$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa File: c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa (raw, json) Hash identifier: vYD0KpkgUZt/uB1fr/76kCqNkV/NdMtbLDbJWPkAjdg= Subject key identifier: 51:B1:B3:FC:41:6E:8B:7B:4C:82:D3:B1:7C:5E:7A:AC:1D:73:1E:A1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84119C3E9E120E23F3E7BA40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 67.54.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:9c:3e:9e:12:0e:23:f3:e7:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6dfe0989-368e-4efb-ad73-b7fd45cf95a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:f8:65:da:04:21:cd:0f:3f:9f:dd:ec:ae: b4:1f:a4:6f:ca:30:d8:b8:6e:30:0d:15:55:ad:1c: 54:4e:b6:0f:ff:e6:10:7e:d8:3c:f6:af:90:d1:d7: 94:08:59:3b:b4:22:1d:f0:05:91:51:14:3f:85:a5: 22:12:8b:7f:99:da:52:00:98:ea:bd:10:9e:c3:10: 85:3d:36:df:f8:fb:d9:fb:47:9e:3e:a6:e6:bc:cd: 49:cd:89:02:fc:37:f3:b4:b6:20:c7:fb:4b:91:80: b9:28:79:a9:21:62:54:d8:9a:eb:bf:41:98:36:76: c8:46:27:53:78:45:ab:66:4f:99:32:ca:85:33:b4: 33:10:f7:43:0f:ff:28:b4:a0:ac:f4:7e:9e:54:31: 0e:dc:5c:08:fd:f3:7d:44:8a:ed:23:a4:17:76:73: b0:25:e6:96:39:c5:d3:04:c3:68:6f:1e:64:34:dd: 1d:62:5f:8f:9d:61:75:7b:4a:fc:bd:84:59:3b:cc: f8:ad:0c:0f:61:b9:2c:fb:93:14:89:d5:7d:b3:1e: 54:a8:ae:2e:68:88:25:93:44:75:b5:23:16:62:c6: d1:82:a0:b6:a1:6e:a6:ee:5f:a2:00:6b:d2:dd:c3: 52:a9:cc:87:19:7d:f8:76:1f:53:e8:6b:3f:3c:c6: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B1:B3:FC:41:6E:8B:7B:4C:82:D3:B1:7C:5E:7A:AC:1D:73:1E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:60:25:c8:8e:e3:5e:d8:16:51:2d:49:1f:c9:43:d5:04:a4: f9:16:0f:9c:31:63:4e:6b:47:cf:a5:96:f9:9c:23:ea:58:61: 7f:7e:c0:3e:95:b8:44:9f:a1:2e:56:9e:fc:e7:bc:85:2a:53: 66:fc:69:24:47:79:71:3e:f4:ce:28:9b:47:07:10:8d:77:e4: 94:30:d6:2c:7a:61:82:cd:82:6a:f2:05:4f:68:60:6e:dd:9b: 44:61:3c:7a:4a:f0:31:e1:c0:ae:af:de:f2:d6:1e:db:23:31: 91:cd:57:a0:b3:eb:05:36:a1:a7:43:d6:a6:e8:17:0f:4a:8d: 45:ec:85:cd:97:2e:5e:e1:aa:1c:d2:35:86:c1:4e:14:79:60: fd:cb:2a:b9:84:41:85:f4:95:df:04:db:b2:e1:ba:38:38:3e: b2:95:07:47:ec:05:19:ef:85:5f:c1:05:81:57:5a:26:90:78: 13:36:44:1a:b8:43:2f:52:93:67:bf:59:d2:5c:9d:77:e7:65: 1e:72:f8:52:9f:db:52:44:30:45:64:a8:56:9f:9a:70:ff:c7: e2:ba:76:9d:d7:e1:e8:d7:d4:45:74:4d:df:6a:d4:61:3a:28: 29:64:95:79:a9:2e:6e:58:5f:1f:e6:74:4b:71:9a:1d:d5:d9: ea:2d:df:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZw+nhIOI/PnukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmRmZTA5ODktMzY4ZS00ZWZiLWFkNzMtYjdmZDQ1Y2Y5NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Wz4ZdoEIc0PP5/d7K60H6RvyjDYuG4wDRVV rRxUTrYP/+YQftg89q+Q0deUCFk7tCId8AWRURQ/haUiEot/mdpSAJjqvRCewxCF PTbf+PvZ+0eePqbmvM1JzYkC/DfztLYgx/tLkYC5KHmpIWJU2Jrrv0GYNnbIRidT eEWrZk+ZMsqFM7QzEPdDD/8otKCs9H6eVDEO3FwI/fN9RIrtI6QXdnOwJeaWOcXT BMNobx5kNN0dYl+PnWF1e0r8vYRZO8z4rQwPYbks+5MUidV9sx5UqK4uaIglk0R1 tSMWYsbRgqC2oW6m7l+iAGvS3cNSqcyHGX34dh9T6Gs/PMa1ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGxs/xBbot7TILTsXxeeqwdcx6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZjNjE1ZTUtMWIxNC0z ZDdjLTg2YzEtMmMwZDIwZTk3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRgJciO417YFlEtSR/JQ9UEpPkWD5wxY05rR8+llvmcI+pYYX9+wD6V uESfoS5WnvznvIUqU2b8aSRHeXE+9M4om0cHEI135JQw1ix6YYLNgmryBU9oYG7d m0RhPHpK8DHhwK6v3vLWHtsjMZHNV6Cz6wU2oadD1qboFw9KjUXshc2XLl7hqhzS NYbBThR5YP3LKrmEQYX0ld8E27Lhujg4PrKVB0fsBRnvhV/BBYFXWiaQeBM2RBq4 Qy9Sk2e/WdJcnXfnZR5y+FKf21JEMEVkqFafmnD/x+K6dp3X4ejX1EV0Td9q1GE6 KClklXmpLm5YXx/mdEtxmh3V2eot32M= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:32 2025 by rpki-client