$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa File: 89dc4be2-10ea-36db-bac9-0f0528784800.roa (raw, json) Hash identifier: pKiQva3UJgZ9s1hYW307urz9NDv882joQ0hcCKPzC7I= Subject key identifier: 7F:78:89:2A:98:65:AF:F2:E6:2E:13:5F:D1:D2:F3:B4:52:3F:07:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADE06CE66CCC3CDF6B380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 67.54.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:de:06:ce:66:cc:c3:cd:f6:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c642de0c-082e-46c4-bba2-43b61e328d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:c1:0c:2a:3e:d4:67:0f:80:0e:ac:00:a6: c8:2d:6e:f0:3d:3e:c6:0e:68:51:93:3c:bb:a5:b7: 2e:d1:f5:81:7a:02:86:f5:61:61:04:37:0c:22:43: 60:89:1b:50:ab:3b:b0:b8:bc:54:5c:d1:34:a7:d8: 10:78:6f:21:19:a6:65:3d:0e:a8:7d:29:39:e7:bb: e2:cf:b9:7f:d9:c7:9a:48:13:32:91:35:92:ef:f7: 67:7f:b0:f9:6f:f2:0d:57:1b:6b:d3:be:2c:a6:68: 5c:38:40:c7:3d:11:03:58:12:81:91:43:8c:e8:1b: 53:ee:11:2a:ec:c0:5b:9b:8d:2f:ab:51:b7:20:a5: b6:9f:d1:f6:2b:39:04:1b:e4:dd:8b:e7:ad:9f:63: ef:e5:d1:9f:44:af:58:81:a6:86:41:b6:87:8e:66: 3b:6a:00:b3:5d:e3:d6:45:23:e1:57:90:85:d9:fc: 40:94:f4:6a:18:07:1e:a2:5b:82:3b:52:ea:62:e9: 07:e2:47:a9:93:2c:6e:c4:e2:6c:03:82:a0:74:4d: 76:a1:ae:ed:28:65:1c:77:7c:3c:5c:8d:03:a3:b9: ea:36:76:47:86:4f:4a:e6:ed:28:a4:0b:91:09:23: cf:d0:0b:c3:e8:bd:78:e5:bf:3d:03:9b:67:82:51: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:89:2A:98:65:AF:F2:E6:2E:13:5F:D1:D2:F3:B4:52:3F:07:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4a:4d:58:52:58:4a:d3:2d:af:25:a1:a2:42:e6:4c:2b:8e: 80:7a:c2:6a:68:72:be:62:a0:d8:aa:65:4a:26:f0:93:15:7d: b0:e8:32:24:6b:60:59:72:c8:8f:93:a1:b3:c2:a2:23:32:78: ee:e6:7a:30:a7:6a:4e:a4:12:02:95:d9:92:42:9f:2a:6a:d3: 83:28:c9:aa:16:47:73:3e:65:27:a9:06:35:59:08:ef:3b:c2: 55:6d:8d:86:82:40:03:4e:2f:d9:5d:9e:48:97:12:e6:05:ff: 5d:ae:80:db:1d:20:06:8c:24:fd:78:47:a5:b9:82:d3:70:7b: 3c:97:2d:0a:c3:fc:29:ff:4b:b4:e5:f7:db:d4:10:27:35:f7: 63:94:7e:fa:0d:42:ad:5b:39:3d:bb:8c:0d:99:6a:29:8a:18: 8d:86:2f:00:4a:9d:e9:da:45:47:da:8a:78:ec:5d:53:42:63: d9:d1:78:ae:86:a2:26:65:4d:a3:a6:f0:e7:1d:6a:cc:9e:62: 73:dd:f0:2f:6a:44:9d:c0:c1:99:29:05:fc:52:5c:35:5d:f0: 26:c9:a3:6c:d4:59:de:65:8e:94:2d:d1:0f:ea:78:90:6b:da: d0:9b:6e:75:54:fc:f9:31:cb:03:c0:17:e9:0f:e6:39:f8:91: db:d8:e1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkut4GzmbMw832s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzY0MmRlMGMtMDgyZS00NmM0LWJiYTItNDNiNjFlMzI4ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h/BDCo+1GcPgA6sAKbILW7wPT7GDmhRkzy7 pbcu0fWBegKG9WFhBDcMIkNgiRtQqzuwuLxUXNE0p9gQeG8hGaZlPQ6ofSk557vi z7l/2ceaSBMykTWS7/dnf7D5b/INVxtr074spmhcOEDHPREDWBKBkUOM6BtT7hEq 7MBbm40vq1G3IKW2n9H2KzkEG+Tdi+etn2Pv5dGfRK9YgaaGQbaHjmY7agCzXePW RSPhV5CF2fxAlPRqGAceoluCO1LqYukH4kepkyxuxOJsA4KgdE12oa7tKGUcd3w8 XI0Do7nqNnZHhk9K5u0opAuRCSPP0AvD6L145b89A5tnglHG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH94iSqYZa/y5i4TX9HS87RSPwdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODlkYzRiZTItMTBlYS0z NmRiLWJhYzktMGYwNTI4Nzg0ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzanMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRKTVhSWErTLa8loaJC5kwrjoB6wmpocr5ioNiqZUom8JMVfbDoMiRr YFlyyI+TobPCoiMyeO7mejCnak6kEgKV2ZJCnypq04MoyaoWR3M+ZSepBjVZCO87 wlVtjYaCQANOL9ldnkiXEuYF/12ugNsdIAaMJP14R6W5gtNwezyXLQrD/Cn/S7Tl 99vUECc192OUfvoNQq1bOT27jA2ZaimKGI2GLwBKnenaRUfainjsXVNCY9nReK6G oiZlTaOm8OcdasyeYnPd8C9qRJ3AwZkpBfxSXDVd8CbJo2zUWd5ljpQt0Q/qeJBr 2tCbbnVU/PkxywPAF+kP5jn4kdvY4Z0= -----END CERTIFICATE-----Generated at Tue May 6 16:10:48 2025 by rpki-client