$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa File: 78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa (raw, json) Hash identifier: vgq6uc+40cQ9n8XvCk9YMwFyWidPPT+mjIVJZDXqAX0= Subject key identifier: 36:C6:74:C5:C3:70:E9:9F:B5:6B:95:D7:0F:D4:47:7E:B8:C3:4D:42 Certificate issuer: /CN=41810617-fa0e-48cc-badf-1b017add1f3e Certificate serial: 010D0C9F4328584A4AD58C2AEC60E2C2B5620040 Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 23471 IP address blocks: 67.219.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:8c:2a:ec:60:e2:c2:b5:62:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=29a64244-cf12-4195-b74d-331a2f94f9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:60:0d:7a:9d:5d:38:81:55:a1:07:f9:48: 1e:4e:db:8a:26:9d:68:79:1f:32:76:24:0e:03:76: ad:2e:4b:cc:2f:f7:d3:8c:c0:31:ba:ec:10:ab:bc: f3:d0:1a:ae:4a:f7:5c:4f:ce:7a:cc:18:1b:74:5e: 1f:65:27:e5:5a:2f:3b:f3:25:7e:6b:5d:f9:26:af: 19:23:d8:cf:5c:87:f2:9f:76:92:4a:ef:a1:e6:9c: e7:44:f0:e6:30:50:b7:cf:4d:05:e9:0c:c3:37:10: 22:50:7d:f4:b2:66:58:3f:68:ce:92:da:c0:01:91: 31:29:72:e8:5e:d8:09:c5:bd:aa:e5:4f:cd:c0:a1: 65:07:01:7b:24:a0:f0:75:73:cf:5a:8d:6c:00:f9: f1:e1:27:82:74:d5:a4:0e:f1:e5:54:84:84:f0:01: fc:17:4d:d7:ed:91:fa:d5:3c:d8:a6:11:30:dc:fd: 47:a4:58:74:38:e2:2b:76:5e:45:bd:eb:e0:d5:83: 0f:00:90:3b:98:a4:7c:64:83:98:0d:21:e5:ab:44: 3c:51:cf:bf:89:1d:69:dc:70:39:de:25:cc:6a:b4: 35:03:f8:4d:9f:df:da:d2:40:96:64:1c:a6:cc:33: d9:66:98:3f:3a:4d:e5:38:43:92:aa:15:84:37:1d: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:74:C5:C3:70:E9:9F:B5:6B:95:D7:0F:D4:47:7E:B8:C3:4D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl X509v3 Authority Key Identifier: keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer sbgp-ipAddrBlock: critical IPv4: 67.219.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cf:f6:66:c0:c1:c5:fe:1a:43:ed:b3:80:7d:01:30:54:dc: 17:e6:f8:4f:c5:fb:39:9a:82:b0:0d:ea:9b:cd:ed:85:61:5a: f1:a6:99:38:4a:7c:be:32:c3:9f:45:79:80:b1:84:9a:35:54: c9:74:ba:2d:39:17:fe:16:47:54:ca:6b:eb:db:98:47:4f:c7: c7:02:ce:8c:b3:a6:5b:90:e3:16:8b:9c:64:df:4c:1e:f1:50: 25:d8:b2:0a:f9:c9:a4:16:05:55:5f:b5:59:b4:f2:93:9c:e2: 39:af:12:6c:03:3d:92:81:b8:25:56:e5:f3:f4:e4:d0:e5:6c: 5a:8a:4c:e4:3c:5f:bc:37:74:1b:8e:ba:75:d0:ef:96:6e:2c: 3c:72:11:5f:2d:11:6b:bf:37:bf:0c:55:df:1c:df:8b:a0:72: 99:45:d1:3e:67:52:fa:0c:4a:6a:38:ae:bc:b1:ac:7b:0d:ac: 74:ee:3c:b9:7e:1b:f9:ff:7e:f6:b8:5b:1f:2d:23:a0:ae:6b: 69:48:6e:d0:63:72:c0:14:07:a9:13:93:f5:32:fd:12:46:01: 07:f2:43:76:74:99:f2:74:cf:2d:04:d3:b1:5c:b6:71:d4:e4: e2:d3:78:66:1d:fd:7d:97:04:f7:b4:b4:8b:28:07:17:e5:26: a4:e0:a2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1Ywq7GDiwrViAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4MTA2MTctZmEwZS00OGNjLWJhZGYtMWIwMTdhZGQx ZjNlMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjlhNjQyNDQtY2YxMi00MTk1LWI3NGQtMzMxYTJmOTRmOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN5gDXqdXTiBVaEH+UgeTtuKJp1oeR8ydiQO A3atLkvML/fTjMAxuuwQq7zz0BquSvdcT856zBgbdF4fZSflWi878yV+a135Jq8Z I9jPXIfyn3aSSu+h5pznRPDmMFC3z00F6QzDNxAiUH30smZYP2jOktrAAZExKXLo XtgJxb2q5U/NwKFlBwF7JKDwdXPPWo1sAPnx4SeCdNWkDvHlVISE8AH8F03X7ZH6 1TzYphEw3P1HpFh0OOIrdl5Fvevg1YMPAJA7mKR8ZIOYDSHlq0Q8Uc+/iR1p3HA5 3iXMarQ1A/hNn9/a0kCWZBymzDPZZpg/Ok3lOEOSqhWENx1QxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbGdMXDcOmftWuV1w/UR364w01CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MTgx MDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAxN2FkZDFmM2UvNzhmNGY0YjYtM2FiYi0z YjkxLThjMDItNTYzYTZkOGRiY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDE4MTA2MTctZmEwZS00OGNjLWJh ZGYtMWIwMTdhZGQxZjNlLzQxODEwNjE3LWZhMGUtNDhjYy1iYWRmLTFiMDE3YWRk MWYzZS5jcmwwHwYDVR0jBBgwFoAUeiaByQnxzDi33/6h0CBtTQq8+HowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MTgxMDYxNy1mYTBlLTQ4Y2MtYmFkZi0xYjAx N2FkZDFmM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfP9mbAwcX+GkPts4B9ATBU3Bfm+E/F+zmagrAN6pvN7YVhWvGmmThK fL4yw59FeYCxhJo1VMl0ui05F/4WR1TKa+vbmEdPx8cCzoyzpluQ4xaLnGTfTB7x UCXYsgr5yaQWBVVftVm08pOc4jmvEmwDPZKBuCVW5fP05NDlbFqKTOQ8X7w3dBuO unXQ75ZuLDxyEV8tEWu/N78MVd8c34ugcplF0T5nUvoMSmo4rryxrHsNrHTuPLl+ G/n/fva4Wx8tI6Cua2lIbtBjcsAUB6kTk/Uy/RJGAQfyQ3Z0mfJ0zy0E07FctnHU 5OLTeGYd/X2XBPe0tIsoBxflJqTgonw= -----END CERTIFICATE-----Generated at Mon Jun 30 19:09:54 2025 by rpki-client