$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbaf6431-76a7-36b9-97f1-693a5b437325.roa File: fbaf6431-76a7-36b9-97f1-693a5b437325.roa (raw, json) Hash identifier: l4617EscgT1irlfwC+puUUkRvkdMAaMGE5y4xVCgZxs= Subject key identifier: 8D:13:87:4D:51:D2:E6:91:8E:9D:DE:62:6B:14:F7:1B:72:DF:36:EA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA55DE40DC470F442C3C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbaf6431-76a7-36b9-97f1-693a5b437325.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:55:de:40:dc:47:0f:44:2c:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=30e5b628-51f9-445d-8d85-5f9cca0aa3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:ff:40:d1:46:95:dc:00:af:3a:25:ff:dc: b1:89:8a:c3:63:22:05:96:55:c6:36:17:72:c9:47: 26:67:d1:c2:5f:6d:68:6a:59:49:16:7d:af:cb:34: 71:c6:3d:44:fa:bd:94:d5:14:34:c6:5d:91:46:cc: 1b:8f:b3:b4:ce:9c:0d:25:60:79:85:42:ba:ad:52: 09:d3:08:28:42:f4:a6:88:5a:8c:c5:c5:08:22:cd: 4f:40:7c:63:2e:de:7c:94:0b:34:83:d0:19:75:99: fd:08:39:94:bb:9b:ba:f2:38:66:1e:6d:cb:21:92: 13:d1:bf:08:a3:d6:29:6d:0c:70:40:7e:2a:f3:22: 2c:58:8a:f2:0e:9f:08:29:6b:0e:88:c1:30:8b:0d: f1:50:68:1d:06:60:af:c2:59:3b:5b:75:2b:fb:77: f4:88:b6:bf:cb:5a:b5:14:86:70:5c:13:31:ca:9b: 13:c2:78:1f:47:6b:27:bc:61:d2:02:49:cc:94:a1: 21:ac:76:66:9d:24:21:46:ac:8f:be:47:36:0d:c9: 35:40:9a:2c:d1:1f:86:c4:9a:d6:e7:6a:a2:5b:57: 58:bb:9b:e6:a9:7f:d7:7d:91:86:20:9e:4d:27:e0: 3d:87:d8:9a:65:61:e0:ea:ed:76:14:dc:24:31:6e: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:13:87:4D:51:D2:E6:91:8E:9D:DE:62:6B:14:F7:1B:72:DF:36:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbaf6431-76a7-36b9-97f1-693a5b437325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d7:a4:3c:b5:38:32:1b:e5:76:15:ed:81:41:69:cc:37:6f: b8:79:8d:06:ef:c6:5c:f5:6a:f4:96:81:e4:1a:d7:14:9a:65: 9c:1e:d3:71:4d:cf:b1:9a:ca:e5:4a:54:7f:f5:64:fb:b7:b1: e3:5d:8a:b2:2c:3b:fb:70:34:ad:9d:5f:31:fe:0b:03:1b:da: 82:e4:3a:62:ba:57:2d:24:e2:9d:02:09:00:ce:78:78:8e:a5: 58:d4:e1:7a:df:b6:be:9c:3c:53:d9:f7:70:f8:96:94:b1:26: 0a:65:b1:a0:5a:d2:88:42:80:90:f1:7e:82:92:af:c4:eb:62: 1b:cb:6e:e6:a8:bd:0f:05:4b:e0:da:08:5d:56:04:f8:39:10: 3a:46:b0:f0:15:b8:3c:ef:bb:b6:ef:cf:84:81:66:31:37:50: c2:9f:21:65:fc:ae:d3:f4:b4:25:03:e9:4c:d7:20:d8:b3:47: 2e:96:cf:82:a3:c9:19:fc:01:a4:a7:72:2a:9b:9f:14:b8:36: 36:21:71:b9:bd:33:32:4e:44:1b:bb:21:6f:67:ec:c7:bd:74: b3:0b:97:b4:f4:67:db:cf:c5:52:3c:2b:68:a0:f2:a4:d5:79: b3:59:49:fb:72:81:52:44:b2:6a:77:4c:4f:48:8e:a1:00:64: 3d:0c:d8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulXeQNxHD0QsPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzBlNWI2MjgtNTFmOS00NDVkLThkODUtNWY5Y2NhMGFhM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+7/QNFGldwArzol/9yxiYrDYyIFllXGNhdy yUcmZ9HCX21oallJFn2vyzRxxj1E+r2U1RQ0xl2RRswbj7O0zpwNJWB5hUK6rVIJ 0wgoQvSmiFqMxcUIIs1PQHxjLt58lAs0g9AZdZn9CDmUu5u68jhmHm3LIZIT0b8I o9YpbQxwQH4q8yIsWIryDp8IKWsOiMEwiw3xUGgdBmCvwlk7W3Ur+3f0iLa/y1q1 FIZwXBMxypsTwngfR2snvGHSAknMlKEhrHZmnSQhRqyPvkc2Dck1QJos0R+GxJrW 52qiW1dYu5vmqX/XfZGGIJ5NJ+A9h9iaZWHg6u12FNwkMW5o/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Th01R0uaRjp3eYmsU9xty3zbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJhZjY0MzEtNzZhNy0z NmI5LTk3ZjEtNjkzYTViNDM3MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXXpDy1ODIb5XYV7YFBacw3b7h5jQbvxlz1avSWgeQa1xSaZZwe03FN z7GayuVKVH/1ZPu3seNdirIsO/twNK2dXzH+CwMb2oLkOmK6Vy0k4p0CCQDOeHiO pVjU4Xrftr6cPFPZ93D4lpSxJgplsaBa0ohCgJDxfoKSr8TrYhvLbuaovQ8FS+Da CF1WBPg5EDpGsPAVuDzvu7bvz4SBZjE3UMKfIWX8rtP0tCUD6UzXINizRy6Wz4Kj yRn8AaSnciqbnxS4NjYhcbm9MzJORBu7IW9n7Me9dLMLl7T0Z9vPxVI8K2ig8qTV ebNZSftygVJEsmp3TE9IjqEAZD0M2MQ= -----END CERTIFICATE-----Generated at Mon Apr 28 17:36:32 2025 by rpki-client