$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa File: 6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa (raw, json) Hash identifier: XfqOfgqX9XwdHYgcpgHOzv7KYnE0jXACn8Jtd34nYU4= Subject key identifier: 99:96:69:82:1C:84:4D:43:15:BA:4F:48:51:F7:AD:EC:FB:9C:15:46 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A7E7B5EC9DAA120AF6F3ED8A0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 67.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5e:c9:da:a1:20:af:6f:3e:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=7c492213-2294-4e9d-83d1-5e9bc76f5dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:9e:24:3d:7c:ea:dc:23:1e:6c:81:ff:8c: 53:3e:a4:5e:14:33:cf:90:82:91:98:8b:e1:ad:0b: 83:a8:1a:c1:d4:11:23:cf:ab:1f:25:e6:ec:81:43: 57:f5:ee:ff:c8:fa:1c:69:72:ec:13:fc:9a:ce:0d: 3f:96:7b:92:17:34:72:d2:c7:da:a2:b7:12:2b:4b: 8e:87:b8:0e:e8:76:9a:26:14:74:68:cb:aa:cb:d1: 80:b4:08:8c:51:2d:5a:28:58:d4:3c:a0:85:71:d6: f8:55:a8:93:be:86:58:cb:af:be:f0:a5:9e:db:95: fc:e9:76:f0:70:01:34:33:d0:50:f5:44:27:d2:cb: d8:0e:01:ab:ab:9a:93:3f:39:a6:0f:18:ac:c9:0c: 50:f9:4e:d0:93:c2:e8:ac:de:5c:56:ce:96:69:42: 10:a4:00:ac:98:db:a0:3e:73:58:2b:e8:cd:f3:21: 7a:96:9e:93:fa:bf:9b:82:8f:7e:5c:25:e2:3b:46: 98:5c:34:e7:3d:5d:a3:83:1e:46:b9:77:48:d4:16: cc:94:8b:6d:cd:54:da:46:4c:00:87:7e:ad:4a:75: ef:e7:e7:9d:c6:e8:1f:95:f2:b4:e5:e0:04:c1:c2: 3d:71:9b:f4:df:cd:29:ab:07:2f:6e:48:b1:a1:b6: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:96:69:82:1C:84:4D:43:15:BA:4F:48:51:F7:AD:EC:FB:9C:15:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:66:6b:42:8a:8d:a5:45:1a:f7:95:2d:a4:e6:67:e7:86:c9: 8f:4b:fe:17:63:61:9f:77:a7:2f:bc:72:73:a1:07:e4:a5:2c: 6b:09:db:82:a1:6c:56:5d:7c:f2:fb:57:0c:da:14:97:35:88: 59:46:f6:86:09:b4:08:b5:46:81:c3:22:e8:5d:23:5d:11:99: 9c:34:78:77:6b:f7:4f:93:62:c1:a9:80:b6:18:b9:58:35:25: c1:82:e3:91:5a:92:4f:9c:de:9c:f5:36:9e:7b:60:2d:72:43: b2:e5:f4:1e:75:eb:43:cd:57:17:46:51:15:5c:51:4e:8a:b9: 36:f8:f9:db:d7:cc:b6:65:eb:c6:08:91:ff:20:b3:f0:41:7e: 8d:22:65:7b:b4:fc:c4:20:70:34:a4:51:38:9a:33:43:e6:a6: 4b:25:75:c7:bc:e0:d2:60:55:1c:35:c8:5c:e9:49:b1:59:ac: 01:af:fa:91:0f:01:11:5f:cc:36:04:74:08:bd:6a:90:de:d3: 24:3f:f0:97:7f:92:28:d2:55:5a:ae:34:46:41:1b:86:01:52: 55:b6:5c:60:8a:dc:76:8d:a9:ec:1b:0a:5b:20:3d:e9:52:48: a2:e6:dc:52:34:08:ca:fe:c6:57:f9:55:f4:80:2c:7e:b2:d0: 27:4c:f4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e17J2qEgr28+2KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk N2M0OTIyMTMtMjI5NC00ZTlkLTgzZDEtNWU5YmM3NmY1ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+yeJD186twjHmyB/4xTPqReFDPPkIKRmIvh rQuDqBrB1BEjz6sfJebsgUNX9e7/yPocaXLsE/yazg0/lnuSFzRy0sfaorcSK0uO h7gO6HaaJhR0aMuqy9GAtAiMUS1aKFjUPKCFcdb4VaiTvoZYy6++8KWe25X86Xbw cAE0M9BQ9UQn0svYDgGrq5qTPzmmDxisyQxQ+U7Qk8LorN5cVs6WaUIQpACsmNug PnNYK+jN8yF6lp6T+r+bgo9+XCXiO0aYXDTnPV2jgx5GuXdI1BbMlIttzVTaRkwA h36tSnXv5+edxugflfK05eAEwcI9cZv0380pqwcvbkixobZFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmWaYIchE1DFbpPSFH3rez7nBVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmNmMTMzYTYtNjdhOC0z ZTRlLTgwYWYtZmE3MGM3MGFiYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRma0KKjaVFGveVLaTmZ+eGyY9L/hdjYZ93py+8cnOhB+SlLGsJ24Kh bFZdfPL7VwzaFJc1iFlG9oYJtAi1RoHDIuhdI10RmZw0eHdr90+TYsGpgLYYuVg1 JcGC45Fakk+c3pz1Np57YC1yQ7Ll9B5160PNVxdGURVcUU6KuTb4+dvXzLZl68YI kf8gs/BBfo0iZXu0/MQgcDSkUTiaM0Pmpksldce84NJgVRw1yFzpSbFZrAGv+pEP ARFfzDYEdAi9apDe0yQ/8Jd/kijSVVquNEZBG4YBUlW2XGCK3HaNqewbClsgPelS SKLm3FI0CMr+xlf5VfSALH6y0CdM9GE= -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:00 2025 by rpki-client