$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: 7eeLob2gNXzc/x1YvNzmaHOta/fsPSRUC6wJRyu+2Fk= Subject key identifier: 3C:58:4F:DD:22:E8:D2:D8:5C:05:45:F9:67:F2:59:64:19:F3:AF:78 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A1035400B8AC95E29CB638600 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:40:0b:8a:c9:5e:29:cb:63:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=6dd87b3f-2af6-4f52-b48e-c0309c31e1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:f2:15:b4:a3:3b:b8:c7:fe:10:62:70:00: 2e:1a:d5:4f:f7:17:67:46:97:91:76:9d:3f:56:20: 08:41:a5:84:fa:cc:98:9e:92:61:a9:e6:cc:df:a8: 23:cc:ed:12:3e:b5:c3:4b:33:c4:e1:35:59:4d:fe: 34:83:da:31:36:1d:ec:93:98:38:da:43:65:a1:1d: c4:71:f4:6b:ec:32:d0:c8:44:9c:2d:dd:f2:91:54: 59:fc:c2:2c:b9:fa:45:7d:4b:62:12:aa:05:f7:ca: 5c:3d:c0:d2:58:8d:fc:9d:45:f8:36:98:27:70:b0: 5f:c0:81:48:6c:6a:21:02:3b:0c:69:f6:e9:47:8a: 70:1a:0b:53:29:60:59:87:53:dd:bd:36:b9:4b:e6: ea:49:74:67:e9:f2:b2:8d:36:1d:16:be:20:e5:7e: e4:0d:c5:66:4e:59:c1:93:3a:82:47:ea:07:48:e4: 27:6e:49:8a:0a:73:4f:4c:3e:ed:a5:c5:bb:ad:b9: 28:3a:78:57:57:2e:7c:e2:bd:af:bd:59:38:1e:18: 7e:44:f8:cb:a5:b9:f9:1e:c5:65:40:ea:d2:27:b8: 6d:19:6a:6c:c7:94:54:01:02:ee:bf:d9:27:7f:d6: 1e:4a:7b:29:6b:8f:cc:10:93:38:9b:ab:99:a5:65: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:58:4F:DD:22:E8:D2:D8:5C:05:45:F9:67:F2:59:64:19:F3:AF:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:79:74:8e:5d:8e:e3:c5:9e:fc:ac:40:1d:4a:18:0a:d1:d3: 48:2d:6f:d2:30:c1:c5:e5:1c:95:30:c8:a6:44:f6:38:84:78: 04:bb:14:8e:e8:ce:17:7e:30:a7:eb:ac:29:88:75:92:0c:35: 93:51:c8:ef:4f:43:28:47:c4:cd:7c:b2:57:51:fd:7a:dc:5c: 23:88:f7:38:f4:25:59:99:83:d8:d1:ee:32:05:05:88:96:0e: 1d:b0:c7:86:7e:fc:64:1a:44:00:1e:14:05:04:2a:b9:da:63: 24:68:41:34:4d:9e:6b:bb:38:b5:93:db:ee:c0:42:4d:d7:ea: b3:36:26:d5:f7:4a:e8:0c:1d:88:79:94:49:72:99:95:60:9d: ed:21:d9:df:2e:76:2f:6e:25:62:59:3c:9a:f6:07:97:60:f2: 54:06:94:63:e5:d6:52:2f:e5:36:3a:3c:72:94:cf:69:75:2a: 87:23:eb:87:88:5d:5c:f8:41:c2:c4:17:a1:63:9d:d4:10:b9: 28:9f:2b:30:25:4d:2a:1c:38:20:d0:be:e5:d0:fa:54:6b:b2: cb:e7:88:c6:1e:50:8e:48:6a:c8:88:da:87:89:fe:dc:b1:d7: 87:3f:e4:26:c2:7c:16:f0:42:78:e5:65:c7:27:5e:c2:81:aa: a8:d2:82:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUALisleKctjhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NmRkODdiM2YtMmFmNi00ZjUyLWI0OGUtYzAzMDljMzFlMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw7yFbSjO7jH/hBicAAuGtVP9xdnRpeRdp0/ ViAIQaWE+syYnpJhqebM36gjzO0SPrXDSzPE4TVZTf40g9oxNh3sk5g42kNloR3E cfRr7DLQyEScLd3ykVRZ/MIsufpFfUtiEqoF98pcPcDSWI38nUX4NpgncLBfwIFI bGohAjsMafbpR4pwGgtTKWBZh1PdvTa5S+bqSXRn6fKyjTYdFr4g5X7kDcVmTlnB kzqCR+oHSOQnbkmKCnNPTD7tpcW7rbkoOnhXVy584r2vvVk4Hhh+RPjLpbn5HsVl QOrSJ7htGWpsx5RUAQLuv9knf9YeSnspa4/MEJM4m6uZpWW+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxYT90i6NLYXAVF+WfyWWQZ8694MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALd5dI5djuPFnvysQB1KGArR00gtb9IwwcXlHJUwyKZE9jiEeAS7FI7o zhd+MKfrrCmIdZIMNZNRyO9PQyhHxM18sldR/XrcXCOI9zj0JVmZg9jR7jIFBYiW Dh2wx4Z+/GQaRAAeFAUEKrnaYyRoQTRNnmu7OLWT2+7AQk3X6rM2JtX3SugMHYh5 lElymZVgne0h2d8udi9uJWJZPJr2B5dg8lQGlGPl1lIv5TY6PHKUz2l1Kocj64eI XVz4QcLEF6FjndQQuSifKzAlTSocOCDQvuXQ+lRrssvniMYeUI5IasiI2oeJ/tyx 14c/5CbCfBbwQnjlZccnXsKBqqjSgsk= -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:58 2025 by rpki-client