$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa File: af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json) Hash identifier: mhRgHSWcYKjlpf43Rb0rnqWB5hiUW0VUfV9LjlFp7XA= Subject key identifier: 36:70:DC:86:42:69:EA:2C:5C:BE:6B:33:AB:39:C1:A1:E3:E4:C5:A0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A3E45995DA5518EA0FBE54080 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 31898 IP address blocks: 67.217.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:99:5d:a5:51:8e:a0:fb:e5:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=7a9ed133-fbd4-4b35-939f-27b8be09e5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8a:5d:00:6e:14:a6:4c:c4:6a:26:6d:1f:89: d6:35:71:91:06:d2:ed:fd:70:4e:e1:b1:52:2e:cb: bf:79:eb:d1:f7:77:d1:57:86:8b:c2:c3:89:2b:53: 9c:34:63:cd:b1:00:56:67:8b:5e:3e:4c:42:80:3e: 54:30:fc:c0:4b:37:e1:77:f6:44:94:4c:88:8c:e4: 6c:c3:b9:0c:f0:61:f4:72:6f:da:6b:a0:ee:de:d1: 95:cd:26:01:9f:88:ac:7d:0a:ca:2b:92:1b:f1:cb: 85:a6:ea:d0:8a:64:b3:32:81:ad:9f:de:2b:98:7f: 01:ab:8f:14:eb:37:91:e2:fc:fb:3e:75:fa:ba:e7: 18:80:55:76:25:ef:d7:e8:df:9b:0b:61:f4:ed:79: ef:fc:ea:a9:1e:84:be:ee:9a:96:fd:f6:ce:f5:f9: 60:f5:dc:98:cd:a1:b7:ce:71:29:36:b1:aa:d7:57: d1:7a:09:82:ae:3b:71:68:82:a7:dc:0c:dc:05:c5: 7f:a8:39:72:8f:2a:e6:1e:46:ae:fa:cd:5b:5f:e8: 67:01:85:4d:ff:be:e1:22:d8:63:5f:05:7b:50:75: 70:a9:cf:0a:4c:c9:67:1d:1f:4f:58:45:6c:6b:7f: 9b:ed:b7:d1:73:0b:48:8d:6e:06:f3:89:8e:0a:a2: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:70:DC:86:42:69:EA:2C:5C:BE:6B:33:AB:39:C1:A1:E3:E4:C5:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:6a:4c:ed:5d:f7:47:2f:db:a0:ac:ab:2c:c3:ad:0b:d5:57: 13:19:e1:a4:95:0c:03:b1:8e:7f:f1:24:3c:ac:51:29:72:18: 34:91:6d:7d:d1:91:7e:e0:f0:b7:c7:29:b1:76:7d:02:79:ec: 05:02:18:37:02:ee:94:13:44:97:ca:d6:80:c1:f7:d7:7f:42: 25:15:04:71:9b:6c:ab:ee:db:76:b7:a9:b4:e0:46:bb:a4:5f: 20:94:28:fa:52:11:4e:ee:8e:7b:8f:3e:eb:b8:8a:3b:6d:c0: 16:03:c4:d7:e4:2c:78:00:3a:5c:66:ea:c5:a1:12:75:39:1a: 14:aa:52:c2:2f:58:6e:0c:4c:d5:60:35:11:0b:a1:4a:32:ec: 3f:34:ac:6c:3b:e1:7f:c4:53:4c:61:59:ed:29:ff:2b:b1:58: 1a:94:e7:ed:c8:af:a4:86:d2:70:bd:6c:e6:d6:94:74:15:1f: cf:fb:00:64:40:4e:b5:51:19:0c:78:e3:86:39:f1:42:db:94: 7b:7d:39:b4:64:47:c7:64:0b:a5:6b:61:92:38:4a:37:62:05: 7a:ae:e9:63:ef:20:de:f1:21:a3:9f:0b:5f:07:f1:cb:d5:47: 38:41:02:11:ac:5d:78:f8:8c:84:03:40:a3:35:cf:4d:8f:cc: 64:2a:b9:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZldpVGOoPvlQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk N2E5ZWQxMzMtZmJkNC00YjM1LTkzOWYtMjdiOGJlMDllNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjopdAG4UpkzEaiZtH4nWNXGRBtLt/XBO4bFS Lsu/eevR93fRV4aLwsOJK1OcNGPNsQBWZ4tePkxCgD5UMPzASzfhd/ZElEyIjORs w7kM8GH0cm/aa6Du3tGVzSYBn4isfQrKK5Ib8cuFpurQimSzMoGtn94rmH8Bq48U 6zeR4vz7PnX6uucYgFV2Je/X6N+bC2H07Xnv/OqpHoS+7pqW/fbO9flg9dyYzaG3 znEpNrGq11fRegmCrjtxaIKn3AzcBcV/qDlyjyrmHkau+s1bX+hnAYVN/77hIthj XwV7UHVwqc8KTMlnHR9PWEVsa3+b7bfRcwtIjW4G84mOCqKERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZw3IZCaeosXL5rM6s5waHj5MWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWY2ZGExZGYtNjMxMC0z NzVkLWJhN2YtYTJmNjA1MTJmNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9ldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtqTO1d90cv26CsqyzDrQvVVxMZ4aSVDAOxjn/xJDysUSlyGDSRbX3R kX7g8LfHKbF2fQJ57AUCGDcC7pQTRJfK1oDB99d/QiUVBHGbbKvu23a3qbTgRruk XyCUKPpSEU7ujnuPPuu4ijttwBYDxNfkLHgAOlxm6sWhEnU5GhSqUsIvWG4MTNVg NRELoUoy7D80rGw74X/EU0xhWe0p/yuxWBqU5+3Ir6SG0nC9bObWlHQVH8/7AGRA TrVRGQx444Y58ULblHt9ObRkR8dkC6VrYZI4SjdiBXqu6WPvIN7xIaOfC18H8cvV RzhBAhGsXXj4jIQDQKM1z02PzGQquc4= -----END CERTIFICATE-----Generated at Tue Jul 1 03:48:08 2025 by rpki-client