$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db5b9ad8-c2ac-3bfb-8960-046923fdf264.roa File: db5b9ad8-c2ac-3bfb-8960-046923fdf264.roa (raw, json) Hash identifier: ICGWplvkY0ObLJn0ok9ThYSXlQpXUFhSRRj2LDrcsL8= Subject key identifier: 3A:1F:20:30:22:43:FC:6E:BA:B5:00:8B:D5:FC:13:35:B1:4F:E0:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD7EAB630978F3D5389220 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db5b9ad8-c2ac-3bfb-8960-046923fdf264.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 67.54.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:7e:ab:63:09:78:f3:d5:38:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=be175ffb-77b5-4e6f-b45f-ee3af7433c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:bd:34:47:17:30:ba:a7:87:c9:e7:6f:4c: e7:14:18:15:9c:f5:ec:36:96:71:9d:9a:bf:02:da: 22:3f:e6:dc:8f:cb:26:72:c8:6f:9c:94:7f:5f:f2: 4b:47:c6:1d:9a:9c:ba:a9:bb:a7:d8:e5:49:20:03: 70:ca:4b:92:5a:9f:3e:51:cd:9e:ce:d3:6f:73:e3: 31:d7:3e:88:55:d0:13:58:c4:79:f1:4a:c3:8b:06: 52:c0:4e:b4:73:fa:74:20:38:4c:bb:0c:54:b2:82: 3b:08:aa:25:3b:33:fc:02:95:1a:eb:6a:f6:a9:46: bf:5d:53:b0:c5:a6:7e:d1:46:57:c7:4f:10:41:ff: f0:a3:90:a4:50:9c:cb:7d:fb:ad:66:54:cc:39:0f: 6c:96:e2:4f:38:54:62:04:cd:94:3c:b1:60:c3:e5: fd:29:fe:bf:49:7a:69:cc:1f:eb:d1:9d:25:c9:3e: e8:e4:f3:c7:73:29:00:48:4a:c4:fb:dd:a8:32:d5: 8d:37:94:db:2a:b2:aa:d8:42:21:98:e0:98:97:49: 95:79:d6:b6:87:3f:25:38:e5:3c:56:e2:72:0c:f1: d0:19:c3:a2:02:85:11:c1:09:e2:ae:68:70:e5:8c: 61:8e:3d:f3:9f:22:e0:a6:de:b7:59:c6:ae:99:65: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1F:20:30:22:43:FC:6E:BA:B5:00:8B:D5:FC:13:35:B1:4F:E0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db5b9ad8-c2ac-3bfb-8960-046923fdf264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6b:1a:bc:bd:e0:7f:cb:59:81:4c:9c:e6:4e:66:4d:bc:80: 40:43:e1:9f:78:9a:bb:09:3f:fa:c8:5e:2e:ee:6a:2b:76:7e: 4e:ad:5e:02:78:49:c2:e1:b4:f9:9c:08:aa:60:1d:db:8b:76: 38:27:00:9b:8b:e2:29:dd:8c:25:2d:df:b5:e7:ca:ae:06:b5: f3:af:e8:40:d1:6f:8c:42:5a:c5:98:61:f7:ad:2a:39:2e:ef: dd:b1:ff:92:3d:f9:c8:66:46:a7:76:34:a9:4f:b2:44:87:02: f8:30:6e:9d:4c:81:0d:a2:ce:42:a0:f8:fa:bf:ab:ae:fc:70: 74:65:e9:2c:6b:fe:b3:1e:c4:8d:04:fd:38:af:55:09:f2:de: 12:27:70:69:07:a9:cf:30:70:20:40:04:4d:93:4d:1d:a7:61: 01:b1:4e:bf:5a:06:0e:c2:14:9f:2b:87:1d:c3:3a:50:41:91: dc:20:60:ad:42:7e:84:2e:6d:d4:85:21:47:04:d6:ce:93:01: ad:75:0d:06:b9:a5:fd:e1:0c:f8:03:84:c4:10:13:5f:29:e8: 75:70:4e:94:83:bc:43:53:b5:5c:be:5a:d5:80:49:3f:3d:20: 1c:ba:31:31:40:cb:ea:34:65:12:be:b5:26:96:28:66:ed:ff: 54:62:58:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzX6rYwl489U4kiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmUxNzVmZmItNzdiNS00ZTZmLWI0NWYtZWUzYWY3NDMzYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A+9NEcXMLqnh8nnb0znFBgVnPXsNpZxnZq/ AtoiP+bcj8smcshvnJR/X/JLR8Ydmpy6qbun2OVJIANwykuSWp8+Uc2eztNvc+Mx 1z6IVdATWMR58UrDiwZSwE60c/p0IDhMuwxUsoI7CKolOzP8ApUa62r2qUa/XVOw xaZ+0UZXx08QQf/wo5CkUJzLffutZlTMOQ9sluJPOFRiBM2UPLFgw+X9Kf6/SXpp zB/r0Z0lyT7o5PPHcykASErE+92oMtWNN5TbKrKq2EIhmOCYl0mVeda2hz8lOOU8 VuJyDPHQGcOiAoURwQnirmhw5Yxhjj3znyLgpt63WcaumWXU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDofIDAiQ/xuurUAi9X8EzWxT+AJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGI1YjlhZDgtYzJhYy0z YmZiLTg5NjAtMDQ2OTIzZmRmMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBrGry94H/LWYFMnOZOZk28gEBD4Z94mrsJP/rIXi7uait2fk6tXgJ4 ScLhtPmcCKpgHduLdjgnAJuL4indjCUt37Xnyq4GtfOv6EDRb4xCWsWYYfetKjku 792x/5I9+chmRqd2NKlPskSHAvgwbp1MgQ2izkKg+Pq/q678cHRl6Sxr/rMexI0E /TivVQny3hIncGkHqc8wcCBABE2TTR2nYQGxTr9aBg7CFJ8rhx3DOlBBkdwgYK1C foQubdSFIUcE1s6TAa11DQa5pf3hDPgDhMQQE18p6HVwTpSDvENTtVy+WtWAST89 IBy6MTFAy+o0ZRK+tSaWKGbt/1RiWDk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:50 2025 by rpki-client