$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa File: b67aefa7-c52a-31f3-8f3a-81695e41253a.roa (raw, json) Hash identifier: eyoNPfg2NvHAPTcTNnj4uhxyAotWHSU63KwRvglSVBM= Subject key identifier: 93:4F:38:38:9B:CB:5A:96:9F:6F:9A:B8:65:18:B3:71:2D:49:FB:6F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A46609CF2038B8A2E564E7E00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa Signing time: Sun 22 Jun 2025 10:42:01 +0000 ROA not before: Sun 22 Jun 2025 10:42:01 +0000 ROA not after: Sat 20 Sep 2025 10:42:01 +0000 asID: 3257 IP address blocks: 173.232.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:60:9c:f2:03:8b:8a:2e:56:4e:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jun 22 10:42:01 2025 GMT Not After : Sep 20 10:42:01 2025 GMT Subject: CN=1e8e2159-41e0-49ef-b4f4-0e3879ad8170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:7c:a2:7c:8f:d3:88:02:c4:6a:f2:e0:5b: 03:18:92:16:6a:4e:04:33:7f:01:66:c9:12:47:9c: 2d:0a:24:3f:81:72:96:b9:39:4f:a3:cb:f1:67:b3: 2f:9e:37:8a:52:aa:30:45:a2:fc:58:ed:7e:5b:eb: 94:ae:df:9f:f8:c5:c8:ba:81:06:ed:6b:ec:db:5f: 49:f0:64:bc:77:96:29:6e:ee:b8:68:96:9a:7d:b5: a6:13:a9:45:7c:73:e9:f5:35:52:ff:87:7e:d0:01: 5a:f5:f7:18:17:62:6c:ab:e7:2f:cb:d4:da:e4:01: 9d:06:b3:38:01:69:d4:c8:78:fb:e7:64:21:22:08: 7d:7e:a3:03:d3:de:dd:cf:c8:bc:7b:d9:89:b0:65: 73:74:77:1f:a3:74:d6:96:a2:84:1f:67:f2:9e:46: 8e:13:a0:1d:55:b9:66:02:29:25:d6:09:ea:66:65: b3:48:af:8b:1c:d6:22:68:f5:96:0b:bf:60:3b:a7: fc:b1:5f:eb:3e:08:29:58:b9:fb:60:0e:01:85:c9: c1:e6:f5:9b:4d:d3:13:35:4b:e1:fb:e3:48:fa:06: 69:17:49:4b:a9:23:fa:b9:eb:29:85:d5:1d:e2:b0: dc:66:7a:c8:55:fb:72:97:92:f7:54:ed:89:ff:d6: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4F:38:38:9B:CB:5A:96:9F:6F:9A:B8:65:18:B3:71:2D:49:FB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0f:d0:02:8e:45:94:d6:05:88:f3:33:a9:2b:28:67:00:47: f4:5a:7c:cd:92:b0:fd:22:f1:87:9f:27:93:ee:13:68:34:25: f2:3a:d6:61:20:53:70:9b:30:02:f0:67:c4:c3:90:8e:c8:b7: 1b:11:1d:ab:b7:9d:0e:02:0b:af:b4:88:e3:61:5b:b3:03:11: 05:a1:5e:6c:28:82:8a:f0:61:b2:b5:e7:ff:a8:fc:34:63:c1: 5e:b7:07:7d:d2:f6:06:3d:80:ef:42:d8:5b:c2:2a:41:42:5f: 1a:f6:0b:fa:04:a6:8a:cb:d5:4f:6c:e5:0c:03:4e:2c:43:e1: e8:9a:9f:54:81:36:1c:82:7e:f1:ae:52:b9:bb:90:1b:a9:64: e3:e4:86:f5:79:0d:2e:87:f7:20:95:86:f3:ce:4c:f3:1d:b4: 91:f1:25:ce:9c:85:bc:76:cc:5b:31:84:19:59:80:4d:89:da: ae:33:ff:e6:37:af:8b:8d:31:09:c9:7e:01:67:96:e6:55:d3: ae:96:73:44:ac:9d:9e:ae:37:d6:e5:80:52:55:61:9c:45:09: 7c:ef:ed:90:c8:d3:00:8f:7a:a3:80:84:a7:83:ec:bf:70:9a: c0:a2:6f:eb:f6:6e:03:c4:25:6e:d3:c2:f2:2a:b0:67:84:1b: df:7f:d4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGYJzyA4uKLlZOfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDYyMjEwNDIwMVoXDTI1MDkyMDEwNDIwMVowLzEtMCsGA1UEAxMk MWU4ZTIxNTktNDFlMC00OWVmLWI0ZjQtMGUzODc5YWQ4MTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z58onyP04gCxGry4FsDGJIWak4EM38BZskS R5wtCiQ/gXKWuTlPo8vxZ7MvnjeKUqowRaL8WO1+W+uUrt+f+MXIuoEG7Wvs219J 8GS8d5Ypbu64aJaafbWmE6lFfHPp9TVS/4d+0AFa9fcYF2Jsq+cvy9Ta5AGdBrM4 AWnUyHj752QhIgh9fqMD097dz8i8e9mJsGVzdHcfo3TWlqKEH2fynkaOE6AdVblm Aikl1gnqZmWzSK+LHNYiaPWWC79gO6f8sV/rPggpWLn7YA4BhcnB5vWbTdMTNUvh ++NI+gZpF0lLqSP6uesphdUd4rDcZnrIVftyl5L3VO2J/9bE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNPODiby1qWn2+auGUYs3EtSftvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjY3YWVmYTctYzUyYS0z MWYzLThmM2EtODE2OTVlNDEyNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArejzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIP0AKORZTWBYjzM6krKGcAR/RafM2SsP0i8YefJ5PuE2g0JfI61mEg U3CbMALwZ8TDkI7ItxsRHau3nQ4CC6+0iONhW7MDEQWhXmwogorwYbK15/+o/DRj wV63B33S9gY9gO9C2FvCKkFCXxr2C/oEporL1U9s5QwDTixD4eian1SBNhyCfvGu Urm7kBupZOPkhvV5DS6H9yCVhvPOTPMdtJHxJc6chbx2zFsxhBlZgE2J2q4z/+Y3 r4uNMQnJfgFnluZV066Wc0SsnZ6uN9blgFJVYZxFCXzv7ZDI0wCPeqOAhKeD7L9w msCib+v2bgPEJW7TwvIqsGeEG99/1Hs= -----END CERTIFICATE-----Generated at Mon Jun 30 20:07:47 2025 by rpki-client