$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa File: 04f8af44-22cb-3a08-b7f4-332ea1380b17.roa (raw, json) Hash identifier: TG2oCq+01Fk1ERMjXi8HoQDwaNAMo7ogsozA/3pGHVo= Subject key identifier: 21:C9:26:9A:1E:EB:33:91:D7:99:5F:20:AE:43:63:4D:E2:3D:7C:2B Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584A4C3B0B0DC12224AA69086140 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 209 IP address blocks: 67.63.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:0b:0d:c1:22:24:aa:69:08:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=355c6ca0-427d-4c29-bbf2-18164f1d8a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:cb:90:dd:7b:e0:22:ee:80:99:67:7c:78: 2c:7a:96:52:9c:fa:00:80:9c:5b:d2:9a:f4:0e:5c: d2:e1:c1:14:20:16:a0:89:ba:45:47:4b:74:c1:38: a7:52:88:2a:22:db:1c:7a:d0:b3:aa:91:2a:bb:4d: 9d:06:a0:4a:86:68:01:26:55:4c:a0:e8:f2:ae:b0: ad:17:86:f2:f5:be:d9:b1:2d:94:43:87:41:c8:f6: 8a:c0:8b:d5:86:92:9e:c0:ce:2c:6b:71:7a:5e:b3: af:7e:9f:32:07:51:ee:d9:c4:5f:ef:75:b3:c7:5e: 67:d0:d4:6a:83:ac:94:94:99:ad:30:c8:79:fc:17: b0:10:22:b2:5d:a6:2b:82:44:29:67:e7:7b:9b:0c: 7c:a9:db:1f:0f:46:24:5e:a2:04:c4:d7:6e:fc:ae: 76:49:8d:2f:a4:18:91:ec:88:7a:5e:12:15:dd:9c: 5d:d7:5a:bb:e3:bc:1c:ce:4f:07:55:f1:d5:02:76: 9d:10:80:d2:c3:8e:15:12:34:d4:7e:c6:d2:a7:f8: 88:28:f0:e0:41:d0:72:47:75:5d:16:ee:1c:2a:9d: 3d:34:77:90:10:63:2b:af:b0:19:ce:6a:2c:b2:04: 5e:5e:bb:fb:d0:d1:a3:d7:c7:53:4e:55:93:94:6a: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:26:9A:1E:EB:33:91:D7:99:5F:20:AE:43:63:4D:E2:3D:7C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 67.63.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:53:c4:d1:4f:20:ec:e0:f5:50:fe:16:1c:b8:eb:97:0e:b9: f9:d6:73:51:54:7b:4f:c9:d0:7b:ea:81:48:3c:c8:c6:2d:b1: 59:7d:c3:b5:5d:e6:9c:a6:30:06:6e:9b:fc:86:47:4d:7c:67: 03:f9:a4:75:1c:1d:b7:f4:ad:49:41:30:6f:2a:d0:e8:5e:9a: 10:8a:e8:04:55:91:08:cb:19:6e:f8:3c:29:4c:bb:c2:f0:d5: ef:94:56:2f:1f:e3:95:d4:81:f4:f4:77:31:0d:cf:1c:df:0c: 24:f0:b5:38:ae:d6:16:47:f2:7a:7c:32:eb:db:fd:e9:04:52: 02:f7:62:55:8c:86:f2:5a:97:bf:7c:c1:ca:fe:be:41:ae:14: 77:b1:4d:c2:cf:33:60:a8:d3:8d:ad:7e:cc:7a:96:d3:b3:42: f2:30:02:20:23:6f:59:f1:46:0a:a8:89:d0:38:e1:68:96:38: 19:1d:cc:3d:2c:62:69:12:36:c9:42:14:b2:50:6b:fa:5a:74: 74:9a:69:ac:b0:b6:cb:fc:6e:81:be:c7:f0:94:cc:0e:29:d5: 0b:99:bc:b7:1f:40:7f:a6:09:3f:31:8a:f9:77:6c:d8:3e:e5: d5:17:42:e2:5f:51:ef:77:1d:f4:97:a4:f3:77:97:2a:85:7a: f0:62:bd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwsNwSIkqmkIYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MzU1YzZjYTAtNDI3ZC00YzI5LWJiZjItMTgxNjRmMWQ4YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTLLkN174CLugJlnfHgsepZSnPoAgJxb0pr0 DlzS4cEUIBagibpFR0t0wTinUogqItscetCzqpEqu02dBqBKhmgBJlVMoOjyrrCt F4by9b7ZsS2UQ4dByPaKwIvVhpKewM4sa3F6XrOvfp8yB1Hu2cRf73Wzx15n0NRq g6yUlJmtMMh5/BewECKyXaYrgkQpZ+d7mwx8qdsfD0YkXqIExNdu/K52SY0vpBiR 7Ih6XhIV3Zxd11q747wczk8HVfHVAnadEIDSw44VEjTUfsbSp/iIKPDgQdByR3Vd Fu4cKp09NHeQEGMrr7AZzmossgReXrv70NGj18dTTlWTlGoonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHJJpoe6zOR15lfIK5DY03iPXwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMDRmOGFmNDQtMjJjYi0z YTA4LWI3ZjQtMzMyZWExMzgwYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQz+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBTxNFPIOzg9VD+Fhy465cOufnWc1FUe0/J0HvqgUg8yMYtsVl9w7Vd 5pymMAZum/yGR018ZwP5pHUcHbf0rUlBMG8q0OhemhCK6ARVkQjLGW74PClMu8Lw 1e+UVi8f45XUgfT0dzENzxzfDCTwtTiu1hZH8np8Muvb/ekEUgL3YlWMhvJal798 wcr+vkGuFHexTcLPM2Co042tfsx6ltOzQvIwAiAjb1nxRgqoidA44WiWOBkdzD0s YmkSNslCFLJQa/padHSaaaywtsv8boG+x/CUzA4p1QuZvLcfQH+mCT8xivl3bNg+ 5dUXQuJfUe93HfSXpPN3lyqFevBivaM= -----END CERTIFICATE-----Generated at Tue Jul 1 08:03:55 2025 by rpki-client