$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/140d05e1-672c-37c8-a96a-0dcf7366c49b.roa File: 140d05e1-672c-37c8-a96a-0dcf7366c49b.roa (raw, json) Hash identifier: VTDdXSpRbbP9Z/LM1pRWePw7Dctc8c9pVirMTV4nBT4= Subject key identifier: 9B:FB:20:74:10:C3:69:F9:DA:29:BA:12:10:9E:26:95:D0:34:6B:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD7E54A79959DD54C3FEC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/140d05e1-672c-37c8-a96a-0dcf7366c49b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 67.54.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:7e:54:a7:99:59:dd:54:c3:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bc7fe91b-e9c1-40d4-b5b6-fd7a755aa51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c3:3d:0b:df:dd:80:06:99:13:0b:94:cc:f4: 0c:69:40:77:12:07:3d:10:85:5b:b7:31:a1:ce:5f: 18:ac:e1:d0:a6:0e:93:60:4a:dd:67:27:42:c1:43: 92:d6:67:56:f8:22:ce:c8:1c:07:89:56:e1:6d:97: fa:73:ca:7a:7e:39:87:15:87:b9:17:c0:42:e6:61: 79:7a:71:ed:1e:39:df:f8:95:71:59:b6:10:9c:55: 95:29:5a:d5:41:3b:63:60:a7:e6:0b:29:02:5f:7f: 84:e8:88:cb:21:43:f3:93:50:43:b1:c8:57:5b:42: 5f:5e:05:c1:d9:95:7f:4c:3f:c4:ac:da:37:ca:36: 96:f0:3e:1c:d5:60:e0:2e:52:aa:f4:2a:48:bc:0f: 16:45:f6:f1:47:a6:ac:a3:98:c9:82:c8:56:81:f7: 22:1c:ee:9b:7c:6c:92:77:f8:e7:1b:4e:37:31:97: 9e:48:2c:48:5e:3b:25:f1:c0:59:1c:5e:c6:19:07: c9:fd:ae:6f:ca:61:46:b7:e0:57:58:91:54:8b:fd: cd:95:2c:5e:73:ff:d4:cb:47:e7:2e:03:87:f4:40: 54:e4:6e:93:6d:6d:97:e7:c2:50:7c:ba:f7:bb:68: 0c:34:8d:51:a2:61:5b:45:1c:58:83:81:a0:0d:fb: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FB:20:74:10:C3:69:F9:DA:29:BA:12:10:9E:26:95:D0:34:6B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/140d05e1-672c-37c8-a96a-0dcf7366c49b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:37:2e:5f:d9:e4:94:b8:d8:46:a5:84:c0:61:1d:60:92:a5: c4:29:81:dd:b6:29:0b:53:56:b3:a6:8a:78:06:be:66:b2:8c: f5:95:a0:77:79:cd:4a:f4:29:e0:95:6d:7a:25:1e:82:e5:d6: fd:f5:c3:39:ba:a4:23:a8:7b:d1:57:16:fc:c6:41:a1:28:f1: 67:ef:0a:a2:9c:f4:e2:80:16:6b:e4:a5:44:04:e5:ab:eb:cc: 8b:3b:ec:de:bb:96:5c:cf:6e:68:fc:23:07:2d:42:70:63:87: fe:9f:d4:a9:d6:7d:90:4c:9e:64:bb:1f:f3:e7:d5:ce:01:68: 01:ac:82:3b:3e:60:3c:8e:a3:dd:1c:68:10:36:73:b4:ca:ca: 60:4d:2f:0d:06:9c:e3:39:15:b7:61:01:ef:f9:37:bd:85:9f: 6b:fe:04:aa:ed:cd:d7:fc:49:04:e6:58:53:ed:f8:13:2b:21: 14:ba:69:a2:29:1e:08:3f:52:da:fd:c9:56:10:d7:ab:33:23: 12:23:5f:15:73:15:75:8f:0d:ab:97:4e:56:0c:fb:c2:01:7a: f6:24:21:1a:77:16:f6:ea:25:73:70:87:7d:e9:fa:c8:2c:48: 3d:6b:f6:29:02:e3:f5:14:7a:1c:f4:93:4c:2f:fd:c8:89:21: 89:b4:9c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzX5Up5lZ3VTD/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmM3ZmU5MWItZTljMS00MGQ0LWI1YjYtZmQ3YTc1NWFhNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsM9C9/dgAaZEwuUzPQMaUB3Egc9EIVbtzGh zl8YrOHQpg6TYErdZydCwUOS1mdW+CLOyBwHiVbhbZf6c8p6fjmHFYe5F8BC5mF5 enHtHjnf+JVxWbYQnFWVKVrVQTtjYKfmCykCX3+E6IjLIUPzk1BDschXW0JfXgXB 2ZV/TD/ErNo3yjaW8D4c1WDgLlKq9CpIvA8WRfbxR6aso5jJgshWgfciHO6bfGyS d/jnG043MZeeSCxIXjsl8cBZHF7GGQfJ/a5vymFGt+BXWJFUi/3NlSxec//Uy0fn LgOH9EBU5G6TbW2X58JQfLr3u2gMNI1RomFbRRxYg4GgDft2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJv7IHQQw2n52im6EhCeJpXQNGsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTQwZDA1ZTEtNjcyYy0z N2M4LWE5NmEtMGRjZjczNjZjNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMw3Ll/Z5JS42EalhMBhHWCSpcQpgd22KQtTVrOmingGvmayjPWVoHd5 zUr0KeCVbXolHoLl1v31wzm6pCOoe9FXFvzGQaEo8WfvCqKc9OKAFmvkpUQE5avr zIs77N67llzPbmj8IwctQnBjh/6f1KnWfZBMnmS7H/Pn1c4BaAGsgjs+YDyOo90c aBA2c7TKymBNLw0GnOM5FbdhAe/5N72Fn2v+BKrtzdf8SQTmWFPt+BMrIRS6aaIp Hgg/Utr9yVYQ16szIxIjXxVzFXWPDauXTlYM+8IBevYkIRp3FvbqJXNwh33p+sgs SD1r9ikC4/UUehz0k0wv/ciJIYm0nMg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:35 2025 by rpki-client