$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa File: ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa (raw, json) Hash identifier: M8tq7BgtXxfR/fXgnXdgFGDs3DvVAks/+Zudq6c4LmI= Subject key identifier: 59:31:F2:96:78:53:3B:87:ED:5F:FF:A5:BE:85:9B:07:E6:7F:10:2D Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F43285849FCAA7AD5A38FA0DA8524B380 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 19107 IP address blocks: 216.234.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7a:d5:a3:8f:a0:da:85:24:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=6239884c-d2a7-4c07-9595-9f29c19f8af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:dd:b2:61:c7:c1:fa:05:13:06:2b:6a:f5: 4e:95:7b:ae:85:e3:57:9d:1d:bb:34:39:c6:65:60: d0:1e:39:3d:95:63:a4:2d:ff:52:fa:bf:3f:bc:26: 5b:65:d7:37:9b:cb:95:34:79:d7:d6:6d:66:86:be: 7d:1a:da:a7:83:7f:7e:93:e1:4d:4d:64:8b:e7:5b: 91:1a:76:0c:fa:bf:6f:48:15:91:bd:db:19:87:74: 3c:d2:34:12:91:93:10:1f:b5:72:6d:7f:25:b0:14: 95:40:f4:f8:6f:22:12:ea:31:db:b1:d6:08:33:fb: 24:2d:7e:ce:b2:76:81:e8:4b:7f:64:b1:bc:fa:39: c8:da:36:24:5f:97:30:ac:71:48:24:9f:2a:35:ac: bf:09:83:72:42:10:79:c4:e4:37:26:5e:79:85:09: 79:5b:66:bb:05:19:65:ee:b2:a1:52:fc:eb:5b:10: 6c:7b:c2:9e:59:ca:65:1e:88:eb:05:14:74:7a:47: f9:d4:d7:e2:aa:c4:92:30:25:b8:70:69:53:b1:80: 13:28:6e:f9:64:fd:2f:be:83:e1:7a:87:38:77:74: 83:d8:2f:c2:d1:19:bd:3b:fb:02:a6:4e:dc:11:c4: 2a:57:ef:0f:04:fa:5d:dc:93:dc:43:16:f9:cb:d1: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:31:F2:96:78:53:3B:87:ED:5F:FF:A5:BE:85:9B:07:E6:7F:10:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 216.234.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8e:9d:2c:66:2c:d2:c1:a5:17:35:b0:ef:e1:a7:78:df:de: 6a:b0:21:05:ae:70:ae:71:9a:30:20:04:f0:7f:1b:93:37:88: 6b:47:a9:47:7b:84:e2:46:bc:23:8a:2f:4a:63:9e:0a:49:ce: f5:fa:af:c0:b7:b1:4c:94:dd:2e:0f:b4:68:f8:bd:18:7f:b6: af:49:1b:41:f2:02:67:08:1f:fe:7e:9e:ba:63:e8:65:27:46: 65:b5:47:43:11:97:ac:b7:dc:69:d9:18:6a:23:0f:15:e0:21: 22:f0:02:25:95:75:13:5d:a2:27:4c:9c:17:b7:28:8d:48:84: 79:79:cb:39:60:43:ac:48:81:20:ca:77:c4:35:b9:f7:e0:d4: bf:f2:e9:c4:c7:a4:ab:ac:9c:63:be:5f:09:f3:23:5e:b1:2a: 18:5b:14:19:18:58:9c:34:6c:25:e7:3b:ec:e9:d2:79:76:af: 57:e0:03:dc:ca:80:12:1b:b9:89:05:68:e1:8e:d4:6b:4c:06: d8:6a:58:a7:c4:aa:07:e6:74:ba:18:85:60:16:39:1d:a5:6e: 9b:de:a8:53:a5:78:d5:7a:5b:f2:96:1c:5e:21:9d:14:36:95: aa:6d:ed:1c:e4:3c:04:a7:2a:45:d8:3b:9f:27:62:9b:e5:61: cb:c8:44:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnrVo4+g2oUks4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NjIzOTg4NGMtZDJhNy00YzA3LTk1OTUtOWYyOWMxOWY4YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln3dsmHHwfoFEwYravVOlXuuheNXnR27NDnG ZWDQHjk9lWOkLf9S+r8/vCZbZdc3m8uVNHnX1m1mhr59Gtqng39+k+FNTWSL51uR GnYM+r9vSBWRvdsZh3Q80jQSkZMQH7VybX8lsBSVQPT4byIS6jHbsdYIM/skLX7O snaB6Et/ZLG8+jnI2jYkX5cwrHFIJJ8qNay/CYNyQhB5xOQ3Jl55hQl5W2a7BRll 7rKhUvzrWxBse8KeWcplHojrBRR0ekf51NfiqsSSMCW4cGlTsYATKG75ZP0vvoPh eoc4d3SD2C/C0Rm9O/sCpk7cEcQqV+8PBPpd3JPcQxb5y9Fe2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkx8pZ4UzuH7V//pb6FmwfmfxAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYWU0YzM0ZTgtM2ZkNi0z N2ZmLTliMmEtMjVjMTA1NDQ4ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWOnSxmLNLBpRc1sO/hp3jf3mqwIQWucK5xmjAgBPB/G5M3iGtHqUd7 hOJGvCOKL0pjngpJzvX6r8C3sUyU3S4PtGj4vRh/tq9JG0HyAmcIH/5+nrpj6GUn RmW1R0MRl6y33GnZGGojDxXgISLwAiWVdRNdoidMnBe3KI1IhHl5yzlgQ6xIgSDK d8Q1uffg1L/y6cTHpKusnGO+XwnzI16xKhhbFBkYWJw0bCXnO+zp0nl2r1fgA9zK gBIbuYkFaOGO1GtMBthqWKfEqgfmdLoYhWAWOR2lbpveqFOleNV6W/KWHF4hnRQ2 lapt7RzkPASnKkXYO58nYpvlYcvIRHc= -----END CERTIFICATE-----Generated at Sat Jul 5 05:01:38 2025 by rpki-client