$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa File: 457d63bd-1b71-323a-a54b-ee6030546945.roa (raw, json) Hash identifier: e1dsVrzqD7TT6zm+w4A/yGFrtF7i7E5g2PHRwvYjmkc= Subject key identifier: CA:90:F5:0D:9A:CF:97:10:BA:A9:45:37:1E:D0:F7:8D:5A:AF:68:75 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A1B60027270D36447382BA500 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 4213 IP address blocks: 67.229.252.0/23 maxlen: 24 67.229.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:02:72:70:d3:64:47:38:2b:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=c67522c0-65f2-42ec-9e28-27fa88da2ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:19:09:12:aa:2d:0e:7e:f4:2b:7d:f3:b4: 6f:87:a8:c0:cd:a1:dd:b0:15:74:4b:bd:e3:2e:f0: e2:34:d1:f6:5d:2f:12:7e:0e:e7:88:4d:81:ab:38: 03:19:29:73:6f:fc:6c:f7:1a:bf:e9:8b:72:bd:53: 2b:ae:e9:09:56:8e:ef:8e:d1:6f:d5:9b:b4:61:0c: 5f:b9:1e:92:4e:33:3f:1a:67:63:86:1e:d6:cf:98: 70:1e:ef:7f:1c:f3:69:d8:6f:4c:c3:2f:a0:9f:b0: 35:52:e3:73:67:05:8b:04:ce:ea:94:ba:a6:fa:f8: af:2d:5a:95:0f:b9:e9:ad:fe:5d:6f:ed:95:2a:8e: 87:cb:26:fb:c3:8b:85:d0:ad:80:66:fa:49:8d:37: 68:ca:0f:0f:06:cb:d5:08:41:24:f6:f1:5f:9f:7c: 6a:0f:83:1b:d1:98:44:6f:b5:2e:48:f9:8d:c8:3a: 19:70:4f:5d:77:f8:f7:28:17:14:02:3f:19:ef:8f: c2:bb:e0:21:e9:ba:04:f3:ab:76:f4:29:00:9b:89: 25:d1:03:a9:91:5d:43:a2:b5:07:16:a3:cc:ea:1a: 32:55:e0:5b:ef:9a:7d:7a:15:2d:72:1f:fc:1a:80: b5:6a:83:f2:41:ef:e5:b8:a3:f6:29:06:4f:5e:21: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:90:F5:0D:9A:CF:97:10:BA:A9:45:37:1E:D0:F7:8D:5A:AF:68:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.229.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f8:cd:32:ae:f0:9b:29:0b:de:6a:3a:dd:c1:7c:ab:fa:76: a6:ba:a9:76:1b:75:4d:f9:8c:6a:24:2e:26:66:aa:c3:ed:49: 8f:9e:f9:7d:b0:72:e2:0a:21:e7:1c:01:a3:d4:cf:47:a5:4b: 8a:b6:bb:1b:45:b4:91:6f:b9:da:46:4a:e6:73:cb:e3:97:a8: 3e:a0:b7:f9:4f:51:c3:c0:ba:cd:fe:82:5e:0f:86:53:d8:40: 41:2a:4e:18:e9:b3:7d:7f:67:dd:4d:c6:21:e4:29:a5:60:9b: 9b:1e:a6:3a:b6:e6:12:40:f2:27:75:c9:f4:af:e6:f5:b5:79: 18:72:27:fa:76:73:3f:9a:36:e5:0b:75:23:2e:98:51:f0:b3: 32:b3:ff:16:6a:00:d8:71:c7:14:60:49:6a:1a:af:23:61:24: 4f:1f:26:ca:ce:87:d3:24:93:a5:8e:17:bc:73:28:f1:fd:3b: a5:16:c7:dd:1a:a2:55:55:f3:60:3f:96:95:6b:a8:cb:91:df: 59:52:1d:24:11:96:3b:b4:21:76:88:25:d5:d0:48:30:3b:b8: 8f:64:c2:77:40:1e:55:1f:7a:8e:ac:da:0d:a4:60:6b:12:ac: 0e:fd:a2:d7:e6:94:ed:c1:cd:85:f2:54:ca:6d:0e:53:ca:95: 20:bf:dc:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAJycNNkRzgrpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YzY3NTIyYzAtNjVmMi00MmVjLTllMjgtMjdmYTg4ZGEyYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid0ZCRKqLQ5+9Ct987Rvh6jAzaHdsBV0S73j LvDiNNH2XS8Sfg7niE2BqzgDGSlzb/xs9xq/6YtyvVMrrukJVo7vjtFv1Zu0YQxf uR6STjM/Gmdjhh7Wz5hwHu9/HPNp2G9Mwy+gn7A1UuNzZwWLBM7qlLqm+vivLVqV D7nprf5db+2VKo6Hyyb7w4uF0K2AZvpJjTdoyg8PBsvVCEEk9vFfn3xqD4Mb0ZhE b7UuSPmNyDoZcE9dd/j3KBcUAj8Z74/Cu+Ah6boE86t29CkAm4kl0QOpkV1DorUH FqPM6hoyVeBb75p9ehUtch/8GoC1aoPyQe/luKP2KQZPXiEIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqQ9Q2az5cQuqlFNx7Q941ar2h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNDU3ZDYzYmQtMWI3MS0z MjNhLWE1NGItZWU2MDMwNTQ2OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ+X8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb4zTKu8JspC95qOt3BfKv6dqa6qXYbdU35jGokLiZmqsPtSY+e+X2w cuIKIeccAaPUz0elS4q2uxtFtJFvudpGSuZzy+OXqD6gt/lPUcPAus3+gl4PhlPY QEEqThjps31/Z91NxiHkKaVgm5sepjq25hJA8id1yfSv5vW1eRhyJ/p2cz+aNuUL dSMumFHwszKz/xZqANhxxxRgSWoaryNhJE8fJsrOh9Mkk6WOF7xzKPH9O6UWx90a olVV82A/lpVrqMuR31lSHSQRlju0IXaIJdXQSDA7uI9kwndAHlUfeo6s2g2kYGsS rA79otfmlO3BzYXyVMptDlPKlSC/3Mo= -----END CERTIFICATE-----Generated at Sun Jun 15 16:02:56 2025 by rpki-client