$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa File: 6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa (raw, json) Hash identifier: +Tmk/qtBVYzVUwho7vu7PVozCzKTLaOFA6TXz0g+z/M= Subject key identifier: 59:F7:97:C5:BF:C1:33:B5:39:B2:5F:4D:3D:BD:F3:A6:64:D4:5A:0A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858499F249C3B46E30A944A5BC880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 67.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9c:3b:46:e3:0a:94:4a:5b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4481f891-cbdc-4d59-a258-b8d3900ffe08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:02:13:63:75:68:b5:cc:af:3d:2e:93:7f: a7:48:22:94:8d:c2:cd:c7:33:90:72:88:32:71:bd: 2b:6a:be:8e:f7:46:16:b3:fd:31:12:ad:21:90:cf: f8:ec:bc:0f:ce:6f:9b:30:c6:9c:85:2c:7f:03:8f: 22:15:12:64:67:ef:d6:16:d4:39:4f:2c:1d:ac:31: 10:93:2f:1a:7c:f0:53:b8:22:ee:d4:93:2a:06:ab: 7b:7a:f8:6b:3f:45:f7:f5:ef:1d:e8:09:4d:7a:b7: 6c:8a:20:05:19:17:9f:8d:fb:96:f7:b9:84:b2:de: 81:ba:8a:bd:f4:ff:bd:33:e1:a2:2f:c4:47:94:7e: f4:bb:46:92:44:33:4b:fa:93:76:27:1e:15:27:26: ea:47:7c:a8:8f:94:6e:d3:d7:8f:c6:86:1c:92:92: c2:73:85:31:5f:b7:5f:d3:47:d9:88:e9:d9:fe:e2: ad:3d:24:47:2f:a5:67:2e:8a:80:82:42:f0:47:6c: 05:69:9b:77:b9:5d:a1:96:89:4d:41:27:d1:e0:cd: 86:5f:32:37:0f:c4:ec:cb:3e:42:f3:2d:e4:cd:7f: e9:cf:6b:2a:19:d7:a2:e5:16:c0:36:c6:40:f1:7f: 66:59:d4:fd:bc:16:12:ae:eb:d2:f0:48:1e:af:1e: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F7:97:C5:BF:C1:33:B5:39:B2:5F:4D:3D:BD:F3:A6:64:D4:5A:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e5:c0:5b:98:1c:ea:8c:f6:1e:56:f7:c9:83:14:89:c2:80: dc:fd:58:fe:8b:c3:07:43:a4:f2:21:6a:2c:7e:e2:de:32:d3: bc:42:f9:9e:7c:95:d4:3a:3e:4c:e2:3e:d2:76:51:e7:40:b3: c5:cc:c4:46:96:c2:10:fc:03:47:ad:2c:8e:cc:68:95:a5:b5: bb:da:87:6a:85:f4:67:c7:eb:89:57:66:8f:25:e3:46:e4:73: 64:08:39:cb:49:50:df:dd:68:fa:73:d3:6c:a9:58:d2:57:3d: af:f7:94:e5:f4:34:c8:53:8b:ce:81:8d:14:f7:38:b8:0a:29: aa:3a:c1:e0:2c:9b:c1:f7:86:41:4e:e1:7a:cd:e7:ec:e7:1f: 7d:e7:c9:af:a5:02:8c:54:ec:6a:6d:07:e7:4f:26:06:69:5c: f7:ac:6c:bf:c3:96:d1:88:0b:9b:59:c4:97:cf:2b:01:2f:aa: d4:84:c4:7f:3b:e5:0f:2e:f0:b1:c7:82:c7:af:df:49:ae:9b: 50:95:28:6d:bb:08:20:75:17:80:41:dc:38:ff:d2:39:87:27: c9:0d:dc:36:1f:8f:67:77:c4:8a:80:36:81:bc:ab:81:5a:d2: 7b:91:56:73:b9:39:b3:8d:b0:e3:20:d2:6b:0a:62:f9:16:02: d1:b1:d2:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJw7RuMKlEpbyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDQ4MWY4OTEtY2JkYy00ZDU5LWEyNTgtYjhkMzkwMGZmZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qsCE2N1aLXMrz0uk3+nSCKUjcLNxzOQcogy cb0rar6O90YWs/0xEq0hkM/47LwPzm+bMMachSx/A48iFRJkZ+/WFtQ5TywdrDEQ ky8afPBTuCLu1JMqBqt7evhrP0X39e8d6AlNerdsiiAFGRefjfuW97mEst6Buoq9 9P+9M+GiL8RHlH70u0aSRDNL+pN2Jx4VJybqR3yoj5Ru09ePxoYckpLCc4UxX7df 00fZiOnZ/uKtPSRHL6VnLoqAgkLwR2wFaZt3uV2hlolNQSfR4M2GXzI3D8Tsyz5C 8y3kzX/pz2sqGdei5RbANsZA8X9mWdT9vBYSruvS8Egerx7v8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn3l8W/wTO1ObJfTT2986Zk1FoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmNmMTMzYTYtNjdhOC0z ZTRlLTgwYWYtZmE3MGM3MGFiYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDlwFuYHOqM9h5W98mDFInCgNz9WP6LwwdDpPIhaix+4t4y07xC+Z58 ldQ6PkziPtJ2UedAs8XMxEaWwhD8A0etLI7MaJWltbvah2qF9GfH64lXZo8l40bk c2QIOctJUN/daPpz02ypWNJXPa/3lOX0NMhTi86BjRT3OLgKKao6weAsm8H3hkFO 4XrN5+znH33nya+lAoxU7GptB+dPJgZpXPesbL/DltGIC5tZxJfPKwEvqtSExH87 5Q8u8LHHgsev30mum1CVKG27CCB1F4BB3Dj/0jmHJ8kN3DYfj2d3xIqANoG8q4Fa 0nuRVnO5ObONsOMg0msKYvkWAtGx0rc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:32 2025 by rpki-client