$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa File: b7045a60-4c62-39c8-949c-52968d1cb529.roa (raw, json) Hash identifier: wxT793tT7UYl8AucELPZFNUip0pWN/ykrx3wHT9Hzv8= Subject key identifier: C5:CA:DE:91:E8:6A:3F:0E:BB:60:4F:6B:DC:41:52:AE:A0:41:97:16 Certificate issuer: /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Certificate serial: 010D0C9F4328584A4AD591ABD696F1075F321B40 Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 40244 IP address blocks: 67.231.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:91:ab:d6:96:f1:07:5f:32:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=951ae2b6-a288-4c87-938e-bf60d8e9c1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2d:33:4e:48:1c:89:da:7a:69:48:12:cb:c6: 04:3b:1a:dd:a5:cf:23:1c:6a:b9:8f:f2:73:7c:ae: c1:a3:5e:0e:e4:59:54:52:f0:b7:d0:9f:2f:47:22: ba:19:f9:cc:d8:94:05:06:9b:46:8b:b7:0c:d7:27: e1:78:c6:8d:c0:da:47:6f:84:6f:d3:d7:70:6c:bd: 28:74:b2:68:cf:e7:0b:f9:ca:d4:88:72:07:83:bc: b1:6c:ed:4e:41:47:61:61:aa:71:af:64:24:a3:b5: e3:7a:f0:24:96:70:f3:e4:c0:30:65:28:6e:be:33: 98:38:f2:15:37:7c:9e:e9:75:74:b0:d9:8c:23:75: e8:8a:80:46:db:b1:5b:13:91:c8:c1:98:08:2d:db: 2d:b5:10:a6:45:b0:6f:17:47:78:b9:5a:e3:d8:e5: e5:06:bb:c6:38:36:59:f0:62:4f:11:51:f9:b5:27: 05:05:13:74:b7:23:03:38:8b:3e:59:b2:06:3d:3d: 87:21:bf:2b:16:43:4c:5e:ac:ea:fe:96:80:f7:46: 2e:87:be:47:8d:94:ea:ee:25:a8:15:24:e1:58:13: c7:e3:eb:70:1a:0d:6e:9d:ed:52:f5:5c:59:41:2f: 77:ce:02:f2:42:88:02:8d:ad:75:d5:9e:58:97:68: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CA:DE:91:E8:6A:3F:0E:BB:60:4F:6B:DC:41:52:AE:A0:41:97:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl X509v3 Authority Key Identifier: keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer sbgp-ipAddrBlock: critical IPv4: 67.231.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dc:e8:62:25:2a:b8:74:c4:3c:26:7a:a3:fc:4a:51:65:e3: cc:26:c9:9e:f8:68:3a:85:76:27:f8:f1:df:56:95:48:35:c5: 27:39:fa:6a:85:17:47:4f:20:a3:9a:67:6c:cd:4c:0e:ea:df: 82:48:da:02:22:96:21:80:92:25:f2:77:8c:c4:4a:2c:24:6b: e2:b2:5e:c0:e8:34:e1:81:96:ba:d5:ee:8f:07:2a:a2:17:ad: 11:13:b4:84:ce:82:12:71:f1:4f:ad:5b:33:04:3b:f5:2d:7e: 3b:84:95:ac:ff:a7:05:8a:7b:25:39:e3:6b:fa:8e:9b:3a:33: 0d:a4:a7:e2:ab:87:9a:d1:79:86:11:90:ab:e3:ea:e5:f2:ee: 9d:12:66:f6:05:75:3e:29:67:d2:4b:7d:05:55:4c:69:d9:1d: d2:89:b7:c1:8f:67:f3:c4:98:92:af:52:49:53:7a:da:a1:2b: a4:66:85:32:1e:e6:8e:fd:be:db:49:6a:d4:df:96:41:ed:28: 52:58:05:4b:aa:91:96:66:5d:e6:85:dc:c6:13:1d:85:16:89: fc:7a:24:75:26:56:36:1c:e3:4b:25:fa:e2:60:5e:2e:2f:a9: 1d:8d:af:87:5f:23:37:c2:c8:ce:7c:50:de:c9:ac:32:4f:9c: a4:da:64:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZGr1pbxB18yG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw NjNjMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTUxYWUyYjYtYTI4OC00Yzg3LTkzOGUtYmY2MGQ4ZTljMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS0zTkgcidp6aUgSy8YEOxrdpc8jHGq5j/Jz fK7Bo14O5FlUUvC30J8vRyK6GfnM2JQFBptGi7cM1yfheMaNwNpHb4Rv09dwbL0o dLJoz+cL+crUiHIHg7yxbO1OQUdhYapxr2Qko7XjevAklnDz5MAwZShuvjOYOPIV N3ye6XV0sNmMI3XoioBG27FbE5HIwZgILdsttRCmRbBvF0d4uVrj2OXlBrvGODZZ 8GJPEVH5tScFBRN0tyMDOIs+WbIGPT2HIb8rFkNMXqzq/paA90Yuh75HjZTq7iWo FSThWBPH4+twGg1une1S9VxZQS93zgLyQogCja111Z5Yl2jdVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXK3pHoaj8Ou2BPa9xBUq6gQZcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5 N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvYjcwNDVhNjAtNGM2Mi0z OWM4LTk0OWMtNTI5NjhkMWNiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4 MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3c6GIlKrh0xDwmeqP8SlFl48wmyZ74aDqFdif48d9WlUg1xSc5+mqF F0dPIKOaZ2zNTA7q34JI2gIiliGAkiXyd4zESiwka+KyXsDoNOGBlrrV7o8HKqIX rRETtITOghJx8U+tWzMEO/UtfjuElaz/pwWKeyU542v6jps6Mw2kp+Krh5rReYYR kKvj6uXy7p0SZvYFdT4pZ9JLfQVVTGnZHdKJt8GPZ/PEmJKvUklTetqhK6RmhTIe 5o79vttJatTflkHtKFJYBUuqkZZmXeaF3MYTHYUWifx6JHUmVjYc40sl+uJgXi4v qR2Nr4dfIzfCyM58UN7JrDJPnKTaZOw= -----END CERTIFICATE-----Generated at Sun Jun 29 06:57:16 2025 by rpki-client