$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa File: cb1dba05-4578-34bd-8538-27f1ec0c698f.roa (raw, json) Hash identifier: lOdt3SGWfGhqmoR/5P4wgqjosBBt/BxGHWgrYTQRrmQ= Subject key identifier: 4A:94:CA:31:B2:3D:00:23:55:B7:09:0D:76:46:8E:A2:29:F2:E6:60 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A7E7B5EB7F9B477E364215340 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 67.217.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5e:b7:f9:b4:77:e3:64:21:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=22b18837-4256-4920-9955-e4aec249a11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:a7:21:32:ff:36:39:d4:96:72:43:c0:4a: 72:3c:f5:28:95:c9:f6:5c:3e:5a:dc:06:1d:31:22: 38:e7:39:95:ae:f2:38:7d:43:d8:28:f5:8a:82:96: 79:2f:27:b0:11:f9:84:97:96:f6:2c:e3:12:39:aa: cf:c2:ce:47:f9:ab:6b:e8:16:f5:f4:12:0a:01:1e: e1:ba:4b:9e:cb:26:1d:1c:78:a0:fb:9c:4c:5d:12: ea:12:15:21:0c:99:8b:ac:56:fd:58:dd:95:18:d3: 06:ae:0a:d4:4b:1e:89:30:e4:36:3c:42:f2:df:1c: c7:f2:76:41:ef:4c:d2:58:3a:12:61:40:7b:7f:7b: cd:3f:c0:71:c1:13:dc:29:f3:40:61:1f:27:7a:20: 20:6d:36:63:50:2b:c2:71:30:61:9c:6a:5f:1f:24: cc:77:32:b1:ce:59:67:29:b6:5a:83:37:b7:f5:b1: 3d:90:54:22:fa:50:c5:c8:20:82:83:27:c8:91:39: 0d:d8:b3:08:41:16:24:00:d4:84:00:3b:7f:2c:6c: 71:e0:ba:15:19:0b:25:ed:38:42:b5:6d:ba:4b:47: 8b:ec:1d:5a:f2:42:d3:96:7d:f4:54:cd:11:14:5e: d0:00:89:e2:43:14:31:66:20:34:f0:14:6a:5a:2b: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:94:CA:31:B2:3D:00:23:55:B7:09:0D:76:46:8E:A2:29:F2:E6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:dd:48:1d:6e:3f:bc:f7:95:1c:a1:33:22:2b:7c:57:43:13: bb:be:64:06:d7:25:cd:41:d8:75:7c:5d:78:52:25:6f:6d:a2: b0:08:26:d9:e8:6a:21:7c:7c:bb:28:04:52:10:5e:0c:df:8d: 81:fa:5f:bc:d6:60:fa:e3:cc:1e:13:b7:61:ab:0b:f8:4f:9e: a0:f3:ff:d8:1f:c7:5e:5e:eb:b5:9d:d2:de:dc:dc:d7:62:24: 56:cb:64:7b:55:b0:72:21:22:59:4d:50:79:f6:d1:35:48:57: 29:c5:69:1e:d9:9c:83:34:8d:3c:47:b4:b1:66:83:50:1c:35: 04:f0:bc:c2:af:08:6f:7a:e6:11:01:20:ec:3c:af:44:d3:7d: 8f:c5:bf:7a:0b:1f:ee:1f:99:31:37:3f:c7:9f:82:1d:6a:05: 6e:05:77:f2:3a:c9:62:06:49:33:d0:79:08:23:30:7a:66:7a: 84:ce:e5:55:40:e4:5f:30:f0:a3:6a:4f:c3:26:5b:7d:4e:35: ff:f9:3e:e6:01:a6:a6:f8:24:30:21:93:e9:11:4f:e2:dd:23: 4a:67:91:17:56:af:f3:17:61:8e:05:43:fc:e7:9a:91:85:bc: 1c:48:19:c9:bf:87:c1:75:2a:5c:51:f7:3e:1d:c2:2d:31:c0: 7b:6a:34:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e163+bR342QhU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjJiMTg4MzctNDI1Ni00OTIwLTk5NTUtZTRhZWMyNDlhMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM6nITL/NjnUlnJDwEpyPPUolcn2XD5a3AYd MSI45zmVrvI4fUPYKPWKgpZ5LyewEfmEl5b2LOMSOarPws5H+atr6Bb19BIKAR7h ukueyyYdHHig+5xMXRLqEhUhDJmLrFb9WN2VGNMGrgrUSx6JMOQ2PELy3xzH8nZB 70zSWDoSYUB7f3vNP8BxwRPcKfNAYR8neiAgbTZjUCvCcTBhnGpfHyTMdzKxzlln KbZagze39bE9kFQi+lDFyCCCgyfIkTkN2LMIQRYkANSEADt/LGxx4LoVGQsl7ThC tW26S0eL7B1a8kLTln30VM0RFF7QAIniQxQxZiA08BRqWivjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqUyjGyPQAjVbcJDXZGjqIp8uZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2IxZGJhMDUtNDU3OC0z NGJkLTg1MzgtMjdmMWVjMGM2OThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDdSB1uP7z3lRyhMyIrfFdDE7u+ZAbXJc1B2HV8XXhSJW9torAIJtno aiF8fLsoBFIQXgzfjYH6X7zWYPrjzB4Tt2GrC/hPnqDz/9gfx15e67Wd0t7c3Ndi JFbLZHtVsHIhIllNUHn20TVIVynFaR7ZnIM0jTxHtLFmg1AcNQTwvMKvCG965hEB IOw8r0TTfY/Fv3oLH+4fmTE3P8efgh1qBW4Fd/I6yWIGSTPQeQgjMHpmeoTO5VVA 5F8w8KNqT8MmW31ONf/5PuYBpqb4JDAhk+kRT+LdI0pnkRdWr/MXYY4FQ/znmpGF vBxIGcm/h8F1KlxR9z4dwi0xwHtqNJM= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:23 2025 by rpki-client