$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa File: af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json) Hash identifier: 7RSXzkJp3C0lkzb5QiHjcNNZODaDIHDbe5h4YxZ3OKY= Subject key identifier: EE:34:64:A7:DC:DB:4E:1C:D1:E6:0A:F1:DD:E1:62:7A:EF:7E:68:D4 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858495EEED9C9372845E09EE956E0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 31898 IP address blocks: 67.217.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:d9:c9:37:28:45:e0:9e:e9:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=3f5799e8-9025-46e9-b4f6-569880a1f3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:3d:14:45:c5:b7:4d:a3:ea:8b:97:4c:6d: 48:86:a7:6b:bf:92:ca:be:6b:d0:f4:24:cc:60:4c: 8c:3c:86:0e:c8:29:5d:a3:57:89:52:47:d5:1b:a6: 1c:07:2f:ca:a9:cd:cb:66:83:bf:4c:11:8c:c9:f4: 9b:5d:80:e1:db:aa:75:11:d8:12:96:2c:95:1c:2a: 59:ef:5a:4d:14:d7:b4:b9:9c:8d:42:0c:c0:d0:b8: 41:d9:85:2f:d0:21:ca:c3:a8:12:6c:14:ec:36:b7: 11:fa:a8:e1:b8:21:f8:03:11:08:e9:80:05:b5:4b: 6a:13:33:a2:31:5a:1d:e1:78:a9:33:0b:4b:25:e3: 73:d5:5a:a3:ae:aa:ab:83:37:3d:9b:bb:2f:6e:0f: 3c:71:81:7e:ea:10:16:61:42:49:51:96:1d:17:19: 2e:e1:37:26:27:94:f1:36:b0:a7:a5:2d:5f:c7:fe: dd:9d:84:23:47:36:8b:24:f1:7d:72:51:20:e0:30: 45:17:16:d3:11:61:d6:94:8c:24:15:54:dc:d0:cf: f9:c8:26:7b:38:91:b6:98:b5:b8:06:2a:7f:40:dd: 0d:20:93:f7:1b:53:2d:27:2f:ac:68:97:25:28:bd: f8:e2:91:3f:1a:52:a6:27:62:14:ae:a6:73:47:5e: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:64:A7:DC:DB:4E:1C:D1:E6:0A:F1:DD:E1:62:7A:EF:7E:68:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:b9:b2:92:77:ac:ed:ce:fe:98:bb:c6:43:83:0f:45:15: 6a:6f:5a:b6:61:26:c7:3b:47:4d:83:bc:d5:50:14:4e:bd:ee: 8c:5e:bc:80:32:60:10:17:28:40:c8:b3:97:3e:06:aa:b9:65: 42:d3:f3:1d:23:68:d2:97:1d:0c:ab:2c:2a:f6:b3:ca:79:e5: eb:fb:ee:cd:c3:1c:ab:ba:ae:e4:4e:ec:9e:77:90:04:33:ef: a1:77:50:65:f4:04:79:86:18:7f:78:55:e3:0a:dd:8b:98:83: ae:8e:62:12:e6:70:8a:bd:87:e3:58:0e:93:db:3b:10:4d:2e: be:4e:23:50:ab:87:bd:9f:e8:1f:d1:81:ca:29:84:7a:87:63: 22:c5:15:6b:7f:f0:eb:0c:6a:58:3e:01:c8:95:7a:78:12:14: 1d:ee:7d:74:97:ec:a7:16:95:56:f1:af:01:3f:fe:49:4a:6d: ba:81:cb:71:f9:1e:36:18:0a:66:d6:ed:67:79:b9:5d:8b:57: 7d:3a:86:92:fd:26:fe:19:c9:49:0a:4a:44:81:9f:98:f9:cb: 7f:53:db:bf:43:bf:73:5a:38:21:57:68:ad:74:e4:66:a7:33: 6b:10:7b:34:85:e1:4c:0b:c3:3b:02:2f:78:f4:58:85:46:54: b5:ba:2e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tnJNyhF4J7pVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk M2Y1Nzk5ZTgtOTAyNS00NmU5LWI0ZjYtNTY5ODgwYTFmM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbw9FEXFt02j6ouXTG1Ihqdrv5LKvmvQ9CTM YEyMPIYOyCldo1eJUkfVG6YcBy/Kqc3LZoO/TBGMyfSbXYDh26p1EdgSliyVHCpZ 71pNFNe0uZyNQgzA0LhB2YUv0CHKw6gSbBTsNrcR+qjhuCH4AxEI6YAFtUtqEzOi MVod4XipMwtLJeNz1Vqjrqqrgzc9m7svbg88cYF+6hAWYUJJUZYdFxku4TcmJ5Tx NrCnpS1fx/7dnYQjRzaLJPF9clEg4DBFFxbTEWHWlIwkFVTc0M/5yCZ7OJG2mLW4 Bip/QN0NIJP3G1MtJy+saJclKL344pE/GlKmJ2IUrqZzR16EjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO40ZKfc204c0eYK8d3hYnrvfmjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWY2ZGExZGYtNjMxMC0z NzVkLWJhN2YtYTJmNjA1MTJmNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9ldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrMubKSd6ztzv6Yu8ZDgw9FFWpvWrZhJsc7R02DvNVQFE697oxevIAy YBAXKEDIs5c+Bqq5ZULT8x0jaNKXHQyrLCr2s8p55ev77s3DHKu6ruRO7J53kAQz 76F3UGX0BHmGGH94VeMK3YuYg66OYhLmcIq9h+NYDpPbOxBNLr5OI1Crh72f6B/R gcophHqHYyLFFWt/8OsMalg+AciVengSFB3ufXSX7KcWlVbxrwE//klKbbqBy3H5 HjYYCmbW7Wd5uV2LV306hpL9Jv4ZyUkKSkSBn5j5y39T279Dv3NaOCFXaK105Gan M2sQezSF4UwLwzsCL3j0WIVGVLW6LuQ= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:25 2025 by rpki-client