$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa File: 6477d61b-0201-3736-9656-a4dbe46fd5f7.roa (raw, json) Hash identifier: D4JV1Jc2uEg5/Rdzbim2iCdTjV/Xrr8/74QOjmei/Zg= Subject key identifier: 90:41:8E:9E:5C:7F:5E:9B:B9:F8:E8:64:7D:D1:6C:C8:37:5A:3D:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FE70976AAFC7476EEB40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 67.54.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fe:70:97:6a:af:c7:47:6e:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=66a1d2e0-b89a-4b85-9e4e-a3ec2cf12a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:4e:64:e8:98:30:7e:74:06:cb:59:11:76: fe:10:13:70:af:a5:18:ba:ab:fa:03:0d:e7:81:7d: 6a:31:f2:a7:c0:0b:1a:15:0b:24:54:51:11:85:f5: f5:7f:65:4c:ee:4c:ca:7f:61:ea:92:a7:85:09:e9: 35:c0:5f:53:b2:31:58:f1:da:f8:bd:8f:18:3e:3a: 4e:90:4c:97:08:8b:8a:fa:9c:60:ea:8c:13:68:c8: 56:bf:6f:48:21:3a:f6:16:44:d7:b1:b8:6d:19:7a: ed:94:a6:24:d5:9a:8f:c4:00:90:bd:f0:be:3e:9b: 51:f4:37:99:a5:12:b2:3a:b3:8b:3f:58:57:46:0a: cf:b8:f9:62:51:ce:58:ea:fc:0c:42:2d:5b:97:87: fc:5c:98:5e:29:e4:14:f8:b6:cb:2d:6c:0e:d7:fb: 31:8e:5e:0f:69:3c:87:e8:2d:8b:c8:80:86:8c:68: 62:84:5d:db:15:7f:50:d5:ef:f0:9e:86:c8:e3:f9: 06:5f:bb:36:09:87:09:53:90:d4:a9:8a:f7:ca:b9: 54:38:03:f5:15:7f:3a:04:71:66:fe:a6:be:2e:93: 5b:3a:59:7d:cc:42:a6:d2:f4:cd:81:e2:bf:2b:6c: 6c:96:a1:54:c1:1a:d5:9a:60:82:9c:71:c7:7d:00: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:8E:9E:5C:7F:5E:9B:B9:F8:E8:64:7D:D1:6C:C8:37:5A:3D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:87:7a:b6:c0:96:d0:15:1d:15:08:b9:09:81:22:c7:5b:ef: 61:37:3b:ed:ee:67:0a:ae:ed:14:a5:e4:4c:9c:7e:02:1c:f4: 1f:43:5f:27:d3:3d:de:ec:1c:f4:d1:c8:3d:48:50:63:89:48: 6f:9c:06:ef:08:d5:c5:f9:66:ec:b4:1b:94:aa:14:ed:2b:30: 76:20:6e:6b:17:57:43:aa:7d:2c:4f:c4:e9:a9:81:5e:b8:dd: 69:07:64:ed:44:db:50:a7:ee:f1:fb:c2:ac:c8:4f:15:ca:aa: 27:7a:e6:c3:a9:79:c4:7e:3d:0b:99:45:13:a1:08:1e:fb:bb: 74:65:39:09:d5:e8:32:3b:75:1c:03:1b:be:28:64:47:68:de: 48:bb:9d:91:50:3a:54:a6:91:57:d7:43:e6:90:bc:aa:fe:2c: f1:3c:13:8c:a3:b8:3d:ae:18:43:9c:ff:c0:d7:8d:5d:71:ee: 9a:6c:99:b4:9b:18:34:e3:93:40:61:81:d1:33:d8:68:25:47: 8a:b4:53:da:1f:c8:c2:3c:f8:6e:5f:ac:5e:93:7c:1d:48:c0: e8:18:cb:6a:fc:e4:7f:00:f1:5c:ed:48:be:e3:22:c1:49:e3: e5:16:35:c2:21:aa:50:81:9e:49:99:f5:50:fd:a7:01:7f:74: a5:5b:4b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgP5wl2qvx0du60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjZhMWQyZTAtYjg5YS00Yjg1LTllNGUtYTNlYzJjZjEyYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4NOZOiYMH50BstZEXb+EBNwr6UYuqv6Aw3n gX1qMfKnwAsaFQskVFERhfX1f2VM7kzKf2HqkqeFCek1wF9TsjFY8dr4vY8YPjpO kEyXCIuK+pxg6owTaMhWv29IITr2FkTXsbhtGXrtlKYk1ZqPxACQvfC+PptR9DeZ pRKyOrOLP1hXRgrPuPliUc5Y6vwMQi1bl4f8XJheKeQU+LbLLWwO1/sxjl4PaTyH 6C2LyICGjGhihF3bFX9Q1e/wnobI4/kGX7s2CYcJU5DUqYr3yrlUOAP1FX86BHFm /qa+LpNbOll9zEKm0vTNgeK/K2xslqFUwRrVmmCCnHHHfQAmDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBBjp5cf16bufjoZH3RbMg3Wj1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQ3N2Q2MWItMDIwMS0z NzM2LTk2NTYtYTRkYmU0NmZkNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANiHerbAltAVHRUIuQmBIsdb72E3O+3uZwqu7RSl5EycfgIc9B9DXyfT Pd7sHPTRyD1IUGOJSG+cBu8I1cX5Zuy0G5SqFO0rMHYgbmsXV0OqfSxPxOmpgV64 3WkHZO1E21Cn7vH7wqzITxXKqid65sOpecR+PQuZRROhCB77u3RlOQnV6DI7dRwD G74oZEdo3ki7nZFQOlSmkVfXQ+aQvKr+LPE8E4yjuD2uGEOc/8DXjV1x7ppsmbSb GDTjk0BhgdEz2GglR4q0U9ofyMI8+G5frF6TfB1IwOgYy2r85H8A8VztSL7jIsFJ 4+UWNcIhqlCBnkmZ9VD9pwF/dKVbS6M= -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:20 2025 by rpki-client