$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ff4ec268-08b0-3230-947c-0849e42ce702.roa File: ff4ec268-08b0-3230-947c-0849e42ce702.roa (raw, json) Hash identifier: h5drJrZAJ+GxdoGs2jLeWsEGlmHlQjDw52JwSgUV6LI= Subject key identifier: 38:ED:CC:F8:5F:CE:DE:97:C9:68:73:7B:0B:5F:0F:8D:9E:CC:77:8D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B3556E066AC4EE0A8A7412480 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ff4ec268-08b0-3230-947c-0849e42ce702.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 67.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e0:66:ac:4e:e0:a8:a7:41:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=ddbc6fee-b16e-4276-aae0-425859e96331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:15:54:4d:a2:c1:ab:e0:d7:f8:16:0a:19: 0f:16:46:3a:13:6e:9b:83:88:6d:71:ce:0f:a8:95: 91:5d:54:6a:66:5b:ad:51:c1:7e:af:e4:15:a9:bd: f4:bc:c4:38:e5:d4:b7:fa:77:bf:76:47:f6:7c:0e: c7:23:cb:e6:99:07:46:17:56:8d:14:ef:0d:03:d4: d1:92:32:14:8a:29:25:22:f4:16:f5:d6:1d:b7:96: 39:7d:d7:99:f4:0f:c7:6f:6d:ae:b6:1b:a9:cb:8d: a9:15:5a:ab:11:37:d2:7d:2b:8b:7e:21:29:85:17: 26:7a:b6:57:3a:dc:f0:7c:2c:ea:ab:ae:5c:1f:5c: f8:58:7d:fc:00:47:c2:98:8c:ca:13:8f:51:3f:af: 8c:81:48:93:8c:0d:70:b6:92:c4:00:01:4a:d4:ee: 29:f8:fc:61:33:4c:d8:93:7b:7a:5e:b0:17:a7:38: 17:53:13:8c:7a:9c:bf:a0:62:ab:f6:ea:cb:fa:ed: 36:fd:6a:55:4b:68:3b:a4:17:10:5d:40:ef:96:61: 4f:63:d8:75:28:10:74:bb:73:03:98:3d:85:36:0f: 28:cb:e3:c5:55:21:6d:8d:50:93:51:d7:e3:9b:5c: 97:8e:48:5d:20:05:8a:c2:69:7e:da:1c:60:4d:00: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:CC:F8:5F:CE:DE:97:C9:68:73:7B:0B:5F:0F:8D:9E:CC:77:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ff4ec268-08b0-3230-947c-0849e42ce702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:86:1a:a4:46:6b:c8:80:b6:83:8f:e4:cf:0c:11:bc:72:87: 12:4e:e3:2e:d4:48:3c:09:2f:58:3c:bc:e5:36:bb:4e:1d:88: 00:90:f5:24:ea:60:31:74:3e:7e:a0:ef:9f:25:ae:9a:92:88: f1:f1:c6:29:32:70:5b:02:94:1c:cd:9a:6b:52:10:e2:8b:70: 81:04:f5:a4:61:ea:34:61:dc:95:3a:71:54:0f:12:23:c0:8f: f8:99:f5:f4:c2:62:2c:ad:c0:29:e4:23:a8:a0:53:c1:c7:9c: cb:e6:18:48:b9:13:4b:56:89:9f:0e:fd:7f:e8:8f:36:ec:95: 78:aa:60:28:b3:cb:65:45:56:c8:38:bc:5f:2d:10:53:84:32: 4b:34:d4:10:ef:66:bf:95:f7:df:31:c4:3c:7b:21:9a:6f:96: 5c:dc:e3:6b:d5:7c:44:6a:ec:20:73:fa:58:39:84:1c:77:3b: 88:ea:9d:c6:36:d6:24:b2:9d:ae:72:0f:23:88:bf:e8:49:e0: ef:e0:5e:a0:e7:54:fb:ba:34:30:0a:1a:1e:cd:97:76:6a:b0: 62:4c:c1:39:c4:17:da:53:1c:2b:2f:32:b5:12:f4:78:c3:aa: 15:85:f6:c9:80:0a:95:b3:7f:a4:a8:ec:1a:27:99:ce:5e:55: d5:1d:cc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuBmrE7gqKdBJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZGRiYzZmZWUtYjE2ZS00Mjc2LWFhZTAtNDI1ODU5ZTk2MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hIVVE2iwavg1/gWChkPFkY6E26bg4htcc4P qJWRXVRqZlutUcF+r+QVqb30vMQ45dS3+ne/dkf2fA7HI8vmmQdGF1aNFO8NA9TR kjIUiiklIvQW9dYdt5Y5fdeZ9A/Hb22uthupy42pFVqrETfSfSuLfiEphRcmerZX OtzwfCzqq65cH1z4WH38AEfCmIzKE49RP6+MgUiTjA1wtpLEAAFK1O4p+PxhM0zY k3t6XrAXpzgXUxOMepy/oGKr9urL+u02/WpVS2g7pBcQXUDvlmFPY9h1KBB0u3MD mD2FNg8oy+PFVSFtjVCTUdfjm1yXjkhdIAWKwml+2hxgTQAoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjtzPhfzt6XyWhzewtfD42ezHeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZmY0ZWMyNjgtMDhiMC0z MjMwLTk0N2MtMDg0OWU0MmNlNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqGGqRGa8iAtoOP5M8MEbxyhxJO4y7USDwJL1g8vOU2u04diACQ9STq YDF0Pn6g758lrpqSiPHxxikycFsClBzNmmtSEOKLcIEE9aRh6jRh3JU6cVQPEiPA j/iZ9fTCYiytwCnkI6igU8HHnMvmGEi5E0tWiZ8O/X/ojzbslXiqYCizy2VFVsg4 vF8tEFOEMks01BDvZr+V998xxDx7IZpvllzc42vVfERq7CBz+lg5hBx3O4jqncY2 1iSyna5yDyOIv+hJ4O/gXqDnVPu6NDAKGh7Nl3ZqsGJMwTnEF9pTHCsvMrUS9HjD qhWF9smACpWzf6So7Bonmc5eVdUdzDA= -----END CERTIFICATE-----Generated at Thu Sep 18 03:57:36 2025 by rpki-client