$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa File: 1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa (raw, json) Hash identifier: oGJ+2NEagaPgtwTBmoxF88jh2uU1Bdr8UOAZOlwAmGg= Subject key identifier: A4:6C:A8:41:D6:2A:68:25:63:EC:9A:B5:D3:6E:54:AD:A1:86:0A:BA Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584A2C2012D35C044C20723B7380 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 21803 IP address blocks: 67.223.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:12:d3:5c:04:4c:20:72:3b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=f5c27e60-dae3-472a-8727-9e79c67a9972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:42:48:14:ce:b7:ea:7a:3b:54:89:85:8a: bb:bd:67:2b:10:fd:53:fd:e2:c3:25:d7:b5:1e:25: 79:d1:d1:a3:ed:8b:d3:c2:4f:32:de:c5:03:b0:f9: 76:d6:53:35:ae:0c:7c:e6:60:30:79:14:4f:21:ba: c8:03:25:f2:c0:26:4a:0c:b4:6d:b5:35:93:68:51: ed:81:31:92:cb:c9:01:33:79:4b:ae:0f:20:00:a2: a4:89:e2:3d:9c:7b:1c:45:a5:77:a9:63:24:01:c9: 39:f0:ad:7a:fe:d6:cb:0e:15:32:20:47:7d:4f:1f: 46:aa:7a:3f:df:01:96:ea:00:af:85:79:84:02:cd: 58:2c:f5:02:7d:9c:48:24:68:18:8b:67:fe:75:91: 6e:8d:fe:85:84:2f:3d:2a:9d:93:9c:e2:d0:d7:e0: f7:09:5f:c9:ea:de:ad:2b:a3:2e:7d:67:3f:d4:c8: d6:0c:d2:e6:68:6a:30:f6:a7:8f:4f:d7:44:eb:c1: 55:1b:10:24:f8:77:93:27:f6:c5:ce:25:a9:5b:8a: 4b:cd:53:f9:32:98:ed:39:27:25:47:f3:0e:e9:8f: 8e:64:8f:46:c8:63:15:2b:ce:64:8c:c1:33:c4:f6: 5b:4f:6b:fc:92:56:05:7d:13:92:70:ca:c5:a1:51: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6C:A8:41:D6:2A:68:25:63:EC:9A:B5:D3:6E:54:AD:A1:86:0A:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 67.223.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4f:13:ed:4f:bc:56:30:0d:7b:b9:00:83:04:4b:90:c1:68: 41:57:e8:40:9b:e8:14:9b:72:48:84:4f:8e:88:c5:f0:5d:43: 9b:60:2c:b9:73:a1:4e:1d:4a:37:96:99:03:3e:81:b3:48:6a: 2e:59:2e:20:ea:dd:6d:1e:33:04:54:d5:37:4e:97:38:86:04: 11:cc:b2:1d:e1:63:4f:0c:3b:30:63:f5:ed:a9:5e:f9:28:84: 94:ef:e7:de:cb:fe:75:4c:89:46:ad:9c:a0:f7:f0:49:f1:fd: b3:cd:00:98:31:64:bb:d8:48:b3:67:2d:eb:a8:09:18:5c:9f: 7b:c3:87:f9:fd:27:87:7d:7c:d7:54:60:ce:4f:c1:f4:b5:2c: e7:cd:a8:e8:65:23:df:36:be:8e:d8:8e:4b:47:0d:ca:4a:f5: d9:86:b3:e8:e6:e8:e6:97:60:75:c1:6d:e8:a9:12:67:b3:11: af:6d:ad:e4:64:f8:be:0c:ea:bc:b3:14:51:6e:aa:cd:e8:65: a5:fc:09:22:a9:ab:c3:f8:b6:fb:6c:31:be:6d:8a:ef:73:8e: 41:6f:6f:9a:83:d2:e3:4e:e3:3c:ea:53:9b:f0:14:aa:2c:6f: 9f:e3:a0:a9:a9:ce:5a:13:a7:b6:f8:a3:44:2d:c1:76:cb:44: cc:dc:1b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBLTXARMIHI7c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk ZjVjMjdlNjAtZGFlMy00NzJhLTg3MjctOWU3OWM2N2E5OTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAlCSBTOt+p6O1SJhYq7vWcrEP1T/eLDJde1 HiV50dGj7YvTwk8y3sUDsPl21lM1rgx85mAweRRPIbrIAyXywCZKDLRttTWTaFHt gTGSy8kBM3lLrg8gAKKkieI9nHscRaV3qWMkAck58K16/tbLDhUyIEd9Tx9Gqno/ 3wGW6gCvhXmEAs1YLPUCfZxIJGgYi2f+dZFujf6FhC89Kp2TnOLQ1+D3CV/J6t6t K6MufWc/1MjWDNLmaGow9qePT9dE68FVGxAk+HeTJ/bFziWpW4pLzVP5MpjtOScl R/MO6Y+OZI9GyGMVK85kjMEzxPZbT2v8klYFfROScMrFoVGmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRsqEHWKmglY+yatdNuVK2hhgq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvMWU1MTY4MmMtYjlkOC0z YmY0LWFkOTMtNDJmMTBmNjYxZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5PE+1PvFYwDXu5AIMES5DBaEFX6ECb6BSbckiET46IxfBdQ5tgLLlz oU4dSjeWmQM+gbNIai5ZLiDq3W0eMwRU1TdOlziGBBHMsh3hY08MOzBj9e2pXvko hJTv597L/nVMiUatnKD38Enx/bPNAJgxZLvYSLNnLeuoCRhcn3vDh/n9J4d9fNdU YM5PwfS1LOfNqOhlI982vo7YjktHDcpK9dmGs+jm6OaXYHXBbeipEmezEa9treRk +L4M6ryzFFFuqs3oZaX8CSKpq8P4tvtsMb5tiu9zjkFvb5qD0uNO4zzqU5vwFKos b5/joKmpzloTp7b4o0QtwXbLRMzcG+E= -----END CERTIFICATE-----Generated at Mon Jun 16 01:30:25 2025 by rpki-client