$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7a3041-4935-3d94-b26f-1042de5ab768.roa File: 0a7a3041-4935-3d94-b26f-1042de5ab768.roa (raw, json) Hash identifier: VohR1HSGhOE7JvfVhw2owrFkoyiu6tDF9bte0UkCRnA= Subject key identifier: 27:E9:00:B8:77:68:E5:93:D7:0A:15:79:A6:4A:C3:9D:D7:86:69:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCC765A007DF855DC5ABD0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7a3041-4935-3d94-b26f-1042de5ab768.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 67.54.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:c7:65:a0:07:df:85:5d:c5:ab:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0cf27745-386e-4df3-998e-d10002e25c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:af:73:1a:d1:7f:0e:66:d1:ba:13:5e:9d: 25:d8:e4:26:94:52:9d:3c:30:9d:65:92:33:83:ba: 68:78:ad:96:84:8f:0d:17:6c:8a:0d:69:2d:29:21: 1b:80:a6:b3:40:d8:c3:b7:3b:75:9a:62:f8:9e:93: 98:43:24:2a:32:71:ab:55:02:ef:80:08:d4:91:4e: 0c:aa:ea:22:ca:8b:56:f0:dd:94:8d:a8:ec:a7:b0: b7:ac:cd:22:06:a8:23:4e:1a:4c:9b:bf:1c:a5:95: 27:0f:1f:fd:46:90:84:70:fb:a1:eb:c7:a2:cd:a6: f8:f7:4f:80:6e:42:57:3d:a4:19:57:08:45:74:6a: c3:e2:ea:22:6c:b5:13:9f:a9:5a:51:32:e2:e8:63: c5:b7:c1:38:1b:05:e0:08:15:9b:d4:4d:ff:39:7e: f2:a6:05:68:e0:49:1c:c5:de:dc:50:25:c9:a8:26: af:c4:d9:ff:47:5a:e1:40:30:32:4e:23:28:78:b2: 33:ae:82:0e:2f:0e:0f:ed:94:43:8b:67:44:9c:c6: 28:92:2b:bf:89:78:08:1f:cf:74:67:09:92:fc:f6: 6a:92:13:f4:da:dc:3f:4e:16:4d:0e:93:5b:7c:c1: 9a:87:65:2a:94:76:99:b7:ad:34:71:e2:78:e7:aa: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E9:00:B8:77:68:E5:93:D7:0A:15:79:A6:4A:C3:9D:D7:86:69:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7a3041-4935-3d94-b26f-1042de5ab768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:37:4c:f8:21:72:a1:ac:97:96:c5:f6:00:ba:95:f3:4e:9d: 35:56:ed:66:71:83:f1:09:81:3e:ef:01:49:44:36:d8:f0:b0: 1a:19:5a:c6:6b:89:7f:57:42:fe:56:08:0a:30:ed:c8:c0:dd: c7:76:93:b9:cc:1c:58:45:26:e6:39:d4:75:4a:c7:3e:3d:11: af:5e:87:6b:37:77:f7:f6:d2:c4:23:6e:72:9f:72:04:d1:a1: cc:32:55:b2:ed:f5:8b:1b:fb:2f:b0:7e:42:dd:a1:44:0c:8f: 95:e4:1a:c9:80:1a:dd:0c:b2:d1:65:c2:3e:9b:ea:5c:db:13: e8:b8:ad:d8:b9:fc:29:8c:8c:21:2b:f1:7c:1e:71:57:a1:51: 21:8a:1c:b5:09:f5:34:68:11:ce:09:c6:c6:cd:48:cf:47:90: 88:68:c6:a2:7f:f8:31:79:a0:0f:18:d1:e3:77:ac:0d:fb:14: 9c:09:74:13:1c:74:45:1d:a0:08:6b:e2:df:6f:ea:fb:84:ef: 41:37:43:c6:d2:b7:c7:10:37:18:70:23:bc:08:b5:5d:2a:e6: 9f:a5:6b:ed:90:5a:34:08:b0:8a:98:58:ae:ca:f9:02:70:34: 12:63:b5:21:06:b5:ff:2f:08:06:c0:e5:30:fb:d1:64:aa:42: 8d:4b:71:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMdloAffhV3Fq9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGNmMjc3NDUtMzg2ZS00ZGYzLTk5OGUtZDEwMDAyZTI1YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2vcxrRfw5m0boTXp0l2OQmlFKdPDCdZZIz g7poeK2WhI8NF2yKDWktKSEbgKazQNjDtzt1mmL4npOYQyQqMnGrVQLvgAjUkU4M quoiyotW8N2Ujajsp7C3rM0iBqgjThpMm78cpZUnDx/9RpCEcPuh68eizab490+A bkJXPaQZVwhFdGrD4uoibLUTn6laUTLi6GPFt8E4GwXgCBWb1E3/OX7ypgVo4Ekc xd7cUCXJqCavxNn/R1rhQDAyTiMoeLIzroIOLw4P7ZRDi2dEnMYokiu/iXgIH890 ZwmS/PZqkhP02tw/ThZNDpNbfMGah2UqlHaZt600ceJ456o3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfpALh3aOWT1woVeaZKw53XhmmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGE3YTMwNDEtNDkzNS0z ZDk0LWIyNmYtMTA0MmRlNWFiNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQ3TPghcqGsl5bF9gC6lfNOnTVW7WZxg/EJgT7vAUlENtjwsBoZWsZr iX9XQv5WCAow7cjA3cd2k7nMHFhFJuY51HVKxz49Ea9eh2s3d/f20sQjbnKfcgTR ocwyVbLt9Ysb+y+wfkLdoUQMj5XkGsmAGt0MstFlwj6b6lzbE+i4rdi5/CmMjCEr 8XwecVehUSGKHLUJ9TRoEc4JxsbNSM9HkIhoxqJ/+DF5oA8Y0eN3rA37FJwJdBMc dEUdoAhr4t9v6vuE70E3Q8bSt8cQNxhwI7wItV0q5p+la+2QWjQIsIqYWK7K+QJw NBJjtSEGtf8vCAbA5TD70WSqQo1LcS0= -----END CERTIFICATE-----Generated at Mon Oct 20 00:00:08 2025 by rpki-client