$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa File: 2c7835ed-71f5-3bf7-8a93-4473a895c021.roa (raw, json) Hash identifier: LI4LRQVoAMLnSvhprqQGOIhI0Dq7Ag45iggBQHor9Wk= Subject key identifier: 3D:6D:EC:6A:17:A1:BE:3B:B0:0F:77:67:A5:4F:88:0F:0E:18:48:46 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584A29555BE8E9492555FD846080 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 19437 IP address blocks: 67.43.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:5b:e8:e9:49:25:55:fd:84:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=4df1877a-89bb-4f38-8295-6503c5abb681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:e9:68:ee:66:1a:e1:97:42:c7:ef:c1:01: 75:bf:cb:6a:76:e7:5e:08:e0:23:e2:03:a5:7a:10: 9b:9b:a0:e1:4e:13:ad:f8:41:ac:9b:86:22:e5:e6: d0:05:36:b4:67:7d:57:27:86:41:69:d9:34:8a:41: 5e:0b:60:24:cf:23:8e:9d:fa:84:b7:03:66:c9:73: 28:3c:06:cb:4f:91:34:38:2d:40:6d:2e:08:04:84: 9f:e3:12:1f:e3:0a:d6:d1:76:04:5b:c5:8a:9b:fc: 81:ea:fa:66:69:b8:1f:01:29:33:21:fc:ef:a7:51: 45:d4:55:68:92:7f:97:c5:f7:dd:13:ed:5e:08:5d: 71:9b:c4:41:a4:2e:a8:8d:37:65:0e:09:d9:50:21: f4:48:f0:88:17:68:d2:ec:bb:34:be:85:6b:53:0c: a0:e8:9f:c2:85:77:4c:55:b5:be:e1:6f:f8:af:d0: d2:c1:c5:25:f6:a7:61:17:85:94:13:07:25:96:02: 59:24:56:7f:0b:af:0c:59:9a:62:e0:1d:9f:f2:51: fb:e8:03:50:18:f6:2d:f7:83:e3:22:83:02:d3:44: 52:fe:0d:37:55:15:56:b3:dd:09:60:1b:04:57:4f: c6:b5:59:e0:ee:92:f2:74:ab:f0:d3:1b:f0:a8:a5: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:EC:6A:17:A1:BE:3B:B0:0F:77:67:A5:4F:88:0F:0E:18:48:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2c7835ed-71f5-3bf7-8a93-4473a895c021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0f:19:ca:5a:e7:df:37:cb:79:bc:2f:51:71:90:61:71:e5: e8:a5:ec:c4:ca:16:3a:e3:0f:61:8e:de:7a:0f:47:b8:e3:4f: ad:7a:7c:14:63:5c:8f:97:12:7e:46:c6:ab:06:f2:01:3e:67: 9d:97:a5:86:92:98:f8:3d:52:74:e3:5d:08:4e:a9:54:dd:55: b9:d1:23:27:54:76:a3:d6:46:6c:5c:6c:f7:18:26:a5:33:12: 14:ad:09:c1:82:77:b0:aa:2b:ab:a4:1d:59:6f:00:2c:99:0b: 40:3c:b1:85:6e:fb:d2:55:f5:f8:58:9c:d3:6f:c0:2d:80:80: 1a:f6:76:43:a1:a6:8c:b9:43:1e:96:3c:6e:02:da:32:45:f0: 0e:c2:b8:db:43:21:56:81:18:ec:30:12:3c:44:5b:11:f9:d0: 4f:57:bf:20:67:f2:e0:f9:64:a1:7b:04:39:81:d9:a0:06:ad: d8:94:16:ee:5b:25:3b:64:d8:21:e0:98:c3:c7:dd:87:99:c6: 2a:a1:f6:b4:89:74:c6:4f:6d:af:0a:11:46:e3:45:6e:52:c0: 54:aa:9e:d2:69:77:2a:f9:e4:ff:60:5a:fa:3f:30:35:4d:2c: 88:ed:6a:15:e5:35:e7:9d:71:03:53:a3:98:3f:6e:65:c8:d5: ca:81:3e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVVvo6UklVf2EYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk NGRmMTg3N2EtODliYi00ZjM4LTgyOTUtNjUwM2M1YWJiNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc3paO5mGuGXQsfvwQF1v8tqdudeCOAj4gOl ehCbm6DhThOt+EGsm4Yi5ebQBTa0Z31XJ4ZBadk0ikFeC2AkzyOOnfqEtwNmyXMo PAbLT5E0OC1AbS4IBISf4xIf4wrW0XYEW8WKm/yB6vpmabgfASkzIfzvp1FF1FVo kn+XxffdE+1eCF1xm8RBpC6ojTdlDgnZUCH0SPCIF2jS7Ls0voVrUwyg6J/ChXdM VbW+4W/4r9DSwcUl9qdhF4WUEwcllgJZJFZ/C68MWZpi4B2f8lH76ANQGPYt94Pj IoMC00RS/g03VRVWs90JYBsEV0/GtVng7pLydKvw0xvwqKWKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1t7GoXob47sA93Z6VPiA8OGEhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMmM3ODM1ZWQtNzFmNS0z YmY3LThhOTMtNDQ3M2E4OTVjMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQyssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUPGcpa5983y3m8L1FxkGFx5eil7MTKFjrjD2GO3noPR7jjT616fBRj XI+XEn5GxqsG8gE+Z52XpYaSmPg9UnTjXQhOqVTdVbnRIydUdqPWRmxcbPcYJqUz EhStCcGCd7CqK6ukHVlvACyZC0A8sYVu+9JV9fhYnNNvwC2AgBr2dkOhpoy5Qx6W PG4C2jJF8A7CuNtDIVaBGOwwEjxEWxH50E9XvyBn8uD5ZKF7BDmB2aAGrdiUFu5b JTtk2CHgmMPH3YeZxiqh9rSJdMZPba8KEUbjRW5SwFSqntJpdyr55P9gWvo/MDVN LIjtahXlNeedcQNTo5g/bmXI1cqBPhA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:57:42 2025 by rpki-client