$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d27f537-e164-32cb-a5b9-96bed8d0752e.roa File: 7d27f537-e164-32cb-a5b9-96bed8d0752e.roa (raw, json) Hash identifier: 5oPHVPoLWpOE06g4SzS+nNfuWFPGiTPs9sPselkWHjE= Subject key identifier: F0:3E:A8:3D:84:54:50:71:86:58:70:73:9D:5B:8A:E1:E6:C1:C0:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410FD2577C0610AC3027C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d27f537-e164-32cb-a5b9-96bed8d0752e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 67.54.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:fd:25:77:c0:61:0a:c3:02:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=01e1ff66-9094-4457-a468-8f4fc5c0cfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:fd:de:49:c9:7e:4b:b2:5d:f7:96:25:f7: fe:64:e4:f9:a7:46:59:ee:6b:3d:7f:88:5a:04:1b: ef:f7:7e:2b:7f:e7:c9:5d:18:23:12:04:90:cc:b8: dd:f8:ea:74:d5:64:3d:6d:51:89:08:c7:59:12:95: ec:94:2d:19:db:34:df:5a:65:f7:26:0d:4e:26:d3: 44:bd:62:42:d0:3e:4c:a2:93:d8:73:f1:e8:a7:13: 0b:59:21:80:33:83:88:a2:a1:ec:4b:1f:ac:8c:0e: d2:88:4b:c3:87:77:56:42:b0:38:d4:40:7d:78:9b: f0:13:bf:30:6e:b1:b5:b7:0b:42:dc:1a:91:25:23: 63:34:6c:4f:db:90:f2:11:b0:c2:70:4d:5b:83:70: 40:cd:15:79:94:a5:23:7b:48:96:e9:57:9a:06:3a: ab:d5:73:04:65:09:60:3e:cf:08:81:e3:91:01:54: 52:04:29:d7:ce:d8:d9:4d:6d:a8:27:18:aa:e0:ed: df:e6:d1:e3:77:77:2e:02:07:01:40:61:72:b7:b8: a7:35:eb:75:5e:05:05:bc:9b:a7:8b:29:72:4b:24: bd:35:df:f1:09:b3:2c:b5:17:52:8c:55:78:e2:c4: 65:b9:93:90:d3:6f:67:81:eb:86:ec:d2:07:08:b1: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:A8:3D:84:54:50:71:86:58:70:73:9D:5B:8A:E1:E6:C1:C0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d27f537-e164-32cb-a5b9-96bed8d0752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:21:91:1a:56:ef:2e:b1:73:9e:14:52:25:44:40:e0:21:71: d6:2e:49:ee:8d:6d:a0:9f:a6:a3:45:fd:ac:69:e6:23:1c:05: 90:8a:04:dc:33:0a:24:78:b4:34:62:62:08:58:f9:8c:ac:9b: bb:18:a5:6c:4d:90:13:24:f0:27:47:db:69:fa:2b:c1:36:7e: 46:28:5f:7f:84:32:e9:f8:da:23:b5:e6:9c:02:cc:93:42:5e: ba:dd:7b:1f:f1:50:88:10:80:ba:d0:98:17:2f:f8:85:dc:1e: d3:16:ef:50:ba:f9:0e:31:a6:92:37:80:cc:5d:71:fb:13:82: 4e:7e:59:4f:a2:82:87:fa:e4:66:4b:2b:c6:3d:59:02:6d:4c: 2a:fd:16:77:a3:29:5a:53:cc:e1:36:1b:f4:ee:d8:21:e0:d6: 6a:70:3a:f8:91:0b:1d:53:6d:67:24:a6:42:50:b0:1f:c9:0f: aa:61:43:4c:64:1f:0b:4f:c4:c4:0d:13:b3:b8:46:1b:bc:81: 60:ad:af:1f:9e:f9:b9:61:10:2b:f7:d7:3b:63:f6:3d:c4:c1: 12:d6:c5:25:2e:bd:c5:f0:8b:7b:cd:fd:32:5c:00:29:74:5e: 2b:0c:10:b1:c4:a7:db:04:ea:6f:d5:ce:67:89:ca:cd:75:13: 6e:7a:22:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEP0ld8BhCsMCfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDFlMWZmNjYtOTA5NC00NDU3LWE0NjgtOGY0ZmM1YzBjZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltr93knJfkuyXfeWJff+ZOT5p0ZZ7ms9f4ha BBvv934rf+fJXRgjEgSQzLjd+Op01WQ9bVGJCMdZEpXslC0Z2zTfWmX3Jg1OJtNE vWJC0D5MopPYc/HopxMLWSGAM4OIoqHsSx+sjA7SiEvDh3dWQrA41EB9eJvwE78w brG1twtC3BqRJSNjNGxP25DyEbDCcE1bg3BAzRV5lKUje0iW6VeaBjqr1XMEZQlg Ps8IgeORAVRSBCnXztjZTW2oJxiq4O3f5tHjd3cuAgcBQGFyt7inNet1XgUFvJun iylySyS9Nd/xCbMstRdSjFV44sRluZOQ029ngeuG7NIHCLGUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA+qD2EVFBxhlhwc51biuHmwcDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2QyN2Y1MzctZTE2NC0z MmNiLWE1YjktOTZiZWQ4ZDA3NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQhkRpW7y6xc54UUiVEQOAhcdYuSe6NbaCfpqNF/axp5iMcBZCKBNwz CiR4tDRiYghY+Yysm7sYpWxNkBMk8CdH22n6K8E2fkYoX3+EMun42iO15pwCzJNC Xrrdex/xUIgQgLrQmBcv+IXcHtMW71C6+Q4xppI3gMxdcfsTgk5+WU+igof65GZL K8Y9WQJtTCr9FnejKVpTzOE2G/Tu2CHg1mpwOviRCx1TbWckpkJQsB/JD6phQ0xk HwtPxMQNE7O4Rhu8gWCtrx+e+blhECv31ztj9j3EwRLWxSUuvcXwi3vN/TJcACl0 XisMELHEp9sE6m/VzmeJys11E256IgI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:39:54 2025 by rpki-client