$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa File: c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa (raw, json) Hash identifier: t7KCwWTtYESocZxKcd+mr7auEGpnGKNrZiCZroFHE5k= Subject key identifier: BC:07:F4:06:14:86:1B:B3:09:10:68:98:1A:D7:5D:C9:13:5F:8B:F9 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B2FC19A7FBA443002422CCE80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:9a:7f:ba:44:30:02:42:2c:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=7721d0da-a581-4bc8-8f67-71aeabbd31bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:4b:9f:55:65:eb:b3:fe:b2:98:d4:05:6e: 28:4b:fa:b8:28:32:dc:41:07:8d:cf:bd:11:f0:b6: 44:54:dc:b8:4d:6b:b3:cd:c8:39:0d:ce:56:cd:43: b3:0e:77:a2:bc:54:80:24:b2:39:46:39:97:7b:54: 60:cb:4b:44:77:a7:c2:83:7d:80:41:e0:83:0e:2a: 4a:aa:23:7f:a1:f1:21:a1:71:6c:22:5f:17:bd:bc: 1b:10:c7:00:02:aa:2e:78:d5:2f:4e:56:d0:25:94: 34:8f:01:b8:a8:2f:2f:28:12:57:d1:b0:68:d5:ee: 39:36:73:74:3e:5c:50:ae:d2:03:9f:d0:2c:3b:c7: 91:d6:42:a2:9f:55:6a:5b:b4:f5:93:3f:3d:ea:ea: 0b:1a:85:09:09:b5:7a:53:ac:db:e7:5d:e4:da:01: f3:11:37:84:29:cf:18:0d:03:0b:2c:87:88:69:82: c0:ca:05:b3:94:ec:82:4b:59:b9:c7:dc:5f:3d:96: 2e:c6:4a:fc:cf:a5:ed:00:68:0f:fd:de:3a:bc:50: 5e:a2:d5:56:2d:db:fd:ad:e5:8f:68:47:84:de:a3: 13:2e:c6:9a:43:a5:5a:5c:d0:a3:e4:e9:2c:aa:57: c6:c8:84:97:08:47:c5:39:c5:9d:98:6f:cf:47:78: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:F4:06:14:86:1B:B3:09:10:68:98:1A:D7:5D:C9:13:5F:8B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/c7d5a86f-4a6a-30cf-a3ba-9cd5d9b5a014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:39:85:bc:76:41:02:1e:00:a9:4b:f7:16:29:b7:be:49:db: c4:76:22:76:b0:1e:10:99:22:9b:ad:cb:b5:0b:20:5a:1b:ae: ca:e4:66:18:ba:74:f3:ca:46:d6:55:17:98:f4:a5:9a:2d:fb: 05:35:cb:c6:36:6c:3d:ed:5d:b3:5a:85:c4:39:44:27:74:66: cf:a2:1b:dc:cb:cc:13:2a:97:3d:2f:25:92:cb:c0:d2:47:8d: f8:1b:10:74:51:28:b5:79:ec:7c:0e:8c:19:ca:e1:ff:ba:24: e6:8c:c1:43:92:d5:b1:6a:39:6a:98:3a:f3:d7:77:6b:48:1e: aa:f3:03:c4:9e:37:16:90:92:33:49:22:8e:99:51:42:61:a0: ee:d5:93:d0:79:f8:4f:6e:41:a2:fa:c9:7b:7e:fc:1c:de:a7: 41:39:a5:0c:93:29:3b:61:19:83:e2:f6:a8:75:1f:21:20:b8: e1:f9:f0:5b:87:ee:c4:17:5a:40:27:b1:8d:3e:14:6b:b2:17: 00:8c:33:d0:50:6c:4a:4a:6d:96:bc:dd:88:fb:85:c0:9d:87: 30:a4:09:20:1c:c4:ac:6e:55:63:6c:b9:55:f5:54:ae:26:8c: f6:93:ea:25:59:a1:b0:50:8f:bd:39:51:c5:46:87:14:8b:f9: 90:2a:5e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZp/ukQwAkIszoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NzcyMWQwZGEtYTU4MS00YmM4LThmNjctNzFhZWFiYmQzMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wpLn1Vl67P+spjUBW4oS/q4KDLcQQeNz70R 8LZEVNy4TWuzzcg5Dc5WzUOzDneivFSAJLI5RjmXe1Rgy0tEd6fCg32AQeCDDipK qiN/ofEhoXFsIl8XvbwbEMcAAqoueNUvTlbQJZQ0jwG4qC8vKBJX0bBo1e45NnN0 PlxQrtIDn9AsO8eR1kKin1VqW7T1kz896uoLGoUJCbV6U6zb513k2gHzETeEKc8Y DQMLLIeIaYLAygWzlOyCS1m5x9xfPZYuxkr8z6XtAGgP/d46vFBeotVWLdv9reWP aEeE3qMTLsaaQ6VaXNCj5OksqlfGyISXCEfFOcWdmG/PR3gAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwH9AYUhhuzCRBomBrXXckTX4v5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYzdkNWE4NmYtNGE2YS0z MGNmLWEzYmEtOWNkNWQ5YjVhMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ5hbx2QQIeAKlL9xYpt75J28R2InawHhCZIputy7ULIFobrsrkZhi6 dPPKRtZVF5j0pZot+wU1y8Y2bD3tXbNahcQ5RCd0Zs+iG9zLzBMqlz0vJZLLwNJH jfgbEHRRKLV57HwOjBnK4f+6JOaMwUOS1bFqOWqYOvPXd2tIHqrzA8SeNxaQkjNJ Io6ZUUJhoO7Vk9B5+E9uQaL6yXt+/Bzep0E5pQyTKTthGYPi9qh1HyEguOH58FuH 7sQXWkAnsY0+FGuyFwCMM9BQbEpKbZa83Yj7hcCdhzCkCSAcxKxuVWNsuVX1VK4m jPaT6iVZobBQj705UcVGhxSL+ZAqXqg= -----END CERTIFICATE-----Generated at Thu Sep 18 05:25:23 2025 by rpki-client