$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa File: d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa (raw, json) Hash identifier: l61w+svpcrq+y2XNu5z6LOdkb+14SpjgftzSd+okz7A= Subject key identifier: 2D:A8:56:BB:B7:44:3B:B5:86:F5:F0:18:0C:44:39:40:78:E6:33:56 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCC68EFE449584B33F6080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 67.54.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:c6:8e:fe:44:95:84:b3:3f:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3e0250b6-14c0-4897-b24c-d0c356ee7e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:71:ba:03:c5:86:88:89:05:74:66:64:86: a7:91:3a:bc:82:73:30:e4:60:51:37:4e:ec:a5:22: 09:40:21:56:ea:1f:a1:19:6b:50:4f:b5:30:cf:f8: a5:6a:50:ea:9b:86:cb:63:8c:9f:a2:94:6e:52:9c: 85:3c:15:ca:d1:1a:68:a2:7c:d8:21:d7:88:81:75: a2:da:69:9e:3a:9f:fa:c9:94:d7:fc:be:f7:7c:fd: 65:a5:a1:9b:ac:15:ee:ec:40:b6:57:2e:a1:a0:a7: 4d:75:92:42:49:69:e6:00:cd:26:2b:90:80:f1:ad: e6:ea:82:9c:f0:85:a9:d5:8e:27:cb:ab:cc:4e:02: 69:68:ac:46:a6:a4:cb:ac:7e:e1:47:89:21:ee:a1: 05:97:26:d5:20:24:55:ea:da:61:49:95:a8:dd:21: a2:aa:8a:8d:98:ed:b0:39:b9:3d:c3:07:ec:1f:80: cc:b1:de:fd:d0:f5:91:66:30:57:c2:ed:2d:e8:6b: b7:a5:8c:b9:d9:32:0b:f6:9c:7b:12:c9:de:82:dc: 22:34:88:81:54:f6:9f:7d:93:ee:aa:3a:5d:b5:b1: bc:c0:cb:f5:93:78:3f:df:04:00:a3:4b:54:c7:83: 0d:18:76:3f:89:cd:d6:28:35:41:57:8a:cf:30:cb: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A8:56:BB:B7:44:3B:B5:86:F5:F0:18:0C:44:39:40:78:E6:33:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:52:10:0d:59:71:8d:48:d1:b7:ac:ac:df:bb:4b:8f:df:ac: 7d:4f:8e:ce:cc:b8:db:83:8e:9d:2f:c2:d3:ee:e1:ff:99:17: c7:d8:98:e4:82:ae:58:a5:2f:f2:6d:45:a5:28:ad:77:d6:14: 4f:d5:3b:72:f2:1f:20:7a:43:36:89:3d:f0:40:04:11:f6:e9: 13:5a:78:d7:0e:25:22:de:9d:d8:20:98:11:af:a3:17:b6:64: 91:89:14:3a:6b:41:d9:67:98:22:f9:45:ec:ff:3c:a2:d2:d8: 94:33:54:a5:2f:11:ee:83:0b:9b:49:c3:55:d4:6c:a3:c7:6d: 4e:47:2b:36:ae:be:7c:f6:62:48:c6:c3:3a:be:8a:77:4c:8c: c0:8b:35:45:eb:e6:75:2f:9f:2b:d4:ba:83:f6:f2:cb:89:19: cc:1c:52:35:9d:e2:6c:98:1d:ba:ca:9a:55:43:8d:f3:ab:d6: 09:a6:96:43:44:e8:2f:ae:24:53:59:86:83:4a:5b:74:53:b0: 6d:0c:e5:8d:f4:f2:e7:de:53:a7:db:a3:00:35:29:52:26:8e: d0:a8:88:dc:a8:e3:ab:02:93:13:a4:23:61:81:59:14:d9:f0: 60:73:46:e4:e2:f3:f7:c9:69:28:be:2a:9e:32:33:a7:c2:e7: f6:89:d9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMaO/kSVhLM/YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2UwMjUwYjYtMTRjMC00ODk3LWIyNGMtZDBjMzU2ZWU3ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDtxugPFhoiJBXRmZIankTq8gnMw5GBRN07s pSIJQCFW6h+hGWtQT7Uwz/ilalDqm4bLY4yfopRuUpyFPBXK0RpoonzYIdeIgXWi 2mmeOp/6yZTX/L73fP1lpaGbrBXu7EC2Vy6hoKdNdZJCSWnmAM0mK5CA8a3m6oKc 8IWp1Y4ny6vMTgJpaKxGpqTLrH7hR4kh7qEFlybVICRV6tphSZWo3SGiqoqNmO2w Obk9wwfsH4DMsd790PWRZjBXwu0t6Gu3pYy52TIL9px7EsnegtwiNIiBVPaffZPu qjpdtbG8wMv1k3g/3wQAo0tUx4MNGHY/ic3WKDVBV4rPMMvHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2oVru3RDu1hvXwGAxEOUB45jNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDMzYzI4YjUtNTgwOS0z ZGFkLWFmZjMtNWFlOGE1ZTc1ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBSEA1ZcY1I0besrN+7S4/frH1Pjs7MuNuDjp0vwtPu4f+ZF8fYmOSC rlilL/JtRaUorXfWFE/VO3LyHyB6QzaJPfBABBH26RNaeNcOJSLendggmBGvoxe2 ZJGJFDprQdlnmCL5Rez/PKLS2JQzVKUvEe6DC5tJw1XUbKPHbU5HKzauvnz2YkjG wzq+indMjMCLNUXr5nUvnyvUuoP28suJGcwcUjWd4myYHbrKmlVDjfOr1gmmlkNE 6C+uJFNZhoNKW3RTsG0M5Y308ufeU6fbowA1KVImjtCoiNyo46sCkxOkI2GBWRTZ 8GBzRuTi8/fJaSi+Kp4yM6fC5/aJ2U0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:02 2025 by rpki-client