$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa File: 5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa (raw, json) Hash identifier: Nf1jfRJwfOffX72kGVGz1H4XF0qjfPazVEx8Tkus5Ag= Subject key identifier: 11:B6:7A:C5:DF:3B:70:BD:17:C8:EC:21:37:1F:A2:56:1C:69:F6:C0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584930DE6E9F5F2D067DB3753520 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6e:9f:5f:2d:06:7d:b3:75:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=7c9b65c1-96fa-41e8-bca2-f4ea428d22ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:ed:a2:b2:29:3c:5b:e2:f4:2c:3f:58:ef: 3e:ad:0e:ed:10:3e:9a:7b:4c:50:5e:f1:8c:d3:1b: 27:fe:ee:af:a1:16:17:94:ff:b1:99:87:58:f2:57: 69:10:b3:23:fa:c4:3d:d1:4e:c4:79:9e:06:1e:08: fb:96:84:04:7f:f5:57:3a:72:ae:28:2c:f1:af:bc: 3a:5e:97:6c:cb:4c:53:a2:fb:49:3a:1e:9e:83:98: 74:ea:d2:33:bc:8e:a8:23:ee:d1:e9:eb:f9:69:2b: 14:df:0a:ed:c2:91:e3:0f:f3:0b:2d:cd:d5:47:6b: a3:24:7e:c5:5c:92:67:d8:0b:62:27:a4:19:34:ed: 22:45:93:6f:f1:2d:d3:32:15:e0:41:9a:ad:7e:ae: 3b:94:09:ea:5f:e3:26:16:f8:70:7a:ec:da:c2:3f: 17:df:6c:66:f7:5e:48:13:4e:36:34:c6:fd:6b:24: 45:77:f4:18:e8:8b:95:39:72:9f:a4:9a:71:05:48: 57:78:7f:84:8d:e3:71:bf:3b:41:60:cf:97:5d:5e: c4:91:47:78:fe:81:93:f6:92:a6:49:8f:1e:e3:63: 50:3b:58:de:6a:ef:05:13:12:76:a5:77:d5:c4:94: 7f:b0:09:f9:4f:fa:87:8b:1d:ec:91:3d:5f:c5:fb: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B6:7A:C5:DF:3B:70:BD:17:C8:EC:21:37:1F:A2:56:1C:69:F6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5b3f1299-e2c5-3ac6-997a-1950be774c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:29:4a:b9:69:d3:3f:cd:34:31:cd:ec:cc:eb:80:ab:5f:5f: 35:0a:55:b7:d7:77:f4:a4:29:01:a1:0c:d0:59:e6:8c:81:55: 34:97:b6:b4:d1:5a:1d:13:3c:3f:f3:22:74:70:05:82:0d:9e: fb:89:9b:08:fe:1f:b8:db:6c:db:b1:4c:1b:af:14:5e:f4:78: 1f:2a:f2:0f:49:cc:a7:fc:04:ee:91:2e:3c:86:a2:bd:8c:15: 85:3c:d5:a0:58:6b:76:ae:ab:a5:79:8b:93:44:82:40:a3:49: ea:6d:85:d9:2e:44:7d:79:14:3c:d2:6c:3d:2a:23:c9:c6:5b: 9a:c4:0e:0b:0f:c2:cb:97:5b:ea:9e:49:30:83:36:f9:ae:8d: 4f:e3:53:be:64:a1:f6:9d:b7:39:a6:a9:fb:c7:c0:b9:0d:ed: 07:43:43:9e:bf:51:48:1b:e6:66:9f:b1:a3:d4:58:a9:c5:0a: ec:07:ef:86:9f:c1:a9:c5:84:50:56:dd:15:a4:9d:d8:58:ce: ed:ae:d1:fc:d6:99:d8:3a:45:d2:21:db:87:ff:b1:59:79:7f: ff:74:d6:66:35:15:82:16:86:0d:01:3d:bc:87:e4:81:d3:16: aa:e7:78:b7:85:36:e4:63:6b:46:37:b9:c4:d4:4f:78:ff:cc: 8e:2e:0f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m6fXy0GfbN1NSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk N2M5YjY1YzEtOTZmYS00MWU4LWJjYTItZjRlYTQyOGQyMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM/torIpPFvi9Cw/WO8+rQ7tED6ae0xQXvGM 0xsn/u6voRYXlP+xmYdY8ldpELMj+sQ90U7EeZ4GHgj7loQEf/VXOnKuKCzxr7w6 Xpdsy0xTovtJOh6eg5h06tIzvI6oI+7R6ev5aSsU3wrtwpHjD/MLLc3VR2ujJH7F XJJn2AtiJ6QZNO0iRZNv8S3TMhXgQZqtfq47lAnqX+MmFvhweuzawj8X32xm915I E042NMb9ayRFd/QY6IuVOXKfpJpxBUhXeH+EjeNxvztBYM+XXV7EkUd4/oGT9pKm SY8e42NQO1jeau8FExJ2pXfVxJR/sAn5T/qHix3skT1fxfvsyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG2esXfO3C9F8jsITcfolYcafbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNWIzZjEyOTktZTJjNS0z YWM2LTk5N2EtMTk1MGJlNzc0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcpSrlp0z/NNDHN7MzrgKtfXzUKVbfXd/SkKQGhDNBZ5oyBVTSXtrTR Wh0TPD/zInRwBYINnvuJmwj+H7jbbNuxTBuvFF70eB8q8g9JzKf8BO6RLjyGor2M FYU81aBYa3auq6V5i5NEgkCjSepthdkuRH15FDzSbD0qI8nGW5rEDgsPwsuXW+qe STCDNvmujU/jU75kofadtzmmqfvHwLkN7QdDQ56/UUgb5mafsaPUWKnFCuwH74af wanFhFBW3RWkndhYzu2u0fzWmdg6RdIh24f/sVl5f/901mY1FYIWhg0BPbyH5IHT FqrneLeFNuRja0Y3ucTUT3j/zI4uD1Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:42 2025 by rpki-client