$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa File: 3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa (raw, json) Hash identifier: carVEOrrGGUiGNW6kihaNQo8a1x7aLZQ1B5MlLpm+4c= Subject key identifier: F6:5C:5D:D7:D6:98:36:A2:40:14:31:D9:DA:45:FA:EF:26:0A:AB:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410FFC0425479A864C0EF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 67.54.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:ff:c0:42:54:79:a8:64:c0:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=582a4c20-9efa-4a52-91e4-f747f3d8cbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:76:e2:70:7d:b9:2c:ef:14:f6:8c:74:31: 20:b0:ac:e4:d5:6e:c3:a9:ca:a7:f7:c8:39:3e:0c: 55:20:38:8d:a5:22:98:a6:10:83:cf:2c:37:ed:04: 96:4f:6d:5e:6e:f3:bd:13:e7:62:ec:7f:b8:b4:c0: 31:1a:36:11:30:fd:ed:9c:9c:0e:bb:f8:ef:0f:f3: 02:e2:cc:f7:d0:c8:c0:17:86:91:24:df:2f:6b:e7: a1:67:44:8b:f8:e8:7c:99:27:f1:2f:ec:01:81:cc: 77:b7:b3:b8:fd:57:62:d0:d2:0a:66:0b:67:c8:5a: 25:38:97:94:c4:a0:e4:52:9d:66:c2:67:b9:f3:c0: 8b:54:04:c3:94:bc:94:f5:c7:58:fd:67:4b:aa:29: e3:73:cf:b4:0b:f4:d0:bf:28:a0:f7:71:e1:5d:f1: 86:3d:c3:50:c9:b3:e0:8f:a7:c6:69:2e:51:73:d0: ed:7f:84:bd:2e:f2:ad:67:b2:58:a7:33:70:e5:90: 8d:c3:39:af:85:66:06:80:cf:e1:1c:8a:f5:80:20: cc:ad:c7:71:10:56:88:ca:12:62:48:83:90:5b:09: d6:2e:2a:1c:45:ac:61:20:b1:31:67:72:b9:a5:be: f2:2c:86:1f:19:38:87:3e:c9:db:90:77:87:5d:90: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5C:5D:D7:D6:98:36:A2:40:14:31:D9:DA:45:FA:EF:26:0A:AB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e1dce51-62ec-358d-a9b8-a3c9afe39a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ce:8f:ea:ce:ec:a1:b9:83:93:b5:95:45:19:d2:77:f5:d5: fa:89:40:16:11:42:45:b9:6a:dc:6e:90:91:6d:51:3b:bd:d5: a7:2c:8e:5a:45:81:69:12:4d:b9:90:5b:95:38:1c:84:e3:c3: ec:ff:8f:4a:fc:00:3b:e9:c6:48:a4:f2:d4:ec:f1:cf:39:4b: a0:a5:89:e9:a0:73:6f:c0:8f:ba:31:66:6f:09:7e:f3:18:9f: ea:7b:e9:0b:f2:5f:a6:1f:a5:75:62:02:df:61:b6:49:69:e5: b3:f1:33:5a:39:20:74:aa:a0:a7:c1:52:df:f8:e0:b6:f8:56: a7:01:c7:7f:92:82:b9:7f:66:ee:b4:2d:f4:0d:52:db:74:7e: 5f:8d:a0:63:26:44:ca:9a:56:09:31:16:b5:e2:c4:bb:13:8f: 9d:df:a3:d4:9a:cd:72:0a:6e:e8:a8:9c:4f:f4:ea:3c:0d:07: 02:b5:da:a1:7d:86:ef:de:6a:1f:45:67:f9:02:c2:55:9c:3d: 94:c0:1b:72:93:68:a1:36:9c:09:7c:22:b8:20:04:01:ec:a6: 6f:89:28:23:00:71:72:42:88:a3:94:f5:f0:53:04:a0:c4:ab: 1e:38:a3:28:7b:85:92:43:2f:fd:6f:fe:2f:95:77:29:fd:29: 2a:8b:a2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEP/AQlR5qGTA7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTgyYTRjMjAtOWVmYS00YTUyLTkxZTQtZjc0N2YzZDhjYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhR24nB9uSzvFPaMdDEgsKzk1W7Dqcqn98g5 PgxVIDiNpSKYphCDzyw37QSWT21ebvO9E+di7H+4tMAxGjYRMP3tnJwOu/jvD/MC 4sz30MjAF4aRJN8va+ehZ0SL+Oh8mSfxL+wBgcx3t7O4/Vdi0NIKZgtnyFolOJeU xKDkUp1mwme588CLVATDlLyU9cdY/WdLqinjc8+0C/TQvyig93HhXfGGPcNQybPg j6fGaS5Rc9Dtf4S9LvKtZ7JYpzNw5ZCNwzmvhWYGgM/hHIr1gCDMrcdxEFaIyhJi SIOQWwnWLiocRaxhILExZ3K5pb7yLIYfGTiHPsnbkHeHXZBifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZcXdfWmDaiQBQx2dpF+u8mCqszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UxZGNlNTEtNjJlYy0z NThkLWE5YjgtYTNjOWFmZTM5YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzOj+rO7KG5g5O1lUUZ0nf11fqJQBYRQkW5atxukJFtUTu91acsjlpF gWkSTbmQW5U4HITjw+z/j0r8ADvpxkik8tTs8c85S6Cliemgc2/Aj7oxZm8JfvMY n+p76QvyX6YfpXViAt9htklp5bPxM1o5IHSqoKfBUt/44Lb4VqcBx3+Sgrl/Zu60 LfQNUtt0fl+NoGMmRMqaVgkxFrXixLsTj53fo9SazXIKbuionE/06jwNBwK12qF9 hu/eah9FZ/kCwlWcPZTAG3KTaKE2nAl8IrggBAHspm+JKCMAcXJCiKOU9fBTBKDE qx44oyh7hZJDL/1v/i+Vdyn9KSqLooI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:16 2025 by rpki-client