$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61f4ecab-0078-30a0-88ad-e4f2c337878c.roa File: 61f4ecab-0078-30a0-88ad-e4f2c337878c.roa (raw, json) Hash identifier: kTgs86UjtseGsgmHJm1nx/zzBGmLUH6zwXUBELfa+ao= Subject key identifier: 19:09:AA:36:71:3E:15:10:61:38:E9:76:96:5C:FA:06:01:A6:0A:BE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD81B212F3352E4DEDED80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61f4ecab-0078-30a0-88ad-e4f2c337878c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 67.54.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:81:b2:12:f3:35:2e:4d:ed:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ef44eec1-afb3-4551-917b-7d4f1617b892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:3b:09:65:00:22:91:b7:9e:52:16:d1:46: d2:62:90:88:e1:f9:95:19:82:5f:9d:cb:05:74:25: 52:b8:f9:87:fa:7a:06:1e:c1:c5:ed:71:76:e3:01: 53:9a:47:65:3e:a3:bc:d3:9d:9a:18:c6:c1:a7:cb: 06:0b:56:46:57:0e:d1:e9:ac:10:bb:60:10:12:3c: 24:fc:b7:97:0e:25:58:21:3a:62:54:c1:1c:29:7c: 7b:c0:9b:2c:d2:1e:45:2d:28:84:9b:c0:78:49:07: f7:ec:6e:58:2e:79:01:99:aa:11:80:14:a9:1a:d5: d5:78:10:81:47:79:c8:f6:7b:b9:e1:b1:ed:13:10: 92:8a:54:29:2a:a7:53:aa:82:ec:cd:08:3c:93:52: d3:1a:5f:2d:41:5a:be:8a:e9:c7:dc:d5:a6:8f:10: 15:55:63:89:0e:b3:60:a2:57:38:b7:a2:ce:fa:8e: ee:f4:40:dd:e4:39:b7:3a:fd:fc:0c:71:4a:53:19: 6f:2d:76:3a:d5:56:d9:86:82:35:1b:62:fa:d3:28: ad:50:08:c2:aa:1e:65:6d:47:d8:34:f8:57:7d:b0: b9:6f:42:91:95:a0:39:ac:3d:0d:53:f1:8e:aa:3d: 65:e6:4c:2d:ce:82:5c:ab:69:98:19:d9:68:0b:6e: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:AA:36:71:3E:15:10:61:38:E9:76:96:5C:FA:06:01:A6:0A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61f4ecab-0078-30a0-88ad-e4f2c337878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a3:ab:8b:df:7b:0a:05:c0:a1:3e:38:e1:e7:67:4d:d1:8d: 1e:9b:4b:61:6b:e3:db:5c:57:08:e3:46:89:e9:62:c0:e6:fd: 12:60:c5:fd:5c:6c:9e:56:f6:47:ca:ef:26:6c:d4:8b:de:35: 43:5f:66:6e:09:7b:8e:dc:5c:a7:4c:82:f5:ca:ec:11:39:69: 59:3b:71:70:a7:bd:34:45:e4:78:5a:7e:02:04:49:7d:e6:2b: 7a:1e:23:dc:aa:53:4b:9e:74:4c:42:cc:20:b3:c9:e9:4c:93: b9:ce:23:38:17:8f:a3:26:1a:3a:4c:81:86:1b:d2:67:96:f1: d4:f3:cb:19:ed:46:79:9b:5e:8f:e8:6b:1e:8e:da:7e:99:c0: 16:cc:83:03:c2:15:b4:28:94:0a:5c:d9:fa:88:30:ef:26:86: 37:39:1b:09:5c:89:e6:fa:34:9d:a2:ca:c2:76:a8:f8:23:7f: 9d:08:6e:a5:7f:e2:e7:ff:73:8e:32:db:73:ba:ac:38:1e:92: c5:4a:a0:f9:fe:bd:c0:b9:05:3a:95:06:bb:34:06:f3:5b:16: 06:63:56:0a:0f:4e:2f:e1:04:d3:36:f2:13:93:3d:9e:03:b4: bc:64:85:ef:9d:0f:f6:29:02:5c:c3:35:7a:7f:b6:25:db:c7: 93:19:33:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYGyEvM1Lk3t7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWY0NGVlYzEtYWZiMy00NTUxLTkxN2ItN2Q0ZjE2MTdiODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTE7CWUAIpG3nlIW0UbSYpCI4fmVGYJfncsF dCVSuPmH+noGHsHF7XF24wFTmkdlPqO8052aGMbBp8sGC1ZGVw7R6awQu2AQEjwk /LeXDiVYITpiVMEcKXx7wJss0h5FLSiEm8B4SQf37G5YLnkBmaoRgBSpGtXVeBCB R3nI9nu54bHtExCSilQpKqdTqoLszQg8k1LTGl8tQVq+iunH3NWmjxAVVWOJDrNg olc4t6LO+o7u9EDd5Dm3Ov38DHFKUxlvLXY61VbZhoI1G2L60yitUAjCqh5lbUfY NPhXfbC5b0KRlaA5rD0NU/GOqj1l5kwtzoJcq2mYGdloC240zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkJqjZxPhUQYTjpdpZc+gYBpgq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjFmNGVjYWItMDA3OC0z MGEwLTg4YWQtZTRmMmMzMzc4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWjq4vfewoFwKE+OOHnZ03RjR6bS2Fr49tcVwjjRonpYsDm/RJgxf1c bJ5W9kfK7yZs1IveNUNfZm4Je47cXKdMgvXK7BE5aVk7cXCnvTRF5HhafgIESX3m K3oeI9yqU0uedExCzCCzyelMk7nOIzgXj6MmGjpMgYYb0meW8dTzyxntRnmbXo/o ax6O2n6ZwBbMgwPCFbQolApc2fqIMO8mhjc5Gwlcieb6NJ2iysJ2qPgjf50IbqV/ 4uf/c44y23O6rDgeksVKoPn+vcC5BTqVBrs0BvNbFgZjVgoPTi/hBNM28hOTPZ4D tLxkhe+dD/YpAlzDNXp/tiXbx5MZMzc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:47 2025 by rpki-client