$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98d8e288-2bf7-3b7f-9e4d-be012ccb0340.roa File: 98d8e288-2bf7-3b7f-9e4d-be012ccb0340.roa (raw, json) Hash identifier: OqzrjUCaujiAOvCouslwVxzy9bQrsfYJcuvK/hX5y1g= Subject key identifier: E7:38:0C:0F:FB:6C:B1:84:F8:B2:3B:DB:83:FD:2A:51:20:B1:F0:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410FE9F527C86823B6AF080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98d8e288-2bf7-3b7f-9e4d-be012ccb0340.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 67.54.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:fe:9f:52:7c:86:82:3b:6a:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=36fce44e-1c13-44b2-9e1c-447b0935e46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:0a:56:be:45:34:5b:7d:33:f7:7e:e0:90: 5a:dc:a2:ec:e1:d9:73:26:75:66:c0:2f:5b:9c:2a: a8:2b:ef:b4:6c:8d:b3:ee:f4:ca:a2:6b:a5:4d:37: 3e:59:3e:2d:bc:a6:89:22:2e:8f:ee:a3:ba:9c:fc: 5c:d4:72:62:6d:64:d1:cd:a5:c6:7d:3c:90:21:c4: 00:f6:04:93:ea:9b:1b:49:99:6f:4a:35:83:7a:e3: be:c0:93:15:22:4d:53:a4:ca:65:45:d9:73:98:13: 2b:75:af:64:5c:2e:86:26:38:9f:56:16:e9:28:bf: 8c:82:e0:81:cd:22:c8:48:02:a2:d1:e0:61:65:93: 43:a1:19:21:36:d8:2d:25:04:ad:dc:ed:a1:3c:83: ad:df:a7:72:da:f0:50:05:1f:f7:1b:dc:08:81:65: 85:6d:aa:82:44:d0:0d:9e:a5:83:f2:7b:4c:d3:0b: 14:81:dc:3a:ad:c3:50:43:a0:56:7a:33:d3:c2:a7: d9:6b:4f:7c:4d:7b:99:a0:78:ac:44:ec:08:25:ee: 61:b2:a5:18:a7:6c:d3:15:3d:c1:3e:ab:33:d4:91: 7b:f7:b3:66:b8:6a:72:10:7a:5f:ee:7e:9e:2b:bf: 36:cd:0c:c0:f8:a3:cf:ce:4c:61:9a:ba:16:93:c4: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:38:0C:0F:FB:6C:B1:84:F8:B2:3B:DB:83:FD:2A:51:20:B1:F0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98d8e288-2bf7-3b7f-9e4d-be012ccb0340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a3:7a:59:cb:fb:a6:a5:d4:01:24:d6:55:ca:98:6d:cf:ad: 95:08:06:04:b7:0b:92:a7:29:b7:0e:54:f5:6f:44:da:d7:9b: 15:78:67:6e:a9:58:b5:26:78:29:7e:2a:1f:cb:32:54:86:f4: e1:05:cd:89:e9:07:11:88:a4:da:03:52:dd:7d:07:00:99:ed: cb:64:8e:0b:d0:95:74:bb:0a:22:fa:b7:5c:4f:73:c5:fd:c0: f5:dc:95:55:9d:b9:3b:55:65:62:e1:19:5a:71:18:9d:ef:db: 3b:2b:ee:4a:09:75:af:64:0b:0b:94:36:87:85:2e:8e:07:d4: 64:35:e5:d4:85:5c:85:c5:eb:36:64:f7:08:65:85:c8:5f:c9: a4:0c:90:5a:54:ed:d7:54:30:d5:86:a0:a4:d2:36:df:a4:c6: de:5f:ff:46:b9:9e:bb:e0:5b:37:31:0e:1b:96:16:6c:48:0c: 07:da:bd:18:74:22:df:ab:5b:3d:3c:64:60:bc:c1:8f:76:a8: 05:03:ca:29:27:fe:ae:9e:50:5c:22:54:cf:b4:73:59:01:9c: 5c:07:95:9a:b4:b0:f6:fd:18:50:50:e0:42:19:92:68:79:06: 2a:cb:6c:1c:27:70:89:be:17:90:7c:a5:b8:f3:6f:78:e1:52: 50:ae:ea:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEP6fUnyGgjtq8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzZmY2U0NGUtMWMxMy00NGIyLTllMWMtNDQ3YjA5MzVlNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskUKVr5FNFt9M/d+4JBa3KLs4dlzJnVmwC9b nCqoK++0bI2z7vTKomulTTc+WT4tvKaJIi6P7qO6nPxc1HJibWTRzaXGfTyQIcQA 9gST6psbSZlvSjWDeuO+wJMVIk1TpMplRdlzmBMrda9kXC6GJjifVhbpKL+MguCB zSLISAKi0eBhZZNDoRkhNtgtJQSt3O2hPIOt36dy2vBQBR/3G9wIgWWFbaqCRNAN nqWD8ntM0wsUgdw6rcNQQ6BWejPTwqfZa098TXuZoHisROwIJe5hsqUYp2zTFT3B Pqsz1JF797NmuGpyEHpf7n6eK782zQzA+KPPzkxhmroWk8TztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc4DA/7bLGE+LI724P9KlEgsfBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOThkOGUyODgtMmJmNy0z YjdmLTllNGQtYmUwMTJjY2IwMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+jelnL+6al1AEk1lXKmG3PrZUIBgS3C5KnKbcOVPVvRNrXmxV4Z26p WLUmeCl+Kh/LMlSG9OEFzYnpBxGIpNoDUt19BwCZ7ctkjgvQlXS7CiL6t1xPc8X9 wPXclVWduTtVZWLhGVpxGJ3v2zsr7koJda9kCwuUNoeFLo4H1GQ15dSFXIXF6zZk 9whlhchfyaQMkFpU7ddUMNWGoKTSNt+kxt5f/0a5nrvgWzcxDhuWFmxIDAfavRh0 It+rWz08ZGC8wY92qAUDyikn/q6eUFwiVM+0c1kBnFwHlZq0sPb9GFBQ4EIZkmh5 BirLbBwncIm+F5B8pbjzb3jhUlCu6rA= -----END CERTIFICATE-----Generated at Sat Jul 26 20:05:44 2025 by rpki-client