$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ed35b48e-341f-3ef3-bb78-5c393be9a1a1.roa File: ed35b48e-341f-3ef3-bb78-5c393be9a1a1.roa (raw, json) Hash identifier: xT0+prpYZOUBvTHjRiCYx/AhSrMNvTXUP4eZODk3BVo= Subject key identifier: 0C:2B:C3:BC:B8:53:7E:BF:96:57:7A:58:D1:2E:BA:10:CC:E6:76:94 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584940394ADE2A62B86F97F796C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ed35b48e-341f-3ef3-bb78-5c393be9a1a1.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 31898 IP address blocks: 67.217.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4a:de:2a:62:b8:6f:97:f7:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=647bfa39-6307-468f-aaf1-340e2114ae7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:ff:b8:e4:25:3e:af:74:f0:68:37:81:f4: 52:2e:13:78:80:34:5e:58:d1:7f:ae:36:48:85:3b: 56:a6:e1:46:79:35:d6:40:a8:80:8a:69:f2:c5:94: b2:fb:e2:45:ef:d1:07:b3:ba:56:dc:6f:d6:08:c4: 47:6f:27:0d:de:de:24:b3:e7:7b:30:d2:11:14:60: d8:58:9f:4c:1e:a3:71:98:12:ef:fb:7d:ad:92:08: f0:55:f5:1a:70:61:14:05:4a:3b:17:88:a7:c4:60: b5:96:3c:dd:2d:30:1a:11:c5:b0:ef:9b:b9:91:d0: a3:81:99:cf:03:6f:27:c8:1c:3c:12:2a:5d:97:bc: ee:70:4b:46:87:ad:83:c6:88:61:d4:49:ee:7c:21: e6:f5:aa:65:fc:20:c0:15:76:32:dd:20:70:8b:39: 57:94:03:94:ea:64:ab:e2:43:69:49:45:1b:a2:f6: ec:1b:38:19:6e:fa:8a:f8:36:1c:dd:bc:f0:84:46: cc:d8:11:e4:35:11:0a:68:cf:1b:42:a1:26:2c:85: ab:b4:46:34:9e:f6:cd:1c:f7:29:c5:3e:28:3e:83: 03:1e:a4:07:93:6e:da:6a:ca:d3:47:95:3f:86:cc: c6:16:20:ee:94:25:eb:1e:48:de:24:e1:de:df:55: cb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2B:C3:BC:B8:53:7E:BF:96:57:7A:58:D1:2E:BA:10:CC:E6:76:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ed35b48e-341f-3ef3-bb78-5c393be9a1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8b:4b:61:d6:07:1f:2e:b1:bc:6e:54:b6:93:7f:7a:1f:00: 85:c9:13:ab:3a:18:f4:6f:eb:8e:02:75:8a:41:ca:5a:1d:c2: f0:b4:b9:84:d7:f4:92:01:4b:89:01:1f:4c:a5:1e:7a:58:27: 3e:ff:ff:41:ad:e7:c8:d8:95:99:5a:22:4f:6e:49:f2:8f:ac: ba:f6:5f:38:54:bf:8b:5a:ab:e1:2c:78:c9:32:09:18:90:92: 52:1a:f3:c1:e8:f5:46:20:23:05:f3:36:87:0b:07:2e:a8:45: 3a:0b:4e:de:3f:c8:57:66:32:47:e4:b6:73:43:62:87:dc:fb: 37:83:16:7c:5e:bf:9b:69:6e:52:32:3f:cc:77:8e:10:cc:1d: fd:4c:4e:5e:5d:c4:b6:cc:80:59:41:e9:a6:73:10:57:c9:97: a2:78:f1:f9:d6:8d:7e:d3:1d:71:6c:a3:45:84:fb:88:2a:45: ed:f1:2b:4f:68:41:62:2d:de:4e:7f:71:4c:6d:72:29:5f:7b: c7:0b:52:97:de:93:df:4d:72:0a:d9:61:7f:6e:5c:22:41:5b: 09:b1:bc:98:b4:18:4a:82:24:93:75:bc:aa:14:41:f9:cc:d3: b0:75:ce:77:bd:3c:ee:b2:e2:a0:cd:33:18:97:9e:7f:ab:df: eb:b2:90:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUreKmK4b5f3lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NjQ3YmZhMzktNjMwNy00NjhmLWFhZjEtMzQwZTIxMTRhZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn3/uOQlPq908Gg3gfRSLhN4gDReWNF/rjZI hTtWpuFGeTXWQKiAimnyxZSy++JF79EHs7pW3G/WCMRHbycN3t4ks+d7MNIRFGDY WJ9MHqNxmBLv+32tkgjwVfUacGEUBUo7F4inxGC1ljzdLTAaEcWw75u5kdCjgZnP A28nyBw8Eipdl7zucEtGh62Dxohh1EnufCHm9apl/CDAFXYy3SBwizlXlAOU6mSr 4kNpSUUbovbsGzgZbvqK+DYc3bzwhEbM2BHkNREKaM8bQqEmLIWrtEY0nvbNHPcp xT4oPoMDHqQHk27aasrTR5U/hszGFiDulCXrHkjeJOHe31XLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwrw7y4U36/lld6WNEuuhDM5naUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZWQzNWI0OGUtMzQxZi0z ZWYzLWJiNzgtNWMzOTNiZTlhMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9leMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2LS2HWBx8usbxuVLaTf3ofAIXJE6s6GPRv644CdYpBylodwvC0uYTX 9JIBS4kBH0ylHnpYJz7//0Gt58jYlZlaIk9uSfKPrLr2XzhUv4taq+EseMkyCRiQ klIa88Ho9UYgIwXzNocLBy6oRToLTt4/yFdmMkfktnNDYofc+zeDFnxev5tpblIy P8x3jhDMHf1MTl5dxLbMgFlB6aZzEFfJl6J48fnWjX7THXFso0WE+4gqRe3xK09o QWIt3k5/cUxtcilfe8cLUpfek99NcgrZYX9uXCJBWwmxvJi0GEqCJJN1vKoUQfnM 07B1zne9PO6y4qDNMxiXnn+r3+uykG8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:24 2025 by rpki-client