$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa File: 8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa (raw, json) Hash identifier: 7O17NnynwhZg4AuQHkNVwW+GWizcoCfz5xol2u3S3pM= Subject key identifier: F4:F2:8E:70:08:51:5F:F3:79:FD:B5:E3:D2:AA:6E:70:E8:20:2D:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD7EEF2F8395B89280D200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 67.54.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:7e:ef:2f:83:95:b8:92:80:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a2c244ab-22c8-4711-83da-ecfba2bb556d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:0e:76:09:c5:9a:27:ed:67:6c:1e:a4:85: e2:63:68:5d:3b:8e:3d:f1:bd:43:63:e4:ea:bd:33: 16:e3:66:ea:d1:82:b7:cd:ed:28:6f:f8:9d:42:a9: 9e:37:74:0a:09:55:49:0f:e6:34:21:43:8a:0c:f6: 13:10:f2:b7:29:da:14:d1:d4:b9:44:8b:03:10:32: 39:ed:93:2e:80:35:ec:df:96:4c:a2:51:7e:3f:0b: 08:cb:af:f8:22:09:51:be:fe:f4:52:fc:97:5d:d2: c4:da:90:bc:9d:72:a0:c8:59:cf:30:46:c0:6e:37: 9b:11:5d:90:03:37:4b:b8:78:ca:22:92:00:e1:7b: f2:f3:dd:ce:66:fb:68:ee:f0:28:1d:22:3b:5a:67: 5f:83:8f:4e:79:17:f2:3b:b9:1d:94:d1:af:24:f6: b6:67:a0:e8:b4:be:ca:f9:00:81:3b:d5:62:86:82: 21:71:d1:cd:1c:a7:1f:8b:04:16:b9:1c:9e:7c:ed: b3:60:24:ad:6a:84:a1:d8:91:46:7c:5f:94:56:89: 70:de:18:9c:69:a4:0e:ec:97:f3:ef:a0:f5:c5:6e: 94:3a:cc:a5:a4:2d:97:ca:da:3b:63:75:ac:0b:54: 73:9b:46:21:06:7c:02:65:29:51:a4:67:7a:6d:e9: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F2:8E:70:08:51:5F:F3:79:FD:B5:E3:D2:AA:6E:70:E8:20:2D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f17d863-2ce8-31f5-bae1-e9fa7d8b3a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:d6:c3:d9:43:ba:f5:0b:64:4b:50:e1:1e:a8:10:48:10:9b: aa:78:78:ad:a6:96:1e:53:9c:1f:ff:55:27:54:1e:cc:7a:69: 60:c5:18:7c:5c:cc:e0:cb:30:57:83:f8:9d:b6:b4:ce:c6:14: 02:c5:a9:87:b5:1b:d6:15:79:e3:18:8a:59:5c:d6:60:7d:d4: f8:72:d3:ab:57:0b:cc:dd:ab:e3:e0:74:95:b1:d1:fa:c3:f2: a6:81:84:48:d8:f8:b4:06:f7:06:36:6b:bd:5f:17:e8:8c:1c: 2d:c4:8d:de:ff:06:c6:56:c8:75:b4:53:c7:55:4a:ea:e8:ba: 88:4e:df:3d:dc:37:77:09:46:91:d9:53:70:2e:d5:2f:be:46: 7b:3d:f6:06:40:4e:a1:fb:a3:bf:cf:9a:83:91:76:97:7d:0e: 37:d4:38:35:d9:82:22:2f:5f:9e:b1:49:e9:57:80:f6:ad:b2: 92:36:e9:9f:1d:02:b5:a5:cb:e5:1b:ed:93:32:88:bb:dc:c8: 73:e0:bf:cb:78:f8:bd:b6:77:19:c1:44:df:2b:90:45:6b:20: 93:6b:37:1c:4e:71:bd:08:c6:7b:41:0a:04:d6:de:ae:d7:b8: 54:9e:1c:40:39:d7:91:9f:f7:51:10:d2:6c:b9:c4:7b:5f:a5: 08:ae:10:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzX7vL4OVuJKA0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTJjMjQ0YWItMjJjOC00NzExLTgzZGEtZWNmYmEyYmI1NTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifcOdgnFmiftZ2wepIXiY2hdO4498b1DY+Tq vTMW42bq0YK3ze0ob/idQqmeN3QKCVVJD+Y0IUOKDPYTEPK3KdoU0dS5RIsDEDI5 7ZMugDXs35ZMolF+PwsIy6/4IglRvv70UvyXXdLE2pC8nXKgyFnPMEbAbjebEV2Q AzdLuHjKIpIA4Xvy893OZvto7vAoHSI7Wmdfg49OeRfyO7kdlNGvJPa2Z6DotL7K +QCBO9VihoIhcdHNHKcfiwQWuRyefO2zYCStaoSh2JFGfF+UVolw3hicaaQO7Jfz 76D1xW6UOsylpC2Xyto7Y3WsC1Rzm0YhBnwCZSlRpGd6belELQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTyjnAIUV/zef2149KqbnDoIC3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYxN2Q4NjMtMmNlOC0z MWY1LWJhZTEtZTlmYTdkOGIzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnWw9lDuvULZEtQ4R6oEEgQm6p4eK2mlh5TnB//VSdUHsx6aWDFGHxc zODLMFeD+J22tM7GFALFqYe1G9YVeeMYillc1mB91Phy06tXC8zdq+PgdJWx0frD 8qaBhEjY+LQG9wY2a71fF+iMHC3Ejd7/BsZWyHW0U8dVSurouohO3z3cN3cJRpHZ U3Au1S++Rns99gZATqH7o7/PmoORdpd9DjfUODXZgiIvX56xSelXgPatspI26Z8d ArWly+Ub7ZMyiLvcyHPgv8t4+L22dxnBRN8rkEVrIJNrNxxOcb0IxntBCgTW3q7X uFSeHEA515Gf91EQ0my5xHtfpQiuEKA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:23:02 2025 by rpki-client