$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa File: 9a747c3b-3fd9-3e48-a4c5-c02174460043.roa (raw, json) Hash identifier: M1qR0qyVYNEyxC4WhIeLGNlO0bhqS0YYPZzAj8fq5WA= Subject key identifier: 74:70:1E:3A:4C:32:C0:E6:E4:78:98:D5:88:43:3F:35:40:6D:96:28 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A96368A05B5F9B2ADA9BC7E40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 31898 IP address blocks: 67.217.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:8a:05:b5:f9:b2:ad:a9:bc:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=4238b8fc-f87e-4a81-9fc7-d73f48e9dd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:e5:7c:eb:31:57:af:7d:83:cb:ae:f2:b9: 6d:06:99:23:4b:62:ea:ed:eb:00:b7:64:48:f4:d5: 83:d5:c7:eb:b5:60:7d:dd:f5:7a:93:06:96:5e:4c: 3e:dd:6d:d2:73:92:1d:4c:1d:41:d7:a5:8d:32:01: e0:6d:bd:60:f0:82:cb:0f:6b:d0:e8:e3:12:1c:14: ac:98:92:22:9c:d3:be:7b:8a:ce:72:b7:18:8b:de: 5f:a1:6b:00:1f:32:e2:dd:84:94:5e:3e:bf:57:be: 0b:bd:86:fd:7d:80:61:f6:3c:75:d1:84:c1:75:e6: 76:e5:7b:1e:4a:cf:51:39:99:31:28:7a:eb:cf:3b: e2:d1:c8:4c:b2:62:0c:74:08:6d:68:96:84:ab:40: 03:6f:c9:5c:90:f2:fd:3d:49:36:53:e7:d2:ab:36: fe:13:19:6d:72:15:86:a7:61:94:eb:2a:66:fa:f1: b4:33:2f:ad:4e:47:1f:eb:8f:e1:ba:39:cd:37:79: a3:7e:35:11:d9:f0:46:85:5e:5b:a8:43:b6:45:8a: c3:e3:12:55:a2:15:f1:e0:2c:68:dc:9f:52:2c:40: af:4d:ae:24:f9:43:44:7d:a4:4f:00:e8:09:29:55: 67:18:32:0c:1b:d3:5c:03:0b:af:47:2d:3c:f4:60: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:70:1E:3A:4C:32:C0:E6:E4:78:98:D5:88:43:3F:35:40:6D:96:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:80:8c:ff:f3:79:ed:4e:86:fe:01:60:d6:db:4f:7d:c8:6d: 7d:d1:99:28:cb:20:32:40:63:48:4f:80:42:8b:0a:b5:61:15: 63:5b:ca:f6:fc:4e:fa:32:39:74:21:10:86:92:9e:ce:c0:56: ee:1b:aa:d3:ac:fc:54:c4:ad:10:56:a7:6d:d6:2d:c0:8a:ee: 74:c9:1d:a4:2a:57:bf:63:6b:47:c6:fd:cb:e2:11:e7:23:0a: 9f:cf:98:28:00:9c:6a:bc:75:75:02:75:88:92:99:41:61:86: 8e:f9:26:70:c9:9b:14:0f:fa:55:13:49:3e:8c:55:f8:c3:0c: af:c8:69:0c:b2:0f:00:6a:00:f8:54:f7:a6:e1:38:cd:53:f4: ae:17:fc:e0:5f:25:0d:29:f9:a0:34:9e:ac:14:fb:fd:f5:d8: 45:fe:a6:ff:8a:ed:0b:07:b7:d4:96:09:09:08:c7:a5:a8:39: 66:a1:9a:ad:c9:bd:bf:b9:1a:15:75:29:4e:02:98:b9:2a:c2: 75:1e:76:24:2f:9f:f4:b3:60:75:ef:2b:a4:e0:c1:12:7f:f9: 0e:9e:8f:0d:8a:71:a2:42:0a:c1:7c:e8:40:20:5a:f1:39:b1: 72:97:3f:8a:67:64:6b:7c:0d:80:89:78:af:df:a5:2e:bd:7b: fc:8b:b6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNooFtfmyram8fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDIzOGI4ZmMtZjg3ZS00YTgxLTlmYzctZDczZjQ4ZTlkZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bnlfOsxV699g8uu8rltBpkjS2Lq7esAt2RI 9NWD1cfrtWB93fV6kwaWXkw+3W3Sc5IdTB1B16WNMgHgbb1g8ILLD2vQ6OMSHBSs mJIinNO+e4rOcrcYi95foWsAHzLi3YSUXj6/V74LvYb9fYBh9jx10YTBdeZ25Xse Ss9ROZkxKHrrzzvi0chMsmIMdAhtaJaEq0ADb8lckPL9PUk2U+fSqzb+ExltchWG p2GU6ypm+vG0My+tTkcf64/hujnNN3mjfjUR2fBGhV5bqEO2RYrD4xJVohXx4Cxo 3J9SLECvTa4k+UNEfaRPAOgJKVVnGDIMG9NcAwuvRy089GA1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRwHjpMMsDm5HiY1YhDPzVAbZYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOWE3NDdjM2ItM2ZkOS0z ZTQ4LWE0YzUtYzAyMTc0NDYwMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuAjP/zee1Ohv4BYNbbT33IbX3RmSjLIDJAY0hPgEKLCrVhFWNbyvb8 TvoyOXQhEIaSns7AVu4bqtOs/FTErRBWp23WLcCK7nTJHaQqV79ja0fG/cviEecj Cp/PmCgAnGq8dXUCdYiSmUFhho75JnDJmxQP+lUTST6MVfjDDK/IaQyyDwBqAPhU 96bhOM1T9K4X/OBfJQ0p+aA0nqwU+/312EX+pv+K7QsHt9SWCQkIx6WoOWahmq3J vb+5GhV1KU4CmLkqwnUediQvn/SzYHXvK6TgwRJ/+Q6ejw2KcaJCCsF86EAgWvE5 sXKXP4pnZGt8DYCJeK/fpS69e/yLto4= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:50 2025 by rpki-client