$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa File: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (raw, json) Hash identifier: 5AHVk5iSrBUWf8zPSVWbK1E3JthHbNRMwUB+VYOIGQA= Subject key identifier: DB:6A:24:11:04:B4:32:0D:4A:54:14:BC:D2:E7:E9:33:5B:98:D6:25 Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584A14655941DDF7E0FD52A47080 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 22224 IP address blocks: 23.187.128.0/24 maxlen: 24 207.174.168.0/22 maxlen: 24 2602:fed6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:59:41:dd:f7:e0:fd:52:a4:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=3cb7fd2d-3fcf-4049-b743-af2f97ab27ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:35:76:de:fe:a8:6f:7f:c8:9f:7f:1a:65: 3b:b6:e0:09:4a:47:73:6d:e7:40:1b:50:42:e1:cd: 9d:19:81:95:16:67:3f:26:41:5f:ea:78:a8:91:76: 01:80:32:00:2d:0b:eb:7c:ae:ff:44:80:1d:63:75: a4:ee:10:5a:64:b5:35:d3:2c:13:72:2d:c3:0a:f4: 8b:90:25:d0:85:0f:42:c8:e0:a1:78:55:e0:9b:95: f8:92:3b:99:65:e4:25:ba:d1:ec:ab:13:be:ed:8d: c3:f7:1d:1d:46:53:23:16:36:31:68:84:e0:14:e9: 86:ec:79:40:6f:b0:20:88:a5:83:af:67:00:f9:40: 07:94:80:73:e0:68:d6:b2:29:fe:e6:01:4a:89:e0: df:2b:9d:85:a5:01:0c:6f:d9:2d:c2:ef:0a:3b:75: 9d:10:d9:ab:38:ed:00:45:48:7c:9c:11:42:44:1d: 29:5c:51:6c:f4:a5:da:5f:08:96:86:8a:f3:e7:06: e5:24:f6:60:39:b5:cc:7f:8a:1c:1b:eb:50:75:0f: 44:ee:27:95:90:65:1d:41:2f:cc:e0:bb:e4:e6:ae: 25:65:11:49:0c:33:89:30:8e:65:8e:5c:04:94:50: aa:8a:96:67:fe:5b:68:b8:17:f7:c1:65:e3:94:16: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6A:24:11:04:B4:32:0D:4A:54:14:BC:D2:E7:E9:33:5B:98:D6:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.128.0/24 207.174.168.0/22 IPv6: 2602:fed6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c9:3a:09:83:c8:3d:c0:bc:53:d4:66:3c:0c:b8:23:de:70: 56:e2:85:f6:b3:15:96:f0:92:4e:6b:33:47:54:e4:c2:8b:a3: 3a:8a:40:e0:ec:23:d4:c6:9a:ef:ba:43:0a:48:27:c6:75:e0: 9c:ef:dc:02:a3:df:00:25:0f:c9:28:0f:b2:4d:d4:01:33:b9: 52:26:86:55:f4:d9:75:39:6a:fd:db:2b:e6:49:e1:1b:aa:e1: 8d:f8:2a:bf:10:1a:05:24:c5:bf:68:3e:a4:02:32:b4:26:7a: 06:5c:5f:3c:d5:c5:d4:bc:9e:fc:82:0e:86:67:c2:d9:ef:2b: 8d:65:de:51:1e:f4:7e:3e:76:12:bb:0d:5f:89:23:6f:e5:26: 5e:d7:7c:aa:bd:c3:1e:e2:bd:ad:44:85:4f:67:46:86:07:cb: 77:50:4a:8d:29:33:84:10:ca:77:e3:85:95:db:d8:ea:c1:ed: cd:bc:ca:33:6d:23:36:5c:b1:dd:7a:cb:30:a7:77:77:29:90: cf:91:68:f5:15:c3:3c:7c:dd:68:fa:a4:3b:d8:72:88:09:9a: 50:7e:69:d7:c1:9d:55:13:73:e4:90:8f:96:f3:27:c1:34:aa: a2:37:18:5f:72:ea:02:84:5f:2e:9d:65:9f:9d:1c:9a:84:c6: 4a:e2:bb:54 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEoUZVlB3ffg/VKkcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk M2NiN2ZkMmQtM2ZjZi00MDQ5LWI3NDMtYWYyZjk3YWIyN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjI1dt7+qG9/yJ9/GmU7tuAJSkdzbedAG1BC 4c2dGYGVFmc/JkFf6niokXYBgDIALQvrfK7/RIAdY3Wk7hBaZLU10ywTci3DCvSL kCXQhQ9CyOCheFXgm5X4kjuZZeQlutHsqxO+7Y3D9x0dRlMjFjYxaITgFOmG7HlA b7AgiKWDr2cA+UAHlIBz4GjWsin+5gFKieDfK52FpQEMb9ktwu8KO3WdENmrOO0A RUh8nBFCRB0pXFFs9KXaXwiWhorz5wblJPZgObXMf4ocG+tQdQ9E7ieVkGUdQS/M 4Lvk5q4lZRFJDDOJMI5ljlwElFCqipZn/ltouBf3wWXjlBbCWQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNtqJBEEtDINSlQUvNLn6TNbmNYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMDZiODdhMTctZGE3Mi0z NWNkLTk5YzUtNDQ3ZWM2NWUwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7uAAwQC z66oMA4EAgACMAgDBgQmAv7WADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAayToJg8g9wLxT1GY8DLgj3nBW 4oX2sxWW8JJOazNHVOTCi6M6ikDg7CPUxprvukMKSCfGdeCc79wCo98AJQ/JKA+y TdQBM7lSJoZV9Nl1OWr92yvmSeEbquGN+Cq/EBoFJMW/aD6kAjK0JnoGXF881cXU vJ78gg6GZ8LZ7yuNZd5RHvR+PnYSuw1fiSNv5SZe13yqvcMe4r2tRIVPZ0aGB8t3 UEqNKTOEEMp344WV29jqwe3NvMozbSM2XLHdesswp3d3KZDPkWj1FcM8fN1o+qQ7 2HKICZpQfmnXwZ1VE3PkkI+W8yfBNKqiNxhfcuoChF8unWWfnRyahMZK4rtU -----END CERTIFICATE-----Generated at Mon Jun 16 15:54:15 2025 by rpki-client