$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/6d77179e-7a38-37d7-a8b9-33c836a847b7.roa File: 6d77179e-7a38-37d7-a8b9-33c836a847b7.roa (raw, json) Hash identifier: +wB0HrtHvWMzb28HBgPKCwBOt4uTg7AFyXfKFqLFxHc= Subject key identifier: 84:EC:2A:A8:C8:C7:6F:74:17:2F:90:0D:CA:F2:33:83:C6:9F:BA:CE Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F43285849F2E52EE1426A4F81FE4BCC00 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/6d77179e-7a38-37d7-a8b9-33c836a847b7.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 1239 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2e:e1:42:6a:4f:81:fe:4b:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=0f6f2798-7c09-44c9-a319-3767d1ff08e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:5d:a0:58:35:bb:55:03:da:f6:3c:75:75: 27:55:15:e4:b3:94:69:8d:2b:0c:10:14:cb:a1:3e: bb:8d:ea:00:e2:89:e2:52:80:0c:1e:28:e0:16:91: 60:5e:a9:8c:61:1e:c1:46:19:fa:5c:6e:be:d3:44: 05:c7:bc:f5:fc:5a:f8:2d:6f:e2:04:70:26:1e:49: 04:3c:b3:8e:4d:ee:0c:af:7f:d1:46:2a:29:d1:30: c6:f8:0e:30:da:0e:b2:74:c9:bd:b2:db:c8:fb:f4: 1d:2a:ce:fb:95:3b:ba:9e:15:f8:53:35:03:6c:10: 35:56:b0:74:5f:12:86:b5:3b:ff:2d:ac:83:d2:46: b4:c7:8e:43:a5:be:e1:9c:f9:bb:12:e8:8f:cb:88: fa:ca:94:98:a1:50:36:be:55:4c:25:03:fa:60:db: ba:eb:cc:31:3a:a4:b7:38:ba:9c:05:7b:da:97:66: a7:f0:d1:ff:11:6a:2b:98:4b:00:b2:a7:08:4b:dc: 8a:78:60:29:6c:98:ad:0e:b9:70:fd:b2:67:2d:c7: da:1d:83:44:76:40:9f:81:f6:9e:bd:e4:09:85:e0: 9b:ba:ca:5b:6b:2e:99:cf:53:c1:5c:80:e0:1c:24: c8:c8:92:f7:70:84:92:66:43:59:fa:fd:ad:b5:f4: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EC:2A:A8:C8:C7:6F:74:17:2F:90:0D:CA:F2:33:83:C6:9F:BA:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/6d77179e-7a38-37d7-a8b9-33c836a847b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:47:2b:02:20:ad:06:e9:8f:8d:02:5a:d9:7a:e5:ed:15:65: 39:c2:8a:c1:c3:31:ea:cb:2b:7c:67:c4:9c:70:82:e4:40:2f: 12:e1:48:73:2b:79:ca:27:84:4c:6b:15:e4:ee:f3:ea:4a:36: 5d:99:2f:f0:62:d9:1c:62:1e:c3:66:80:4c:59:28:3d:a0:79: 69:ed:80:00:e5:08:71:1a:a7:3b:60:04:54:2e:6c:21:8a:bd: e6:4f:84:03:53:38:41:b2:e5:5e:be:d7:fc:ed:73:0d:ee:8c: a9:53:03:68:ec:4a:c3:4a:6f:2c:ea:7c:fb:8d:6a:66:84:18: d4:22:08:6f:83:1a:55:f9:3d:cc:71:ea:00:9c:2d:c5:ef:54: 7d:50:59:5d:7d:9c:d3:64:bb:7a:5e:80:db:a4:27:42:e6:a4: 09:f6:ea:09:17:dc:1a:30:ea:91:89:0d:a9:64:65:9e:ed:d4: a6:30:9e:dd:e1:eb:9b:1f:48:0f:28:35:79:14:c6:77:4b:21: cb:82:0d:0e:3b:cc:a8:af:c8:77:cd:54:1c:6d:ca:a6:96:41: 24:da:79:1e:2c:1a:33:36:7b:de:eb:fb:7a:0b:55:19:97:c9: b5:0c:db:0f:5c:b8:04:6c:24:5a:2e:2f:90:04:52:ec:3d:15: 28:36:4b:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5S7hQmpPgf5LzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MGY2ZjI3OTgtN2MwOS00NGM5LWEzMTktMzc2N2QxZmYwOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstRdoFg1u1UD2vY8dXUnVRXks5RpjSsMEBTL oT67jeoA4oniUoAMHijgFpFgXqmMYR7BRhn6XG6+00QFx7z1/Fr4LW/iBHAmHkkE PLOOTe4Mr3/RRiop0TDG+A4w2g6ydMm9stvI+/QdKs77lTu6nhX4UzUDbBA1VrB0 XxKGtTv/LayD0ka0x45Dpb7hnPm7EuiPy4j6ypSYoVA2vlVMJQP6YNu668wxOqS3 OLqcBXval2an8NH/EWormEsAsqcIS9yKeGApbJitDrlw/bJnLcfaHYNEdkCfgfae veQJheCbuspbay6Zz1PBXIDgHCTIyJL3cISSZkNZ+v2ttfR5ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITsKqjIx290Fy+QDcryM4PGn7rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvNmQ3NzE3OWUtN2EzOC0z N2Q3LWE4YjktMzNjODM2YTg0N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhHKwIgrQbpj40CWtl65e0VZTnCisHDMerLK3xnxJxwguRALxLhSHMr econhExrFeTu8+pKNl2ZL/Bi2RxiHsNmgExZKD2geWntgADlCHEapztgBFQubCGK veZPhANTOEGy5V6+1/ztcw3ujKlTA2jsSsNKbyzqfPuNamaEGNQiCG+DGlX5Pcxx 6gCcLcXvVH1QWV19nNNku3pegNukJ0LmpAn26gkX3Bow6pGJDalkZZ7t1KYwnt3h 65sfSA8oNXkUxndLIcuCDQ47zKivyHfNVBxtyqaWQSTaeR4sGjM2e97r+3oLVRmX ybUM2w9cuARsJFouL5AEUuw9FSg2S88= -----END CERTIFICATE-----Generated at Sun Jun 15 20:45:06 2025 by rpki-client