$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json) Hash identifier: vzxHdpY8tukFVzfFzqMepPTY2vR+b119A7M4sADjaLs= Subject key identifier: 7F:94:1C:07:38:88:80:D2:91:C0:63:78:DD:22:66:C2:22:A0:71:52 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A374AE5028373E0CC9DDB9240 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 11232 IP address blocks: 67.217.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:e5:02:83:73:e0:cc:9d:db:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=9c428649-ee34-4316-adfa-b7903615ab82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:24:47:7c:81:1d:51:b5:12:a4:47:ae:52: 7c:29:66:d4:0a:9c:4c:ef:94:18:85:b8:a7:72:47: ec:b4:4a:31:98:0d:63:e9:60:cf:5e:09:26:c8:cb: 7c:89:4f:fa:51:91:fe:3b:77:2b:03:1e:da:c2:7d: 2d:41:d1:14:64:22:65:78:32:52:d5:b0:e7:64:1f: 83:4e:42:f3:8c:a8:a0:d7:70:db:d6:f4:1a:90:9e: d2:6e:2c:54:8b:f9:01:fa:89:5c:6f:fc:3c:97:66: de:d7:5e:53:f6:ab:ea:a7:96:ee:fd:41:b4:0f:7a: 31:0f:64:ff:bb:7a:c1:ae:d2:37:df:81:89:c8:b7: 42:5f:33:74:90:6b:a4:a1:90:ed:cd:1e:4f:cd:36: bd:6a:82:88:a9:34:59:c9:ed:2c:54:ab:de:0f:2e: 85:c4:f0:8f:ab:22:a5:6b:94:f8:4d:01:1c:67:f0: 54:95:b0:8b:13:26:02:13:5d:e9:9d:cc:a6:0d:63: ef:7b:f5:e4:8d:07:6f:03:2d:a5:3b:50:25:00:20: 0c:23:99:9b:b4:bf:6e:cc:4c:22:3c:ea:a2:e6:f9: bc:78:65:1d:4e:5c:81:62:72:7d:ca:fd:9c:4b:fc: 7c:fa:92:3e:c6:84:37:52:40:7f:81:3b:2a:9f:a3: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:94:1C:07:38:88:80:D2:91:C0:63:78:DD:22:66:C2:22:A0:71:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bb:2d:e8:75:51:65:65:ae:c6:18:f3:72:91:e3:27:25:43: e0:11:bd:35:cf:e0:db:ed:cf:0c:18:5c:38:f1:42:68:4d:55: 10:93:86:9f:60:56:4a:6c:36:12:35:7a:5a:63:27:06:ab:ee: 5e:fc:f8:5d:71:2d:0d:4e:02:34:96:86:d5:04:32:d1:5c:cf: aa:0f:37:c7:9f:fb:68:87:80:84:cd:47:df:b8:d5:1a:3b:78: 91:a1:1f:9e:56:03:50:31:89:ec:76:d2:8e:ba:b6:4c:4a:e4: 13:bf:11:95:1a:1d:6a:96:c5:f4:fe:a9:49:5d:e1:f1:ad:9d: 9f:dc:83:e9:90:b7:d2:5a:20:31:6c:e8:24:64:54:b6:00:aa: 74:87:77:d6:61:2e:37:b1:93:66:0d:4f:92:b8:88:17:db:26: 58:d0:95:6c:e3:6c:32:e7:ae:33:db:a9:1e:ae:3c:a5:ae:80: 47:7b:f7:aa:d2:f3:c1:17:5e:2f:52:3d:35:1d:ce:7e:b4:e6: 6f:4c:54:2c:63:8d:28:52:e1:b4:48:90:6a:25:2c:e3:e9:36: 04:0f:85:3e:12:c1:8a:be:6c:da:90:c9:e2:f9:23:cf:8f:82: 6f:b7:f2:e3:c9:98:04:d5:3f:58:43:15:ae:3a:39:65:3a:77: 98:d1:1c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SuUCg3PgzJ3bkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk OWM0Mjg2NDktZWUzNC00MzE2LWFkZmEtYjc5MDM2MTVhYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY8kR3yBHVG1EqRHrlJ8KWbUCpxM75QYhbin ckfstEoxmA1j6WDPXgkmyMt8iU/6UZH+O3crAx7awn0tQdEUZCJleDJS1bDnZB+D TkLzjKig13Db1vQakJ7SbixUi/kB+olcb/w8l2be115T9qvqp5bu/UG0D3oxD2T/ u3rBrtI334GJyLdCXzN0kGukoZDtzR5PzTa9aoKIqTRZye0sVKveDy6FxPCPqyKl a5T4TQEcZ/BUlbCLEyYCE13pncymDWPve/XkjQdvAy2lO1AlACAMI5mbtL9uzEwi POqi5vm8eGUdTlyBYnJ9yv2cS/x8+pI+xoQ3UkB/gTsqn6NBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+UHAc4iIDSkcBjeN0iZsIioHFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDQxMjdmNDMtYWRiYy0z MzU4LTg4YWYtYTlhZTliMGE2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi7Leh1UWVlrsYY83KR4yclQ+ARvTXP4NvtzwwYXDjxQmhNVRCThp9g VkpsNhI1elpjJwar7l78+F1xLQ1OAjSWhtUEMtFcz6oPN8ef+2iHgITNR9+41Ro7 eJGhH55WA1Axiex20o66tkxK5BO/EZUaHWqWxfT+qUld4fGtnZ/cg+mQt9JaIDFs 6CRkVLYAqnSHd9ZhLjexk2YNT5K4iBfbJljQlWzjbDLnrjPbqR6uPKWugEd796rS 88EXXi9SPTUdzn605m9MVCxjjShS4bRIkGolLOPpNgQPhT4SwYq+bNqQyeL5I8+P gm+38uPJmATVP1hDFa46OWU6d5jRHCc= -----END CERTIFICATE-----Generated at Thu Jun 19 14:26:54 2025 by rpki-client