$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa File: cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa (raw, json) Hash identifier: LsCeoacTzln+vIpI1s1ExBnivdxyTeyRiHAWcFXOmwM= Subject key identifier: 76:55:1D:9D:D6:42:FB:80:79:C9:F3:81:01:EE:B1:A7:4F:11:17:15 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584930DE68F90E1AEB2E4D9CB800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 67.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:68:f9:0e:1a:eb:2e:4d:9c:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=5df1dfbb-4682-41ad-93af-6a3a8aa0b37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f7:1c:37:f0:20:24:83:6c:93:dc:82:65:35: d5:47:87:eb:90:ef:fa:0b:dd:ea:f7:07:0d:58:2d: 46:2f:4d:ba:4e:3b:02:79:d9:d5:d8:99:20:72:f2: 2c:d3:5d:22:70:18:f6:ce:c5:57:01:df:91:af:08: 1c:4e:a8:5b:a2:62:5c:5d:76:d2:20:71:8d:08:b8: cc:8b:bd:86:8b:49:ad:56:93:97:48:08:d7:25:b7: a9:3e:bb:78:6c:5b:60:c2:c3:6b:2e:5b:1c:bc:fb: 76:fd:13:4c:56:a4:e3:75:e2:a5:84:bc:35:25:d9: c6:da:d5:46:8e:12:8a:a9:71:bd:2a:b6:b1:ac:ba: de:a8:10:39:6e:1f:39:13:76:6b:19:c8:94:b6:f8: b7:7e:c4:8d:32:e9:77:00:bb:da:ad:09:63:3e:57: c0:3d:a7:24:f2:92:20:22:34:58:d3:ad:2a:63:8c: 0a:c6:11:d6:d2:a0:b9:80:e9:8d:14:ce:bc:87:60: d5:ce:b0:21:ec:a7:56:ae:c4:69:39:bb:a6:0e:76: 62:d1:03:8c:a2:aa:b0:c0:13:38:aa:3e:59:24:27: 27:b8:40:79:46:48:11:2f:6c:74:6c:17:eb:b3:02: e1:82:90:f2:bd:b7:41:fa:0b:31:61:fa:df:a3:c9: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:55:1D:9D:D6:42:FB:80:79:C9:F3:81:01:EE:B1:A7:4F:11:17:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cf4b7dc5-2338-3607-87ee-0fa7e1c48095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f8:0c:03:bb:07:bb:c3:c2:ed:39:d9:bb:60:cb:82:51:d3: 24:be:e6:9b:15:34:4b:d6:8f:ec:12:7d:fc:c3:f2:29:c4:ca: 3a:af:80:25:68:54:e3:f1:a9:8d:a1:d8:ba:a7:69:15:af:d9: f3:cc:3c:46:7f:be:f7:da:61:ec:01:1e:c7:94:51:a1:06:d4: 0a:4b:29:82:54:fd:48:e4:66:dc:ce:03:dc:cb:18:44:59:11: 07:6e:57:78:98:0e:be:ba:4c:fe:ea:de:7d:55:48:de:30:fc: 29:cd:d1:35:cc:33:f7:d0:dd:24:b8:1f:9b:8e:3d:22:3f:66: 5d:97:8c:c0:a4:ce:2f:86:39:3c:43:3d:02:34:c6:a7:1f:64: c2:6c:23:43:aa:49:49:8d:e1:af:dc:43:27:03:50:b4:ae:2f: 6a:27:d7:9b:7c:f7:13:20:47:c9:a3:6a:dd:bd:8b:5c:a2:87: 29:f6:dc:a4:a6:8e:97:18:b5:7f:fb:aa:31:75:a5:9d:98:5a: 3c:97:ac:06:7a:7a:b4:c6:dd:2c:c0:26:35:b1:8b:8f:2f:75: 01:8e:98:be:e2:5c:d5:8f:2a:5b:98:8c:4f:49:89:aa:e9:aa: 87:38:19:f2:11:cf:ed:f9:e1:07:12:18:bb:b1:58:65:b7:9d: 21:6c:f2:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mj5DhrrLk2cuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NWRmMWRmYmItNDY4Mi00MWFkLTkzYWYtNmEzYThhYTBiMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPccN/AgJINsk9yCZTXVR4frkO/6C93q9wcN WC1GL026TjsCednV2JkgcvIs010icBj2zsVXAd+RrwgcTqhbomJcXXbSIHGNCLjM i72Gi0mtVpOXSAjXJbepPrt4bFtgwsNrLlscvPt2/RNMVqTjdeKlhLw1JdnG2tVG jhKKqXG9KraxrLreqBA5bh85E3ZrGciUtvi3fsSNMul3ALvarQljPlfAPack8pIg IjRY060qY4wKxhHW0qC5gOmNFM68h2DVzrAh7KdWrsRpObumDnZi0QOMoqqwwBM4 qj5ZJCcnuEB5RkgRL2x0bBfrswLhgpDyvbdB+gsxYfrfo8mR4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZVHZ3WQvuAecnzgQHusadPERcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2Y0YjdkYzUtMjMzOC0z NjA3LTg3ZWUtMGZhN2UxYzQ4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMr4DAO7B7vDwu052btgy4JR0yS+5psVNEvWj+wSffzD8inEyjqvgCVo VOPxqY2h2LqnaRWv2fPMPEZ/vvfaYewBHseUUaEG1ApLKYJU/UjkZtzOA9zLGERZ EQduV3iYDr66TP7q3n1VSN4w/CnN0TXMM/fQ3SS4H5uOPSI/Zl2XjMCkzi+GOTxD PQI0xqcfZMJsI0OqSUmN4a/cQycDULSuL2on15t89xMgR8mjat29i1yihyn23KSm jpcYtX/7qjF1pZ2YWjyXrAZ6erTG3SzAJjWxi48vdQGOmL7iXNWPKluYjE9Jiarp qoc4GfIRz+354QcSGLuxWGW3nSFs8kA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:45:32 2025 by rpki-client