$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa File: cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa (raw, json) Hash identifier: nFjfs/uXr4Q90/aVn3hpJaGfAvu+6Emxn1PTn3C5rOQ= Subject key identifier: AA:C5:B0:F9:94:E6:64:F4:F2:15:76:D6:F4:B8:49:67:52:FF:93:DD Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584AF0F1321993C085B33F711300 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:32:19:93:c0:85:b3:3f:71:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=09ec1c59-598d-49ad-9811-c4ac94279c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:97:7f:f6:ff:42:1b:8a:01:dc:3f:14:ed: 18:fb:c4:19:00:0a:03:78:a4:72:40:c8:f1:c1:56: 95:ec:b2:1c:26:49:b9:f8:9e:ba:c9:f7:3a:75:14: a1:41:34:4e:a3:6e:bc:87:f8:fb:07:66:e0:8a:45: 75:13:1f:b8:ac:24:a3:cc:d4:43:75:94:cb:0b:f3: da:3a:ad:03:82:ae:b5:69:40:39:00:87:1d:e9:47: 85:0d:64:d6:4e:fc:91:a7:7a:9e:f9:01:be:f8:42: 23:f7:12:28:d2:01:7d:eb:a3:11:12:96:b2:9a:5f: 0e:bd:b1:30:99:fd:dc:d0:18:90:bb:0d:e1:a7:29: 26:5d:88:b2:1d:d4:51:d5:15:0e:2f:3b:e6:4e:98: 9d:4a:c9:e3:b9:f4:88:65:cf:aa:10:16:68:c7:f9: a8:d2:fd:6a:33:29:bc:16:89:73:48:5c:ac:b3:a7: a1:9e:73:32:fd:d2:88:60:8a:a4:2c:36:7f:8d:83: d4:3f:1e:4a:43:72:80:88:ad:50:e8:2a:93:12:4c: e7:2d:0b:3a:b9:91:c6:7a:cb:1f:0a:ca:3e:b2:45: 90:88:5e:6c:ce:e6:04:7e:20:2a:4e:cb:28:de:9b: 17:81:5e:08:f9:81:07:78:26:2d:f1:20:65:b2:82: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C5:B0:F9:94:E6:64:F4:F2:15:76:D6:F4:B8:49:67:52:FF:93:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4c:3c:5c:bb:b0:ce:10:3e:24:75:dc:91:24:fa:be:1a:28: 02:2c:e2:30:6b:5e:da:66:43:14:54:b1:3d:06:25:1f:cb:2a: bd:bb:b9:25:d9:22:3d:93:2d:55:fc:7c:9e:f7:8f:84:95:20: b7:3d:59:09:8c:29:a0:e6:38:1a:10:50:59:3a:50:7c:da:15: 28:22:81:74:77:69:66:fb:c4:a9:e7:86:44:91:6f:1a:73:66: 1b:c9:74:1e:1a:08:dd:c9:12:ae:9f:75:7d:02:89:0f:28:21: c7:66:b2:03:ab:0a:be:9d:e8:47:87:41:1e:5f:e3:ce:c3:d4: 5a:6b:2b:8c:cd:83:4c:95:ff:86:28:e5:b2:bf:ac:7a:4b:32: 2d:cb:ac:e3:80:c3:50:57:5a:83:6a:07:77:55:5e:f8:1c:04: 95:9c:db:dd:3b:26:63:ff:a2:d7:f4:9c:8d:09:16:52:7a:8f: 90:a3:3c:27:a5:e0:b4:16:93:c0:ed:92:8b:a9:59:18:74:fc: 3d:2f:42:11:b1:2f:04:cd:b5:f7:2b:fa:c1:00:6c:e4:ae:65: 79:5b:bf:26:be:a5:e2:e6:b1:84:d6:e1:80:dd:3a:1e:66:6a: b2:00:d1:ac:18:81:b7:e2:f4:59:3a:10:71:e9:12:39:0a:70: ca:da:1c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TIZk8CFsz9xEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDllYzFjNTktNTk4ZC00OWFkLTk4MTEtYzRhYzk0Mjc5YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPeXf/b/QhuKAdw/FO0Y+8QZAAoDeKRyQMjx wVaV7LIcJkm5+J66yfc6dRShQTROo268h/j7B2bgikV1Ex+4rCSjzNRDdZTLC/Pa Oq0Dgq61aUA5AIcd6UeFDWTWTvyRp3qe+QG++EIj9xIo0gF966MREpayml8OvbEw mf3c0BiQuw3hpykmXYiyHdRR1RUOLzvmTpidSsnjufSIZc+qEBZox/mo0v1qMym8 FolzSFyss6ehnnMy/dKIYIqkLDZ/jYPUPx5KQ3KAiK1Q6CqTEkznLQs6uZHGessf Cso+skWQiF5szuYEfiAqTsso3psXgV4I+YEHeCYt8SBlsoIEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrFsPmU5mT08hV21vS4SWdS/5PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2Y0YjdkYzUtMjMzOC0z NjA3LTg3ZWUtMGZhN2UxYzQ4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJMPFy7sM4QPiR13JEk+r4aKAIs4jBrXtpmQxRUsT0GJR/LKr27uSXZ Ij2TLVX8fJ73j4SVILc9WQmMKaDmOBoQUFk6UHzaFSgigXR3aWb7xKnnhkSRbxpz ZhvJdB4aCN3JEq6fdX0CiQ8oIcdmsgOrCr6d6EeHQR5f487D1FprK4zNg0yV/4Yo 5bK/rHpLMi3LrOOAw1BXWoNqB3dVXvgcBJWc2907JmP/otf0nI0JFlJ6j5CjPCel 4LQWk8DtkoupWRh0/D0vQhGxLwTNtfcr+sEAbOSuZXlbvya+peLmsYTW4YDdOh5m arIA0awYgbfi9Fk6EHHpEjkKcMraHAc= -----END CERTIFICATE-----Generated at Sat Aug 23 08:22:11 2025 by rpki-client