$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa File: 43633a19-7889-3252-9f77-1300c5c82796.roa (raw, json) Hash identifier: HdiKjlAu/3CGJuLwbyVVvMAlLPZT9va8Dm+24OoFhpA= Subject key identifier: CA:3D:F8:02:95:D6:CE:CD:38:C2:80:86:EC:80:4E:45:B6:8B:46:61 Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584A0C054CA7AB6EE747DDD91E80 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 22612 IP address blocks: 67.223.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4c:a7:ab:6e:e7:47:dd:d9:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=9a19ab10-247c-46d9-b322-bc05f50dcf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:eb:48:94:96:67:a0:1a:77:72:60:86:68: e4:c7:7c:b0:3e:fc:83:e4:2f:41:95:a3:26:7c:47: af:97:70:dd:07:74:28:ac:76:10:15:18:3a:e2:19: 43:99:5c:c8:17:ff:e6:8a:ab:bb:2b:27:80:91:90: a7:51:29:1f:a2:ed:1e:fa:58:96:36:c8:e8:db:91: c2:bb:b6:9c:83:fe:4f:10:6b:cd:b7:54:45:2c:34: 1f:21:51:f0:21:c9:85:de:29:79:e1:30:1f:ed:cd: 0b:f3:ad:70:dc:ab:51:c1:29:37:3d:5a:0a:ef:c9: dd:3d:92:b6:5d:14:68:f0:cc:dc:7b:9c:93:68:c3: 2d:94:4e:7c:16:96:ad:df:f7:44:26:76:45:7c:53: 52:98:ad:2a:1a:51:d1:04:8c:93:86:8f:39:ae:c0: 51:13:42:f8:7f:d7:39:2d:96:81:a9:25:53:b4:29: 37:67:c5:78:2b:37:b9:05:05:01:19:2c:bf:e9:19: da:00:bb:36:98:1d:55:c4:23:20:08:53:d0:fe:bc: 08:27:e2:38:bc:af:84:77:bb:31:0d:57:7c:e2:78: 44:65:11:00:d0:98:b9:a2:bc:5a:8a:04:c3:46:da: 1a:f6:86:bc:e5:af:48:d6:4e:33:fe:c3:76:2f:de: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3D:F8:02:95:D6:CE:CD:38:C2:80:86:EC:80:4E:45:B6:8B:46:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/43633a19-7889-3252-9f77-1300c5c82796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 67.223.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:86:33:e5:b6:a4:35:92:55:3a:67:b0:18:95:7e:42:05:30: 00:66:1d:2e:fe:cf:fc:cf:29:d0:fe:37:0a:90:60:7c:ae:09: 09:64:14:3d:a3:d7:c0:0a:c1:9a:32:b0:c7:c6:d1:f9:af:2b: 67:38:9f:3f:c0:20:d8:7f:b6:d6:84:4e:d6:e7:c5:76:2c:86: f9:13:6b:91:66:2d:47:97:f7:83:b4:7b:f2:69:c2:0b:6e:12: 7e:23:d5:1d:4c:7d:ef:a8:d3:f4:d7:c5:3f:3a:76:a9:ac:1a: b0:e7:48:64:36:53:27:29:11:31:bb:94:2a:85:70:47:9d:c4: 59:29:fb:9c:8f:1b:6b:51:b0:c5:68:6f:bd:3e:9d:6d:e1:47: 68:f2:12:ce:3a:47:af:e5:e3:1e:45:bc:54:3d:6f:19:a4:50: 3b:44:fb:5a:6e:ab:aa:7c:f1:0a:68:b7:cd:3d:fa:57:66:84: 54:35:85:b8:db:6d:8d:07:4d:11:6e:90:bb:87:2e:43:f5:1e: 12:9c:24:c8:8a:a9:59:7c:09:3d:53:ed:c3:c7:6a:d2:83:1a: 0d:fb:cf:3e:cf:60:41:ca:85:02:63:4f:39:f3:7b:d8:b0:10: e8:a2:33:91:ef:4f:fa:e9:dd:1e:56:58:59:df:d2:b8:35:15: 89:07:cf:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUynq27nR93ZHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OWExOWFiMTAtMjQ3Yy00NmQ5LWIzMjItYmMwNWY1MGRjZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsfrSJSWZ6Aad3Jghmjkx3ywPvyD5C9BlaMm fEevl3DdB3QorHYQFRg64hlDmVzIF//miqu7KyeAkZCnUSkfou0e+liWNsjo25HC u7acg/5PEGvNt1RFLDQfIVHwIcmF3il54TAf7c0L861w3KtRwSk3PVoK78ndPZK2 XRRo8Mzce5yTaMMtlE58Fpat3/dEJnZFfFNSmK0qGlHRBIyTho85rsBRE0L4f9c5 LZaBqSVTtCk3Z8V4Kze5BQUBGSy/6RnaALs2mB1VxCMgCFPQ/rwIJ+I4vK+Ed7sx DVd84nhEZREA0Ji5orxaigTDRtoa9oa85a9I1k4z/sN2L97oRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo9+AKV1s7NOMKAhuyATkW2i0ZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvNDM2MzNhMTktNzg4OS0z MjUyLTlmNzctMTMwMGM1YzgyNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ990MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+GM+W2pDWSVTpnsBiVfkIFMABmHS7+z/zPKdD+NwqQYHyuCQlkFD2j 18AKwZoysMfG0fmvK2c4nz/AINh/ttaETtbnxXYshvkTa5FmLUeX94O0e/Jpwgtu En4j1R1Mfe+o0/TXxT86dqmsGrDnSGQ2UycpETG7lCqFcEedxFkp+5yPG2tRsMVo b70+nW3hR2jyEs46R6/l4x5FvFQ9bxmkUDtE+1puq6p88Qpot809+ldmhFQ1hbjb bY0HTRFukLuHLkP1HhKcJMiKqVl8CT1T7cPHatKDGg37zz7PYEHKhQJjTznze9iw EOiiM5HvT/rp3R5WWFnf0rg1FYkHzw4= -----END CERTIFICATE-----Generated at Sun Jun 15 18:02:34 2025 by rpki-client