$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/60ddc97e-6889-3168-9fb1-be0f93f8a734.roa File: 60ddc97e-6889-3168-9fb1-be0f93f8a734.roa (raw, json) Hash identifier: 7K7iS+534CaXV+g44+ykyEK4sbyC93Bdw4OdnIKaHkM= Subject key identifier: 45:30:41:83:AC:FA:09:9D:EB:A6:56:E0:A7:F3:DC:1D:89:13:1A:F3 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584A8410C55D6C38900888099A28 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/60ddc97e-6889-3168-9fb1-be0f93f8a734.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 14813 IP address blocks: 69.73.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c5:5d:6c:38:90:08:88:09:9a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4ae64e49-6718-489a-b97d-99f3d2baecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:1f:9a:36:70:ef:1f:9c:5f:45:ea:6f:71: dd:cf:bd:25:7b:f2:62:9f:92:8a:0d:66:42:1d:5c: 7b:26:1b:44:97:ec:f1:33:1d:50:38:b6:c9:ed:83: e1:75:a1:c0:99:f4:03:28:1b:e3:53:9d:6f:18:ac: 21:33:19:4f:e9:23:0d:69:1b:1b:ba:7b:2c:1f:ce: d8:b5:cf:c1:c7:a8:86:8c:45:6f:ab:24:a0:c2:c9: be:18:90:a5:c4:f8:17:16:ad:db:06:fc:ff:a5:c5: 88:40:a4:68:40:64:d8:38:d3:61:e5:12:d0:60:cb: 7a:6b:3b:70:7c:4a:a8:83:09:3f:5d:cb:19:79:9e: 52:25:2d:3b:03:43:97:24:4e:3e:5c:78:8a:66:7c: 28:c9:f6:87:61:43:f3:fa:67:90:e6:cc:1f:11:5c: 9a:c8:b0:0b:19:9f:ed:8c:5c:b5:40:aa:55:f0:36: a3:20:94:aa:bf:e2:ef:97:fb:2f:18:87:61:1c:d1: e5:78:4f:7c:59:b5:26:a0:2e:63:fe:e2:67:72:90: 59:45:e8:54:47:8e:37:5b:6c:7f:dc:fd:6b:fc:9a: d4:06:dc:a4:44:5a:b0:77:86:a8:8f:0a:3e:bf:96: f9:e6:cf:57:ce:43:83:7e:54:cd:5b:15:44:68:ca: 49:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:30:41:83:AC:FA:09:9D:EB:A6:56:E0:A7:F3:DC:1D:89:13:1A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/60ddc97e-6889-3168-9fb1-be0f93f8a734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 69.73.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7a:01:8a:f5:1f:a2:ce:64:6e:b3:51:67:6a:58:e6:54:e2: f6:69:b8:d6:62:0d:cd:f4:cb:19:4c:b1:2f:69:77:ad:b4:d6: 70:72:8b:fb:51:33:a0:7b:07:63:18:4f:3e:94:4a:5c:44:67: 96:dc:ef:3a:b3:fc:7f:5f:f5:ca:39:b7:e8:76:9b:46:12:62: 4e:bf:51:d1:ff:59:bd:4d:4f:bb:4b:ec:a4:fd:4b:8b:62:54: 86:b1:d1:1b:1e:bb:5e:df:66:4b:72:89:ea:24:f3:a5:94:44: a2:2e:09:a5:d4:05:5b:5a:87:83:1b:ba:54:5f:b3:fa:83:36: fb:0d:fa:e4:5f:40:f9:be:58:6e:e5:0f:53:8c:eb:2c:55:9f: 33:f2:77:bf:65:b9:62:06:9a:65:95:11:49:fb:58:98:60:43: 19:55:62:64:32:2d:32:b6:8f:60:5f:76:9b:7f:2f:ae:ec:3b: cd:b1:81:9f:86:f9:05:53:d0:80:19:4b:f1:5a:72:06:dc:9d: a5:0c:66:c8:e7:bd:a3:7b:a3:c8:0b:51:9c:7c:ed:26:90:a2: 81:42:15:49:24:e7:4a:40:9d:41:4f:ba:4e:b3:34:b0:ea:12: 70:a3:e5:b8:46:89:ad:3f:aa:dc:8c:ba:30:39:40:ba:7d:ba: fb:b3:bf:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMVdbDiQCIgJmigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGFlNjRlNDktNjcxOC00ODlhLWI5N2QtOTlmM2QyYmFlY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5YfmjZw7x+cX0Xqb3Hdz70le/Jin5KKDWZC HVx7JhtEl+zxMx1QOLbJ7YPhdaHAmfQDKBvjU51vGKwhMxlP6SMNaRsbunssH87Y tc/Bx6iGjEVvqySgwsm+GJClxPgXFq3bBvz/pcWIQKRoQGTYONNh5RLQYMt6aztw fEqogwk/XcsZeZ5SJS07A0OXJE4+XHiKZnwoyfaHYUPz+meQ5swfEVyayLALGZ/t jFy1QKpV8DajIJSqv+Lvl/svGIdhHNHleE98WbUmoC5j/uJncpBZRehUR443W2x/ 3P1r/JrUBtykRFqwd4aojwo+v5b55s9XzkODflTNWxVEaMpJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUwQYOs+gmd66ZW4Kfz3B2JExrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNjBkZGM5N2UtNjg4OS0z MTY4LTlmYjEtYmUwZjkzZjhhNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR6AYr1H6LOZG6zUWdqWOZU4vZpuNZiDc30yxlMsS9pd6201nByi/tR M6B7B2MYTz6USlxEZ5bc7zqz/H9f9co5t+h2m0YSYk6/UdH/Wb1NT7tL7KT9S4ti VIax0Rseu17fZktyieok86WURKIuCaXUBVtah4MbulRfs/qDNvsN+uRfQPm+WG7l D1OM6yxVnzPyd79luWIGmmWVEUn7WJhgQxlVYmQyLTK2j2Bfdpt/L67sO82xgZ+G +QVT0IAZS/FacgbcnaUMZsjnvaN7o8gLUZx87SaQooFCFUkk50pAnUFPuk6zNLDq EnCj5bhGia0/qtyMujA5QLp9uvuzv3E= -----END CERTIFICATE-----Generated at Sat Jul 26 23:51:38 2025 by rpki-client