$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa File: b7677b23-569f-3269-882c-0cdb2f1c8cad.roa (raw, json) Hash identifier: yMyJ/1b7L7TzMulaTgspqh0TreymrvjbdepqAHIXTZs= Subject key identifier: 39:3D:D5:59:87:F0:9E:EB:A4:EB:32:19:16:C5:D8:6E:88:68:7F:09 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584A374AC3A38D352663F5CFCC60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 31898 IP address blocks: 68.64.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c3:a3:8d:35:26:63:f5:cf:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=455604ae-ad07-45a1-a493-07ea1c9b6456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:86:19:b2:fc:56:81:1b:8c:23:68:53:22: 7f:ad:16:d7:ce:17:eb:50:ff:cf:af:f9:1b:30:cd: cf:57:b5:7c:30:08:8e:0a:08:ad:f3:73:41:b6:a5: bd:aa:ad:e8:6f:e2:8d:a8:47:72:c2:5d:d1:54:47: bd:d0:c6:bb:91:cd:68:e4:16:46:5e:43:3d:72:2a: ab:86:03:ab:19:3f:94:63:ee:20:e5:bf:d5:7b:df: 48:84:c9:04:b9:cb:ea:18:06:e1:9d:a3:4e:6a:3b: 32:14:6c:e0:ea:35:68:12:0a:b1:b6:68:0b:f2:89: e0:6d:f0:77:a7:7e:a5:88:07:fd:6c:3e:33:c4:34: 5a:bb:00:12:63:1d:b3:b5:6c:90:4e:db:6e:fa:4d: a5:48:de:3a:16:09:c1:fd:7e:2c:41:e3:b0:1a:d5: 87:56:d8:5a:3f:9d:63:b3:39:c6:48:20:80:54:2a: 93:6a:96:0f:be:4a:a3:c5:02:15:40:e5:24:a8:95: b6:f7:28:6e:9c:e1:d2:4f:e2:79:0d:3f:cb:06:eb: 13:26:b2:f7:19:06:39:15:d3:89:8a:ef:c0:07:93: b8:ec:e0:a7:52:b8:02:d0:25:f5:cd:02:03:fb:c4: 09:85:74:6f:bb:b5:df:d4:0e:1e:e3:e2:a5:97:77: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3D:D5:59:87:F0:9E:EB:A4:EB:32:19:16:C5:D8:6E:88:68:7F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e7:6b:44:59:b0:e9:ae:cd:31:5b:60:c2:33:24:9b:3c:10: a2:1b:75:84:01:13:76:68:08:38:4e:96:ee:68:89:8d:87:60: a7:10:6b:3d:8c:b8:32:c7:94:64:d5:e4:fc:ef:ce:37:21:09: 68:75:90:1f:a5:c1:69:a4:72:3e:bf:52:35:fa:19:4d:00:0c: 9e:96:ee:aa:a8:b6:e3:be:09:f3:90:e4:dc:c0:20:f7:50:6e: e5:5f:78:45:eb:a5:37:f2:f5:39:c9:b2:a3:ad:68:09:90:9f: f2:2f:d4:40:11:5f:91:af:42:60:48:8e:c6:0a:9d:25:6f:a6: e7:6e:b4:f2:ca:7e:28:ac:6b:d0:de:f6:57:96:4a:27:b7:6b: 4a:13:77:d1:1b:1e:8d:70:2d:fc:85:6b:4f:0d:47:18:88:a7: cc:73:e9:d2:99:8f:81:63:93:b5:2e:e4:b3:ca:21:f2:10:31: 38:63:03:69:e5:d7:4e:36:55:31:d7:57:46:79:e8:fe:07:aa: af:e9:55:bc:66:bb:48:2d:60:20:88:e3:d3:77:82:dd:0a:e5: e4:74:b0:6d:d5:19:04:c5:e0:b3:f6:9f:99:c8:7e:bd:f5:d4: bf:a2:e1:c4:71:7f:10:5c:3e:11:91:05:4a:d7:12:ab:54:1d: 12:7c:9f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsOjjTUmY/XPzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NDU1NjA0YWUtYWQwNy00NWExLWE0OTMtMDdlYTFjOWI2NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBaGGbL8VoEbjCNoUyJ/rRbXzhfrUP/Pr/kb MM3PV7V8MAiOCgit83NBtqW9qq3ob+KNqEdywl3RVEe90Ma7kc1o5BZGXkM9ciqr hgOrGT+UY+4g5b/Ve99IhMkEucvqGAbhnaNOajsyFGzg6jVoEgqxtmgL8ongbfB3 p36liAf9bD4zxDRauwASYx2ztWyQTttu+k2lSN46FgnB/X4sQeOwGtWHVthaP51j sznGSCCAVCqTapYPvkqjxQIVQOUkqJW29yhunOHST+J5DT/LBusTJrL3GQY5FdOJ iu/AB5O47OCnUrgC0CX1zQID+8QJhXRvu7Xf1A4e4+Kll3dTSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk91VmH8J7rpOsyGRbF2G6IaH8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjc2NzdiMjMtNTY5Zi0z MjY5LTg4MmMtMGNkYjJmMWM4Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/na0RZsOmuzTFbYMIzJJs8EKIbdYQBE3ZoCDhOlu5oiY2HYKcQaz2M uDLHlGTV5PzvzjchCWh1kB+lwWmkcj6/UjX6GU0ADJ6W7qqotuO+CfOQ5NzAIPdQ buVfeEXrpTfy9TnJsqOtaAmQn/Iv1EARX5GvQmBIjsYKnSVvpudutPLKfiisa9De 9leWSie3a0oTd9EbHo1wLfyFa08NRxiIp8xz6dKZj4Fjk7Uu5LPKIfIQMThjA2nl 1042VTHXV0Z56P4Hqq/pVbxmu0gtYCCI49N3gt0K5eR0sG3VGQTF4LP2n5nIfr31 1L+i4cRxfxBcPhGRBUrXEqtUHRJ8n3s= -----END CERTIFICATE-----Generated at Sun Jun 29 13:56:24 2025 by rpki-client