$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/d48cbae7-733c-39ce-83f2-f13a8de67abd.roa File: d48cbae7-733c-39ce-83f2-f13a8de67abd.roa (raw, json) Hash identifier: glF31OKkJa0740oI92RQU6rTJ9DYIxCgoR5tl0YCntE= Subject key identifier: 72:F1:BD:63:78:A3:6A:45:E1:D1:90:31:0E:96:A9:50:4B:03:64:62 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A7085F703516B20034099DB80 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/d48cbae7-733c-39ce-83f2-f13a8de67abd.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 46488 IP address blocks: 65.87.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f7:03:51:6b:20:03:40:99:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=696d87ce-1ed9-41b5-9b69-e4bf8c76a784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:86:d2:fc:44:ba:b3:8f:28:93:e1:58:3a: e7:5a:5a:d2:d3:41:49:11:0a:1d:b0:f3:17:2a:f8: 60:19:12:f7:06:28:36:e3:84:f7:5b:53:e5:05:3a: 47:fb:5e:af:33:f9:84:98:e1:fd:1c:54:18:65:5b: 7e:12:b0:af:21:d2:03:9a:ed:06:22:d1:6a:94:8b: e6:23:a9:76:1b:5a:7d:43:56:ea:f0:a3:08:0a:00: 9d:e8:8a:38:0f:de:79:1d:aa:bd:f7:96:8e:c0:7d: 92:59:03:08:f4:db:0e:b3:81:f1:a6:8b:dd:17:22: 0c:d6:23:69:95:79:ac:69:db:81:fc:c2:f9:8c:ba: 11:c1:a6:5e:25:6f:fc:2a:2c:4b:82:76:7d:b1:10: b2:8a:fc:3f:cc:65:d6:57:78:fb:42:29:81:9e:7f: cc:47:27:a7:1a:f2:f0:6c:cc:93:3a:a1:83:80:72: f5:41:65:e9:b4:e2:1e:8d:c0:59:66:66:a4:b8:ff: 91:39:56:04:62:f5:9f:d2:86:a7:f8:49:a9:ba:6f: 9b:40:a9:b4:b1:d5:78:49:19:4d:9d:20:58:13:51: d9:71:1b:d5:7a:66:99:63:b6:2a:01:fc:2c:91:22: 69:24:b2:32:76:a5:5c:96:5e:63:07:96:9d:16:bf: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F1:BD:63:78:A3:6A:45:E1:D1:90:31:0E:96:A9:50:4B:03:64:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/d48cbae7-733c-39ce-83f2-f13a8de67abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9f:04:c9:52:fb:fb:80:78:17:4b:de:b0:ef:a9:69:67:da: d7:d0:6b:e7:3e:12:e1:2c:b9:23:ee:62:0f:e0:52:40:73:9e: de:0a:44:3c:64:49:e2:5a:8e:27:98:81:c3:d6:e9:ab:8a:23: 03:90:b9:11:2a:f5:80:a4:9b:f2:00:58:90:4f:53:31:9d:bc: 03:c4:d1:16:7e:4e:70:49:e3:d4:21:d7:25:a3:be:91:ee:ab: 77:b1:96:8d:2b:6b:6b:d5:ac:8c:e4:9e:05:97:7c:d5:f2:1b: f9:91:ce:89:3a:43:5d:98:65:5b:e3:df:66:61:24:ec:49:06: a2:b0:f4:35:65:ef:ce:a6:f1:3f:18:ec:71:c8:7f:21:a7:42: 69:6b:78:61:87:2e:dc:5a:65:87:15:30:0a:c5:3b:89:e6:83: 57:0d:d7:d2:44:7a:65:7c:05:cf:07:af:b2:a8:96:06:a4:b0: 96:58:1d:34:5b:67:7b:d1:0f:0c:19:ee:dc:ab:55:da:55:58: 9b:1c:9f:8b:5d:d3:c0:77:bf:ce:cf:4a:84:42:a9:a7:06:4e: 72:82:f5:7c:8e:70:33:ed:3f:57:fd:fd:0a:78:05:58:8b:d4: c8:50:02:db:75:71:86:4f:7d:0a:1e:5d:22:58:2b:ad:af:4e: 16:a5:ec:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfcDUWsgA0CZ24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk Njk2ZDg3Y2UtMWVkOS00MWI1LTliNjktZTRiZjhjNzZhNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGKG0vxEurOPKJPhWDrnWlrS00FJEQodsPMX KvhgGRL3Big244T3W1PlBTpH+16vM/mEmOH9HFQYZVt+ErCvIdIDmu0GItFqlIvm I6l2G1p9Q1bq8KMICgCd6Io4D955Haq995aOwH2SWQMI9NsOs4HxpovdFyIM1iNp lXmsaduB/ML5jLoRwaZeJW/8KixLgnZ9sRCyivw/zGXWV3j7QimBnn/MRyenGvLw bMyTOqGDgHL1QWXptOIejcBZZmakuP+ROVYEYvWf0oan+Empum+bQKm0sdV4SRlN nSBYE1HZcRvVemaZY7YqAfwskSJpJLIydqVcll5jB5adFr+cOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLxvWN4o2pF4dGQMQ6WqVBLA2RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZDQ4Y2JhZTctNzMzYy0z OWNlLTgzZjItZjEzYThkZTY3YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSfBMlS+/uAeBdL3rDvqWln2tfQa+c+EuEsuSPuYg/gUkBznt4KRDxk SeJajieYgcPW6auKIwOQuREq9YCkm/IAWJBPUzGdvAPE0RZ+TnBJ49Qh1yWjvpHu q3exlo0ra2vVrIzkngWXfNXyG/mRzok6Q12YZVvj32ZhJOxJBqKw9DVl786m8T8Y 7HHIfyGnQmlreGGHLtxaZYcVMArFO4nmg1cN19JEemV8Bc8Hr7KolgaksJZYHTRb Z3vRDwwZ7tyrVdpVWJscn4td08B3v87PSoRCqacGTnKC9XyOcDPtP1f9/Qp4BViL 1MhQAtt1cYZPfQoeXSJYK62vThal7FE= -----END CERTIFICATE-----Generated at Sat Jul 26 14:28:46 2025 by rpki-client