$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa File: 9ae85637-6c30-3806-85f8-d79f4af96d9e.roa (raw, json) Hash identifier: 7FtfItCu5itwdw3KahwHbW7rHkGDEFJUF+d7xBZw1dc= Subject key identifier: 6B:0B:CA:B8:6A:CE:5B:0D:90:90:EA:67:D2:44:9A:AE:40:B5:B5:CD Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3CE02725A1B659869169A900 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 33705 IP address blocks: 68.67.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:27:25:a1:b6:59:86:91:69:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=278c300f-c511-43ca-bcd5-caa1a176d93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:f6:fa:2e:ab:be:2d:b4:67:5c:fb:75:cf: 04:78:de:3b:48:68:6c:52:6a:b5:2c:3a:12:5f:8a: ce:0b:68:47:c6:c9:b3:6b:c0:a3:5c:a1:f6:4a:a2: d4:fe:84:8d:93:34:d6:7c:4a:f5:17:db:69:c3:46: 68:48:4b:dd:f9:c7:18:60:3b:08:0c:77:a1:05:31: 39:6e:2c:25:09:03:40:72:70:2f:8f:e8:f3:c7:2f: 98:92:4b:e7:65:0d:fa:fc:b3:b1:19:70:67:6f:12: 83:e3:bc:ae:86:cf:d0:e0:2c:da:cf:35:7c:23:57: 3c:5e:c5:81:0e:69:fb:a0:01:b9:e6:ea:88:bd:d5: 3a:99:13:a0:28:a3:e4:fa:1f:c4:6b:b4:ff:c9:e8: 18:08:a5:3a:28:f1:e2:8c:b5:9d:da:ce:33:d2:3b: 09:34:53:79:2f:52:fe:6d:1c:8b:81:39:64:df:ea: 35:85:e7:6f:86:0c:e9:21:fe:66:40:ec:07:0e:7b: 21:36:46:ce:b8:d0:b3:c8:ce:fb:52:1a:c7:f0:7a: bf:bf:bf:08:94:71:6a:28:02:ac:d5:86:45:34:7b: f0:a4:58:98:55:fa:ae:c0:64:b4:40:1b:e0:cb:bf: 07:ef:b2:90:67:44:20:82:ba:57:1e:a0:0e:25:24: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0B:CA:B8:6A:CE:5B:0D:90:90:EA:67:D2:44:9A:AE:40:B5:B5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9f:62:55:fe:75:51:73:bf:02:9b:bc:e9:f4:ae:2d:e6:70: 44:76:84:d9:c8:eb:b0:ab:71:0b:ed:d8:df:ba:84:1c:0b:f6: 74:34:9f:08:e1:6e:b3:9e:fd:98:31:7e:49:60:15:00:f9:3f: 72:32:c5:92:c1:82:65:15:72:65:28:c7:e5:cb:26:d8:19:d6: 9d:90:4c:e5:e5:29:c1:65:9a:ec:bd:a3:c4:3e:2a:a5:11:71: c7:c1:7a:b9:d6:4c:07:3d:bd:33:ff:18:1f:3e:27:08:1f:fa: 3e:14:8f:70:45:4e:66:e5:ec:d2:38:7c:84:73:24:26:4f:e6: 71:fe:60:80:1c:71:2f:d6:fd:5a:3e:e8:ce:b2:c9:48:86:f6: 5e:47:10:de:1c:c2:ad:7a:d6:3b:77:1a:5c:23:9c:e3:1d:42: 03:71:c4:26:a6:22:b8:67:49:fe:6e:69:6c:9f:2b:9d:a3:42: b6:7a:b0:4c:4e:f3:da:2e:14:bf:34:a9:09:cd:5e:a3:1c:e7: 39:e1:9d:27:fd:13:70:fd:ba:de:b8:99:03:da:f4:a7:16:16: 8f:2c:5f:5c:7b:28:93:94:dc:2d:e0:19:06:2c:0c:9a:32:d5: c2:d7:dd:60:88:d4:e1:ad:80:9a:cd:2e:54:f2:bd:7a:17:4b: 7c:b9:9f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CclobZZhpFpqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk Mjc4YzMwMGYtYzUxMS00M2NhLWJjZDUtY2FhMWExNzZkOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R/2+i6rvi20Z1z7dc8EeN47SGhsUmq1LDoS X4rOC2hHxsmza8CjXKH2SqLU/oSNkzTWfEr1F9tpw0ZoSEvd+ccYYDsIDHehBTE5 biwlCQNAcnAvj+jzxy+YkkvnZQ36/LOxGXBnbxKD47yuhs/Q4CzazzV8I1c8XsWB Dmn7oAG55uqIvdU6mROgKKPk+h/Ea7T/yegYCKU6KPHijLWd2s4z0jsJNFN5L1L+ bRyLgTlk3+o1hedvhgzpIf5mQOwHDnshNkbOuNCzyM77UhrH8Hq/v78IlHFqKAKs 1YZFNHvwpFiYVfquwGS0QBvgy78H77KQZ0QggrpXHqAOJSTAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsLyrhqzlsNkJDqZ9JEmq5AtbXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOWFlODU2MzctNmMzMC0z ODA2LTg1ZjgtZDc5ZjRhZjk2ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWfYlX+dVFzvwKbvOn0ri3mcER2hNnI67CrcQvt2N+6hBwL9nQ0nwjh brOe/ZgxfklgFQD5P3IyxZLBgmUVcmUox+XLJtgZ1p2QTOXlKcFlmuy9o8Q+KqUR ccfBernWTAc9vTP/GB8+Jwgf+j4Uj3BFTmbl7NI4fIRzJCZP5nH+YIAccS/W/Vo+ 6M6yyUiG9l5HEN4cwq161jt3GlwjnOMdQgNxxCamIrhnSf5uaWyfK52jQrZ6sExO 89ouFL80qQnNXqMc5znhnSf9E3D9ut64mQPa9KcWFo8sX1x7KJOU3C3gGQYsDJoy 1cLX3WCI1OGtgJrNLlTyvXoXS3y5n2s= -----END CERTIFICATE-----Generated at Tue Jul 1 20:49:12 2025 by rpki-client