$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa File: 7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa (raw, json) Hash identifier: +veqFkzmbUAvUxwfLMdR8yXgBj7d7EWAcPi/23aHUg0= Subject key identifier: 08:A2:97:97:4B:D6:A2:77:F3:B5:D9:23:EB:EF:40:0A:7A:3E:B3:2B Certificate issuer: /CN=6457bd98-4cd5-4766-a190-844b93a354f2 Certificate serial: 010D0C9F4328584A23C00CA9A744807FB6014A7E Authority key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 46088 IP address blocks: 67.209.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0c:a9:a7:44:80:7f:b6:01:4a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6457bd98-4cd5-4766-a190-844b93a354f2 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=f0e0147f-59e9-43ec-afd9-524239106e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:4b:11:c4:ea:07:89:5b:27:b3:73:cb:e3: 00:18:3b:c9:89:93:2c:05:62:39:cf:b1:f4:48:7d: 51:70:62:5f:df:98:b0:89:c5:20:c7:ed:79:4f:0e: 37:c5:63:3a:f3:a6:4a:3a:01:a1:73:7e:5e:8a:27: 24:9f:6d:da:9d:00:a2:e4:55:3c:2c:c0:ed:9f:35: fe:c6:e6:b4:33:18:d1:ca:51:fe:04:12:05:74:4f: 81:11:1e:c7:44:3a:86:c6:80:b3:04:69:2f:99:8e: b1:e8:66:65:c4:7a:27:02:e0:49:16:b4:4b:f2:18: d6:0e:ed:82:ca:4b:96:28:91:3b:b3:02:b3:57:7b: c1:7f:57:1b:8f:50:e6:8b:84:77:a4:6a:8c:b5:77: c7:21:ae:18:22:cc:97:52:0b:ec:0d:fc:ef:81:4c: 39:66:48:02:2e:83:8c:d8:f0:18:f5:95:34:1a:7b: 28:8c:5f:7d:3f:ff:af:24:21:83:43:40:f4:10:43: 25:2d:67:0f:35:9f:35:21:17:46:e2:fe:73:17:45: db:09:15:e6:c5:ca:25:9c:f1:42:7f:b7:47:ab:ea: c6:21:c8:c2:d3:55:28:d8:b8:70:69:c8:75:12:96: d2:3c:a7:cf:d4:a4:56:a6:65:c7:a9:0b:c9:f3:63: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:97:97:4B:D6:A2:77:F3:B5:D9:23:EB:EF:40:0A:7A:3E:B3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl X509v3 Authority Key Identifier: keyid:C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer sbgp-ipAddrBlock: critical IPv4: 67.209.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8c:50:3f:3b:33:66:ad:c4:5e:6a:4a:c2:81:00:7c:f2:20: 38:80:f7:29:c1:70:aa:f8:fe:ea:a2:a1:ee:1b:a4:1c:41:8f: 85:c0:01:1c:a4:59:d9:b4:78:e2:82:0c:e3:c0:39:c7:1f:ba: bc:1b:bc:9c:59:2e:f6:92:56:ae:36:69:36:07:ae:bd:6b:9f: 68:d0:5a:2d:01:95:e4:b0:a6:03:32:e9:6b:4f:0f:a5:3a:f9: ef:9f:93:61:e1:a5:f6:e7:dc:d4:52:12:13:b4:7d:14:15:f8: 35:f1:61:be:68:f2:92:a4:38:25:de:e2:72:0e:02:f7:fd:0d: 9b:6d:81:0d:b1:a2:6b:9f:1b:d2:23:90:7f:4a:f5:73:53:74: 84:1e:0e:88:8c:23:62:79:f8:51:f3:1a:9e:6f:56:c0:b1:17: ce:e5:77:2e:ea:95:ce:5f:01:5c:c0:a6:7b:46:0a:18:29:c5: 48:27:b0:ad:9e:c7:e5:c4:67:e1:bf:66:27:c2:c7:4d:71:04: ce:72:7d:a3:1c:95:37:5e:02:83:fa:ae:29:15:da:b5:ad:8b: c3:40:46:d4:4f:20:47:4f:18:57:2d:1c:35:c3:d2:97:27:d1: bb:40:a3:15:c4:dc:3b:43:90:f7:bb:e9:a4:3d:e7:67:88:48: 63:9e:da:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAypp0SAf7YBSn4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1N2JkOTgtNGNkNS00NzY2LWExOTAtODQ0YjkzYTM1 NGYyMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZjBlMDE0N2YtNTllOS00M2VjLWFmZDktNTI0MjM5MTA2ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT5LEcTqB4lbJ7Nzy+MAGDvJiZMsBWI5z7H0 SH1RcGJf35iwicUgx+15Tw43xWM686ZKOgGhc35eiickn23anQCi5FU8LMDtnzX+ xua0MxjRylH+BBIFdE+BER7HRDqGxoCzBGkvmY6x6GZlxHonAuBJFrRL8hjWDu2C ykuWKJE7swKzV3vBf1cbj1Dmi4R3pGqMtXfHIa4YIsyXUgvsDfzvgUw5ZkgCLoOM 2PAY9ZU0GnsojF99P/+vJCGDQ0D0EEMlLWcPNZ81IRdG4v5zF0XbCRXmxcolnPFC f7dHq+rGIcjC01Uo2Lhwach1EpbSPKfP1KRWpmXHqQvJ82NOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiil5dL1qJ387XZI+vvQAp6PrMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3 YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNhMzU0ZjIvNzAxNWI2OGEtOGViOC0z OWM2LWJkZGMtZDllZThmZTM0OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1N2JkOTgtNGNkNS00NzY2LWEx OTAtODQ0YjkzYTM1NGYyLzY0NTdiZDk4LTRjZDUtNDc2Ni1hMTkwLTg0NGI5M2Ez NTRmMi5jcmwwHwYDVR0jBBgwFoAUwgXO/jbS3KbZCtPmJWsRfNIOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRi OTNhMzU0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9GgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaMUD87M2atxF5qSsKBAHzyIDiA9ynBcKr4/uqioe4bpBxBj4XAARyk Wdm0eOKCDOPAOccfurwbvJxZLvaSVq42aTYHrr1rn2jQWi0BleSwpgMy6WtPD6U6 +e+fk2Hhpfbn3NRSEhO0fRQV+DXxYb5o8pKkOCXe4nIOAvf9DZttgQ2xomufG9Ij kH9K9XNTdIQeDoiMI2J5+FHzGp5vVsCxF87ldy7qlc5fAVzApntGChgpxUgnsK2e x+XEZ+G/ZifCx01xBM5yfaMclTdeAoP6rikV2rWti8NARtRPIEdPGFctHDXD0pcn 0btAoxXE3DtDkPe76aQ952eISGOe2oc= -----END CERTIFICATE-----Generated at Wed Jun 18 07:18:03 2025 by rpki-client