$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa File: 3750f6f6-4326-3661-8ce8-211ce13d34e3.roa (raw, json) Hash identifier: nAbvx+R1VMcF8/kDF+F6XP4/TvCD4XApSnuU3LNzdv8= Subject key identifier: 6D:6B:CA:61:9D:30:0E:8D:BF:AF:3D:E5:24:C4:9E:B9:AD:78:2D:87 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584A41104D0F83D8B7ACBE12B300 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 11260 IP address blocks: 142.67.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4d:0f:83:d8:b7:ac:be:12:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=ec4e6923-9e32-42a2-94f2-d314e8102d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:aa:c8:26:da:c3:29:9d:9f:1b:87:02:a0: bb:6a:c2:46:93:63:f6:7b:44:02:72:96:6b:43:39: ca:ac:c2:61:fe:7a:54:5a:7c:f1:0d:9b:3f:f0:48: 43:df:32:36:92:29:23:f8:4b:c8:3c:ea:20:9a:f5: 0f:dd:06:dc:7c:94:da:c0:a9:9f:d3:6c:ae:df:71: c8:28:31:99:4b:c6:fc:2b:7e:3a:ac:e6:d5:77:50: a4:a9:57:6a:e1:e0:9e:46:02:a8:59:61:d4:aa:49: 12:b7:1a:35:67:89:24:66:54:4f:fa:29:8c:22:d7: 28:a5:d8:e5:b3:67:fd:0b:e8:dc:56:68:a5:5b:0c: d6:04:e5:c1:13:55:16:d9:50:18:0a:7d:85:17:f1: 18:c4:9f:50:e3:94:90:c0:f1:f0:9c:ea:6e:59:06: e2:19:d1:8d:05:9c:fb:7d:ec:ba:1f:66:12:3c:69: 2e:7b:f4:26:56:5c:94:62:12:eb:63:1e:be:86:dd: eb:50:f3:d7:bc:d4:4a:00:c2:10:dd:3a:3d:05:56: 3d:1e:05:be:c7:07:9a:04:43:04:9a:7b:9e:e5:45: 43:00:75:0d:97:a4:ff:74:23:4f:2e:26:2c:8d:93: 04:1f:41:ed:df:d0:9e:c9:1c:e3:02:fd:e4:a9:0d: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6B:CA:61:9D:30:0E:8D:BF:AF:3D:E5:24:C4:9E:B9:AD:78:2D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3750f6f6-4326-3661-8ce8-211ce13d34e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 142.67.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1c:a7:6d:46:c9:48:a2:83:80:c8:9d:55:de:9a:47:8d:dc: b4:90:8c:61:ae:54:2b:af:35:28:f1:7d:82:bd:48:3d:50:2c: cd:45:a2:8c:11:85:23:03:e8:c3:21:ee:a2:47:ca:23:84:07: 51:5b:7f:1b:da:ae:8c:54:bf:38:4f:9a:93:aa:7a:19:05:2d: 5b:18:98:d2:56:63:9f:72:d7:55:ad:9d:a2:86:e4:2f:63:ea: 8a:4d:61:2e:fa:4f:98:e9:5f:20:55:af:2f:6d:a4:12:14:d7: be:fe:d4:94:69:fc:96:6e:09:d5:57:04:59:11:38:da:ad:9f: b0:4e:23:d2:af:f3:c4:2a:6d:7c:51:81:39:ea:e0:d7:d9:92: 36:44:60:50:1d:ba:22:c3:bf:ae:b1:9d:d3:42:f8:6e:40:01: 86:01:9b:7f:2a:90:e6:ae:dc:ae:fa:32:da:26:9d:14:5a:73: 51:78:c9:cf:88:15:fc:17:05:b5:86:3c:68:34:a7:8d:ee:0d: 37:14:63:ed:3e:a5:70:9b:e7:5e:9f:be:9d:f5:5a:b2:d0:95: 3e:28:76:94:cb:1f:47:67:05:7e:6c:a0:63:fc:f1:41:97:55: 3a:f5:d3:bc:56:81:d9:76:d9:a1:6a:cb:75:23:2d:3b:f3:d8: 28:a9:05:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE0Pg9i3rL4SswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ZWM0ZTY5MjMtOWUzMi00MmEyLTk0ZjItZDMxNGU4MTAyZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutGqyCbawymdnxuHAqC7asJGk2P2e0QCcpZr QznKrMJh/npUWnzxDZs/8EhD3zI2kikj+EvIPOogmvUP3QbcfJTawKmf02yu33HI KDGZS8b8K346rObVd1CkqVdq4eCeRgKoWWHUqkkStxo1Z4kkZlRP+imMItcopdjl s2f9C+jcVmilWwzWBOXBE1UW2VAYCn2FF/EYxJ9Q45SQwPHwnOpuWQbiGdGNBZz7 fey6H2YSPGkue/QmVlyUYhLrYx6+ht3rUPPXvNRKAMIQ3To9BVY9HgW+xweaBEME mnue5UVDAHUNl6T/dCNPLiYsjZMEH0Ht39CeyRzjAv3kqQ3IvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1rymGdMA6Nv6895STEnrmteC2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMzc1MGY2ZjYtNDMyNi0z NjYxLThjZTgtMjExY2UxM2QzNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjkOiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAcp21GyUiig4DInVXemkeN3LSQjGGuVCuvNSjxfYK9SD1QLM1FoowR hSMD6MMh7qJHyiOEB1FbfxvaroxUvzhPmpOqehkFLVsYmNJWY59y11WtnaKG5C9j 6opNYS76T5jpXyBVry9tpBIU177+1JRp/JZuCdVXBFkRONqtn7BOI9Kv88QqbXxR gTnq4NfZkjZEYFAduiLDv66xndNC+G5AAYYBm38qkOau3K76MtomnRRac1F4yc+I FfwXBbWGPGg0p43uDTcUY+0+pXCb516fvp31WrLQlT4odpTLH0dnBX5soGP88UGX VTr107xWgdl22aFqy3UjLTvz2CipBaI= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:35 2025 by rpki-client