$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa File: cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json) Hash identifier: gVJHGe3Y0+9CK+JDKKoxAZ38yj3lcsBYhMwfYEo/AxY= Subject key identifier: 24:9D:DD:90:F4:F9:C6:8F:50:6B:A0:61:97:AB:48:35:17:21:79:FA Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A29556D3D7C1881A06F0DE740 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 16509 IP address blocks: 67.217.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6d:3d:7c:18:81:a0:6f:0d:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=1a7358b0-ce10-487c-a868-c2b0a4c7b90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:4e:1e:c3:a4:e5:ac:fa:f1:db:08:14:af: 78:82:48:48:e9:47:ec:d0:0b:b9:d3:59:08:62:cc: 38:ae:ac:e2:45:dd:24:f3:4b:8b:66:a4:8f:8c:1a: 6e:33:4e:dd:04:6b:88:a3:24:f4:71:1b:dd:34:10: d6:8d:77:44:65:b5:29:24:28:3b:88:d3:62:1e:ce: e4:d9:d9:69:78:03:4f:d0:ce:b8:a3:52:8b:43:e0: 39:5d:17:1c:df:b4:51:b2:77:5a:bb:9e:2b:35:56: 5f:69:8c:9e:d7:4a:72:c8:ab:73:b6:e8:c3:7d:56: 47:ba:b1:ac:72:fb:19:fc:37:e5:e5:e0:1c:ed:45: 40:cf:3e:fa:72:d8:69:57:84:71:9f:03:32:a7:30: a4:06:aa:d2:27:35:23:82:9f:b7:9c:11:57:10:04: b8:52:a5:f6:82:5e:b0:2f:f7:5f:5a:64:1a:e7:62: 1c:4e:d0:8e:00:39:c2:2e:54:2c:e0:13:de:90:1b: 4b:65:54:54:84:77:2d:e1:5b:03:90:cd:fe:8c:54: 20:2e:cf:1c:ca:ad:03:a3:de:1f:4e:10:75:19:45: 5e:8e:6a:92:f1:81:27:4d:82:55:49:71:1a:7e:b2: 03:91:fe:53:bb:b2:92:3e:3f:4a:38:be:8a:40:7d: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9D:DD:90:F4:F9:C6:8F:50:6B:A0:61:97:AB:48:35:17:21:79:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:4f:47:1c:7e:85:11:d3:a8:6b:5c:4f:35:23:3c:71:77: bb:4e:70:64:bf:1c:ec:04:7f:98:13:d1:88:a4:ce:e2:b7:f2: 93:d1:c5:5b:a0:e9:40:e2:17:79:4c:f7:ef:eb:58:a4:b8:4e: c8:3e:37:64:c5:29:86:44:06:0e:fd:f1:62:ef:55:05:b4:3e: 19:c2:f3:c6:2d:c2:96:42:1f:de:13:5b:aa:6d:f2:30:85:90: 86:62:ee:9b:73:c9:e9:e8:a3:11:16:23:42:a5:ef:8a:01:72: 12:68:08:18:78:5a:6b:17:df:63:4a:e6:fa:35:05:79:3f:d6: e9:4c:2a:70:32:f3:d2:e5:8e:3d:a3:32:81:7b:67:26:e2:d6: d7:8f:e0:96:08:aa:b9:cd:2c:69:6c:fb:d7:af:51:fe:6c:6a: 86:08:40:b6:fd:1d:5a:2e:ec:73:53:2d:06:20:d4:e2:62:7b: 27:89:07:65:c8:ea:67:7f:20:02:bd:c0:94:d4:f4:43:b0:33: 9e:1e:5f:e9:f3:45:99:f3:b1:ec:a4:7a:24:a5:9d:f6:ad:34: 0e:42:5e:77:dd:16:7d:cd:f9:69:9e:95:ad:05:09:46:45:75: f8:cf:43:75:d3:fe:7b:20:a0:1f:82:69:31:8c:20:dd:99:9d: d5:30:39:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVW09fBiBoG8N50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk MWE3MzU4YjAtY2UxMC00ODdjLWE4NjgtYzJiMGE0YzdiOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkJOHsOk5az68dsIFK94gkhI6Ufs0Au501kI Ysw4rqziRd0k80uLZqSPjBpuM07dBGuIoyT0cRvdNBDWjXdEZbUpJCg7iNNiHs7k 2dlpeANP0M64o1KLQ+A5XRcc37RRsndau54rNVZfaYye10pyyKtztujDfVZHurGs cvsZ/Dfl5eAc7UVAzz76cthpV4RxnwMypzCkBqrSJzUjgp+3nBFXEAS4UqX2gl6w L/dfWmQa52IcTtCOADnCLlQs4BPekBtLZVRUhHct4VsDkM3+jFQgLs8cyq0Do94f ThB1GUVejmqS8YEnTYJVSXEafrIDkf5Tu7KSPj9KOL6KQH2i+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSd3ZD0+caPUGugYZerSDUXIXn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2JmOTY4NTEtYmE5ZS0z OGJmLWE5NjMtZGE2NWY3ZjM3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFFT0ccfoUR06hrXE81Izxxd7tOcGS/HOwEf5gT0YikzuK38pPRxVug 6UDiF3lM9+/rWKS4Tsg+N2TFKYZEBg798WLvVQW0PhnC88YtwpZCH94TW6pt8jCF kIZi7ptzyenooxEWI0Kl74oBchJoCBh4WmsX32NK5vo1BXk/1ulMKnAy89Lljj2j MoF7Zybi1teP4JYIqrnNLGls+9evUf5saoYIQLb9HVou7HNTLQYg1OJieyeJB2XI 6md/IAK9wJTU9EOwM54eX+nzRZnzseykeiSlnfatNA5CXnfdFn3N+Wmela0FCUZF dfjPQ3XT/nsgoB+CaTGMIN2ZndUwOW8= -----END CERTIFICATE-----Generated at Sat Jun 14 07:07:29 2025 by rpki-client