$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9da47f5-701e-3ac8-b7de-346694c7fb2b.roa File: e9da47f5-701e-3ac8-b7de-346694c7fb2b.roa (raw, json) Hash identifier: s7qAz1XG37Yblo8ue3Nr0IuLoDZfXJWEEZPaxZyEpL4= Subject key identifier: 23:03:17:31:45:F2:98:EC:80:4C:AF:46:89:FF:31:15:CB:4C:46:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA539A2CDB21D89D537D20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9da47f5-701e-3ac8-b7de-346694c7fb2b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:53:9a:2c:db:21:d8:9d:53:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c4603515-137c-4b3f-a309-6841b1c8e88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:49:44:55:f0:a6:2c:24:32:6f:0e:41:3b: 72:04:06:1a:30:d6:9a:1e:56:39:00:19:6d:7e:90: 5d:5b:0d:62:aa:8b:54:61:d8:d1:a8:9a:ab:34:8a: e3:8a:2b:68:e5:90:63:82:2e:b1:f6:da:f8:6d:11: 17:ca:cc:3a:10:1f:df:0c:2f:8c:4d:77:8b:fe:4b: be:2d:6b:df:56:07:b9:d0:9c:56:20:06:2e:20:8e: 02:b4:9c:1d:bd:87:3d:41:de:b8:b3:bf:11:c4:33: a8:f9:ba:2d:ad:db:14:72:d3:18:60:c9:61:92:f7: b1:ba:21:4e:7b:5c:9a:48:2c:7e:2c:a3:41:db:7e: 9b:92:6e:64:2e:f8:56:fd:01:83:4a:42:c4:c8:fd: 81:cf:2f:8c:7f:37:ae:30:49:d4:c3:20:a5:8e:4b: 97:4e:c8:85:5d:63:48:46:06:f0:d8:c1:4a:94:e1: 8f:a3:1a:1e:74:b6:2f:ea:1b:ec:c0:3d:54:68:32: 8d:d0:8c:bb:79:de:b8:ed:30:ca:78:a6:ec:ce:40: aa:12:8c:64:54:d7:0e:ee:7f:48:c0:9b:4f:ab:84: d7:b9:73:ed:2d:ee:db:42:f2:d4:05:d1:a4:a5:65: a5:02:e9:c2:6a:2c:71:78:ca:be:11:9d:bf:87:43: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:17:31:45:F2:98:EC:80:4C:AF:46:89:FF:31:15:CB:4C:46:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9da47f5-701e-3ac8-b7de-346694c7fb2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a8:7f:d6:99:b7:da:1b:34:55:7f:e9:e5:2d:1a:d9:57:bd: 46:36:b2:23:ac:e4:ac:b6:92:1b:37:98:e6:d1:b7:3f:d9:df: 65:e7:6b:7c:4a:01:81:57:81:02:15:0b:1d:18:6f:91:52:3d: bd:46:c9:ce:52:b1:3c:24:13:25:48:4d:9a:42:6a:ae:8f:45: d4:8a:54:79:ba:8e:f9:a5:34:dc:09:c2:7f:e8:50:94:31:5d: 7b:04:62:b2:02:32:5b:82:c2:e0:a4:ee:a5:d4:9b:8d:95:3d: ae:5b:88:c5:b8:f4:72:32:fb:b1:0f:57:e1:60:84:89:2a:44: 28:54:fa:81:8a:23:78:95:2c:7f:ba:67:eb:19:fa:ce:63:dc: e0:fa:85:64:af:9f:c6:f2:df:ae:10:34:63:e7:82:80:25:cc: 94:b6:65:61:99:57:be:51:73:7b:1f:ae:df:ed:63:13:0e:bd: 34:0d:04:95:e9:c7:ee:ce:49:0b:ca:2f:0c:91:6b:c3:aa:ab: 10:b1:78:70:5e:62:66:3f:e9:b5:cc:59:4d:bf:49:a5:29:2c: 21:48:c8:70:05:6e:c3:6c:18:5e:36:d6:18:9a:66:6f:59:69: 45:75:dc:96:04:6f:6f:92:83:5c:74:0b:36:67:b2:c0:c5:59: 44:29:83:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulOaLNsh2J1TfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzQ2MDM1MTUtMTM3Yy00YjNmLWEzMDktNjg0MWIxYzhlODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXFJRFXwpiwkMm8OQTtyBAYaMNaaHlY5ABlt fpBdWw1iqotUYdjRqJqrNIrjiito5ZBjgi6x9tr4bREXysw6EB/fDC+MTXeL/ku+ LWvfVge50JxWIAYuII4CtJwdvYc9Qd64s78RxDOo+botrdsUctMYYMlhkvexuiFO e1yaSCx+LKNB236bkm5kLvhW/QGDSkLEyP2Bzy+MfzeuMEnUwyCljkuXTsiFXWNI Rgbw2MFKlOGPoxoedLYv6hvswD1UaDKN0Iy7ed647TDKeKbszkCqEoxkVNcO7n9I wJtPq4TXuXPtLe7bQvLUBdGkpWWlAunCaixxeMq+EZ2/h0OPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMDFzFF8pjsgEyvRon/MRXLTEaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTlkYTQ3ZjUtNzAxZS0z YWM4LWI3ZGUtMzQ2Njk0YzdmYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSof9aZt9obNFV/6eUtGtlXvUY2siOs5Ky2khs3mObRtz/Z32Xna3xK AYFXgQIVCx0Yb5FSPb1Gyc5SsTwkEyVITZpCaq6PRdSKVHm6jvmlNNwJwn/oUJQx XXsEYrICMluCwuCk7qXUm42VPa5biMW49HIy+7EPV+FghIkqRChU+oGKI3iVLH+6 Z+sZ+s5j3OD6hWSvn8by364QNGPngoAlzJS2ZWGZV75Rc3sfrt/tYxMOvTQNBJXp x+7OSQvKLwyRa8OqqxCxeHBeYmY/6bXMWU2/SaUpLCFIyHAFbsNsGF421hiaZm9Z aUV13JYEb2+Sg1x0CzZnssDFWUQpgzw= -----END CERTIFICATE-----Generated at Tue Apr 29 16:21:33 2025 by rpki-client