$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa File: 8ba267bf-794f-36ab-9754-45a32ee2832a.roa (raw, json) Hash identifier: eZQ8S7/W3Pz6BKvy7Avei7IcK3UYeoGLpTQYvo8Gth8= Subject key identifier: 60:7F:54:E3:2E:8A:0E:55:60:89:EC:F3:15:BC:D6:B4:D5:6F:4D:57 Certificate issuer: /CN=3f61b400-76de-4d47-93da-b04c33b5a504 Certificate serial: 010D0C9F4328584A23BFFF419E555964F79886E0 Authority key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 192.67.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:bf:ff:41:9e:55:59:64:f7:98:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f61b400-76de-4d47-93da-b04c33b5a504 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=ca2904aa-ccb2-4892-bad8-340c2bf835a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:79:9a:7e:38:2e:fc:14:fc:65:e4:5f:d1:d7: 4c:87:82:4d:f0:19:39:70:0d:1a:f0:10:1b:93:4b: fb:b6:13:e5:07:f6:e3:bd:c4:5d:74:f1:77:1c:11: b5:02:50:45:e0:3f:c7:3e:05:d6:d2:04:34:b9:6a: f9:81:29:00:82:ff:ed:fd:7d:5c:c8:2e:59:b6:09: cf:6d:1c:e6:ec:d7:66:2f:ce:d5:d8:ca:d8:1c:31: 72:37:06:2b:d5:d3:e0:c7:22:7a:40:d0:7f:cb:1f: 12:2e:f0:4f:00:4b:11:7e:52:02:bb:1a:60:a1:eb: 08:68:2f:2c:c2:18:9f:e2:99:e1:f6:fd:d3:d7:8c: 79:c2:28:08:71:fd:73:dc:16:d4:3f:86:da:2c:e6: 7e:07:71:6d:3c:cf:2c:c6:da:e3:be:39:f3:a1:00: b0:a6:99:d7:5b:00:b7:ce:31:2f:96:1d:73:c0:01: f3:47:87:42:39:f4:b4:b0:ec:25:38:7b:25:be:50: 39:52:ab:ec:42:97:1f:da:b1:34:25:eb:a9:bd:f2: 2f:36:99:0e:21:fa:e9:86:ac:3f:45:62:aa:10:64: 83:d6:f7:7b:9a:d7:d3:59:29:56:58:d6:75:3e:31: 7b:a9:2a:5a:4f:d8:a7:34:86:d0:3f:d6:c2:eb:d1: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7F:54:E3:2E:8A:0E:55:60:89:EC:F3:15:BC:D6:B4:D5:6F:4D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl X509v3 Authority Key Identifier: keyid:26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer sbgp-ipAddrBlock: critical IPv4: 192.67.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:37:45:c8:ff:2c:ee:40:c6:e2:d0:a8:be:cd:b4:d2:fd:b9: 0c:28:2b:f0:1d:a3:c1:aa:77:17:8f:12:38:20:15:27:5f:89: f9:05:7a:39:2c:6c:69:a6:9e:98:75:42:57:3e:f4:7e:61:8e: 04:0f:86:4c:9e:8b:4f:31:6e:c4:0b:c8:02:ce:b7:b8:fa:08: 65:25:ae:2e:1b:20:36:86:32:8a:7f:ae:46:f6:9f:78:27:8c: 47:22:d4:ff:51:6a:5d:73:b6:83:b5:5c:06:30:bf:ea:f8:1c: b9:44:e8:7a:21:a1:a2:44:dc:6d:07:af:b0:13:c4:20:bc:f4: ad:76:a1:bf:f6:65:76:71:90:07:71:9c:a2:09:89:7c:24:0a: bc:33:c7:05:16:66:dc:51:11:95:e3:bd:1a:34:eb:b2:03:51: 20:f7:05:0c:c1:82:90:f9:88:43:ac:11:d8:8b:6d:ca:31:e1: 4f:84:42:2b:92:ac:82:f5:86:1c:08:b3:fa:61:47:ba:ef:8b: 56:9c:f2:60:1d:5a:54:fd:7b:9d:55:e4:fe:e5:47:b7:07:0f: 59:99:5e:6a:86:9d:f3:b6:ae:5e:6d:68:25:b7:24:b0:90:0c: 0f:1e:7b:cf:2e:20:87:1c:2c:1b:20:48:a1:5f:09:8c:39:86: e7:1e:5f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojv/9BnlVZZPeYhuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVh NTA0MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk Y2EyOTA0YWEtY2NiMi00ODkyLWJhZDgtMzQwYzJiZjgzNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3mafjgu/BT8ZeRf0ddMh4JN8Bk5cA0a8BAb k0v7thPlB/bjvcRddPF3HBG1AlBF4D/HPgXW0gQ0uWr5gSkAgv/t/X1cyC5ZtgnP bRzm7NdmL87V2MrYHDFyNwYr1dPgxyJ6QNB/yx8SLvBPAEsRflICuxpgoesIaC8s whif4pnh9v3T14x5wigIcf1z3BbUP4baLOZ+B3FtPM8sxtrjvjnzoQCwppnXWwC3 zjEvlh1zwAHzR4dCOfS0sOwlOHslvlA5UqvsQpcf2rE0JeupvfIvNpkOIfrphqw/ RWKqEGSD1vd7mtfTWSlWWNZ1PjF7qSpaT9inNIbQP9bC69ELpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB/VOMuig5VYIns8xW81rTVb01XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYx YjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvOGJhMjY3YmYtNzk0Zi0z NmFiLTk3NTQtNDVhMzJlZTI4MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y2MWI0MDAtNzZkZS00ZDQ3LTkz ZGEtYjA0YzMzYjVhNTA0LzNmNjFiNDAwLTc2ZGUtNGQ0Ny05M2RhLWIwNGMzM2I1 YTUwNC5jcmwwHwYDVR0jBBgwFoAUJrkmWgYvEjfu8GnUFNufdDpqgD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRj MzNiNWE1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw3Rcj/LO5AxuLQqL7NtNL9uQwoK/Ado8GqdxePEjggFSdfifkFejks bGmmnph1Qlc+9H5hjgQPhkyei08xbsQLyALOt7j6CGUlri4bIDaGMop/rkb2n3gn jEci1P9Ral1ztoO1XAYwv+r4HLlE6HohoaJE3G0Hr7ATxCC89K12ob/2ZXZxkAdx nKIJiXwkCrwzxwUWZtxREZXjvRo067IDUSD3BQzBgpD5iEOsEdiLbcox4U+EQiuS rIL1hhwIs/phR7rvi1ac8mAdWlT9e51V5P7lR7cHD1mZXmqGnfO2rl5taCW3JLCQ DA8ee88uIIccLBsgSKFfCYw5huceX0o= -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:57 2025 by rpki-client