNi00ZWMxLWE1NmMtYTA3NGUzZjdiODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocW/9js4wdkeMJovAIupOWnv2I94gENtwnOX 4XQWfOsxB6gKXgeWZlySg4ymed6qQgAn8K6r2Mlt/F1QW1mrC4CFbesvrK4fhlSh goULfslRaVXcXkR5fr7F1hxCCllElNtI9yMZKETreNX4Fm+0q8Zthown6gQ1e4+M SLnvDfcmYvK5W+3m2GLZxVM+wVsXR0NaMxplHOWUEG9W/YbBsZTcruoZiUBm3Wrp v3WfJmJb3mBSt96mBStjex4/JEpvqataNO4loTYe3Imp+/ZPspsNyIerHJRlbyjs Ecm7CxmUXPxm1ZBH0ZPLsogI93k3I5cZHq4eNBGq8SuzjKg+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcny+desmcPhdNwLPBS1fcTAD1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdjMzVkYjQtYjU0Ni0z YWZhLWI3ZjgtYzZhMzAzNzdmNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnLQhBD6T6VPFU2xCSNrNzm7hvIyhaqFRAi2KtxGpBIyIJRKumxvCn6 4CC5ru39KLb9mgQapHHWBBmBK2K2OR5ZhMM/wVbHxlQABxqOIEpX7iy6Z/g9z0yT Tsm1WKxxQn+Arpqhyq/3Nzz4zRswwSB2w10Fbd1yNau2bxVJyT9FodkUXm1SDQLy O+YKRwqdYH9YEhIU+PA/FYx9TPH7Lff/zClEJufUzJ44IvntkeJo9I9idlckupPl aBjSgOyuq6x89kgd/RH2L3lwfS58SJvUuB02+EJUgUOZEOdWdgycXFDQGAGpu7s0 PsP3yNXkeBlHPmV4ibfS7bDB9ugKbes= -----END CERTIFICATE-----Generated at Sun Apr 27 15:56:15 2025 by rpki-client