$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/745de132-3f8b-3588-9280-4a8c7d0c933b.roa File: 745de132-3f8b-3588-9280-4a8c7d0c933b.roa (raw, json) Hash identifier: g9SR/upQB4+3CCChIeMQw8vsqiAmrekpLXGuBSXmPh8= Subject key identifier: E4:96:10:ED:EA:3B:D9:4B:C1:B6:1B:86:7E:54:AC:86:60:A8:07:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5353B313F619C2B91860 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/745de132-3f8b-3588-9280-4a8c7d0c933b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:53:53:b3:13:f6:19:c2:b9:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=778fb419-0b0f-443c-9399-081b5adf32ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:7f:1a:5b:99:14:a8:76:12:26:2b:56:b5: 58:b0:75:ab:7e:95:1e:23:9f:f7:3c:20:fb:0b:fb: c4:5d:c9:b1:1a:60:46:f7:50:90:ab:58:f9:9c:bb: d0:85:8d:52:4d:0d:2a:37:a4:16:1f:ae:b8:7c:40: 83:44:77:42:98:12:74:e9:f0:f8:c1:2b:96:d0:0a: 82:9b:4a:dd:f3:1d:30:5b:81:d6:03:9d:95:c3:bc: 94:ba:63:93:00:69:68:9c:67:11:cc:22:51:76:20: 12:8d:2a:e3:a2:32:2e:f2:63:7e:8f:68:b3:ee:7c: 4e:95:75:f7:af:b1:3f:bc:b3:fd:1c:5b:78:5b:19: e1:05:7a:4f:7e:cd:24:71:1c:1e:ed:d5:e1:2c:27: 55:2c:00:e9:a8:72:e7:d5:02:50:62:76:a5:41:f6: 04:a1:ee:df:95:96:ae:f3:2a:bd:13:44:d2:b3:79: ff:ae:18:f5:07:89:e1:23:f6:68:43:e8:c9:ca:da: 80:05:ed:74:ab:af:f0:d5:bb:48:78:d3:30:01:1c: 24:30:06:1f:40:23:40:27:07:74:4c:08:01:e5:d5: 77:8d:d9:98:b8:6f:84:50:31:ad:c6:33:8b:01:87: 59:1a:e7:d7:65:0b:50:67:39:51:e9:1e:4d:ad:89: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:10:ED:EA:3B:D9:4B:C1:B6:1B:86:7E:54:AC:86:60:A8:07:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/745de132-3f8b-3588-9280-4a8c7d0c933b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fb:e9:02:a1:2c:3d:38:69:5d:5b:eb:8e:26:7d:4a:64:e8: 22:d1:72:36:ad:27:28:2b:12:b2:a7:2b:de:5f:78:44:3b:ad: 2d:2d:5d:75:d9:fa:a1:da:9d:86:39:43:21:a9:6f:d8:74:65: ca:68:94:96:0b:9e:66:23:d3:8f:0b:e5:4f:fc:f3:9b:64:ac: 68:ef:71:e9:e7:c9:7c:d2:3e:6e:f4:22:5d:90:f8:64:65:c2: c3:cf:40:9a:57:26:ff:be:42:80:4b:88:80:5f:b9:88:91:ca: 38:df:83:db:af:33:33:18:6c:94:0c:63:0c:76:8c:08:2e:d3: 85:50:d1:66:a8:9f:fe:be:67:33:e0:c1:9f:ab:21:9b:dd:29: 1a:79:74:ce:0f:27:64:94:70:ff:73:41:48:f1:96:3b:03:4f: 50:b9:9f:a1:63:28:78:f7:04:d9:90:9a:c1:42:8e:00:48:b7: 5e:4d:cc:b1:dd:a0:f2:13:c6:c9:00:20:ae:41:20:65:29:17: f0:05:21:05:b9:f6:e6:de:dd:22:00:50:31:14:10:78:8b:f2: d6:e4:3d:f1:e8:65:81:c4:86:59:3a:3c:5c:fa:98:ae:c0:e2: c1:c4:de:e5:b8:10:0a:e6:d2:03:d7:a6:34:a4:2e:f6:7f:1c: d2:bf:77:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulNTsxP2GcK5GGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Nzc4ZmI0MTktMGIwZi00NDNjLTkzOTktMDgxYjVhZGYzMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvF/GluZFKh2EiYrVrVYsHWrfpUeI5/3PCD7 C/vEXcmxGmBG91CQq1j5nLvQhY1STQ0qN6QWH664fECDRHdCmBJ06fD4wSuW0AqC m0rd8x0wW4HWA52Vw7yUumOTAGlonGcRzCJRdiASjSrjojIu8mN+j2iz7nxOlXX3 r7E/vLP9HFt4WxnhBXpPfs0kcRwe7dXhLCdVLADpqHLn1QJQYnalQfYEoe7flZau 8yq9E0TSs3n/rhj1B4nhI/ZoQ+jJytqABe10q6/w1btIeNMwARwkMAYfQCNAJwd0 TAgB5dV3jdmYuG+EUDGtxjOLAYdZGufXZQtQZzlR6R5NrYkDZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSWEO3qO9lLwbYbhn5UrIZgqAf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzQ1ZGUxMzItM2Y4Yi0z NTg4LTkyODAtNGE4YzdkMGM5MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX76QKhLD04aV1b644mfUpk6CLRcjatJygrErKnK95feEQ7rS0tXXXZ +qHanYY5QyGpb9h0ZcpolJYLnmYj048L5U/885tkrGjvcennyXzSPm70Il2Q+GRl wsPPQJpXJv++QoBLiIBfuYiRyjjfg9uvMzMYbJQMYwx2jAgu04VQ0Waon/6+ZzPg wZ+rIZvdKRp5dM4PJ2SUcP9zQUjxljsDT1C5n6FjKHj3BNmQmsFCjgBIt15NzLHd oPITxskAIK5BIGUpF/AFIQW59ube3SIAUDEUEHiL8tbkPfHoZYHEhlk6PFz6mK7A 4sHE3uW4EArm0gPXpjSkLvZ/HNK/dzM= -----END CERTIFICATE-----Generated at Sun May 11 22:01:55 2025 by rpki-client