$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/7dd3f81e-98c8-3603-b03d-462a1fb14461.roa File: 7dd3f81e-98c8-3603-b03d-462a1fb14461.roa (raw, json) Hash identifier: yNVhPA6fOppfU9klfn5DSxt1g3eps69+juUoCqG1Pac= Subject key identifier: 96:85:CE:55:A7:CD:EC:EA:B6:D6:87:02:70:72:4B:8F:89:E5:17:F4 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B2496DA5887B7D60D830C7D80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/7dd3f81e-98c8-3603-b03d-462a1fb14461.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 1239 IP address blocks: 65.110.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:da:58:87:b7:d6:0d:83:0c:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=77c0398f-64f4-457a-a9cf-ae60ba2200e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:bf:87:51:2e:ea:f3:9b:08:0c:fc:ba:9a: 2d:47:62:3f:04:4d:10:17:1d:fc:45:8f:68:66:02: 0d:23:25:70:67:30:ed:b8:5a:06:50:60:a9:2c:d8: 7b:12:62:96:67:79:0a:9c:b8:e4:1f:da:dd:b8:65: 1d:0d:b8:84:2c:f8:b4:de:c0:ee:cd:64:4b:dd:1b: 45:ed:8f:f8:8a:37:91:92:03:dc:ae:a9:72:91:ed: b3:5e:8e:35:c1:28:c1:0c:a0:4e:2c:c3:a7:c3:df: d5:33:c4:7c:63:1b:59:96:18:a0:5a:38:25:73:2f: 4e:6e:a4:2d:a2:3f:26:4a:03:97:55:5a:c8:8a:d2: 53:ed:ef:aa:d3:ec:9a:c0:32:33:de:79:f1:3d:cd: 95:60:0c:a8:0e:ab:67:dd:3a:d6:87:d3:a8:8c:25: fa:a0:72:2e:d3:cc:57:75:63:4f:ca:29:e6:dc:54: 35:bc:8f:33:60:6e:12:d2:4e:ad:09:e9:0e:0d:c7: b4:e8:df:89:97:20:bd:b0:e6:c6:a0:63:cc:9c:48: 3e:fa:df:ac:6f:56:c7:77:4d:df:5f:7c:1f:3b:e0: c3:17:06:34:11:d2:83:44:aa:81:d8:a6:28:74:d2: 06:d1:48:66:4f:ca:99:df:ea:2c:b8:6e:76:bb:af: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:CE:55:A7:CD:EC:EA:B6:D6:87:02:70:72:4B:8F:89:E5:17:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/7dd3f81e-98c8-3603-b03d-462a1fb14461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:02:4b:d9:75:4b:45:99:f0:96:54:44:12:0d:71:8c:60:6c: 19:22:24:fb:24:3d:95:f3:1c:91:ef:00:79:85:36:58:eb:0c: 56:91:62:04:76:f7:44:f5:68:5c:2b:30:d6:d5:e2:b8:19:7e: 23:ea:d0:91:f7:e3:6c:31:84:76:45:43:c9:0e:d0:0f:33:6f: 08:7e:21:55:e7:51:54:9f:46:5c:d9:46:49:d9:2d:d2:31:91: 0a:80:f3:32:4b:e6:2c:67:bf:d3:b2:1e:31:27:32:79:42:78: 14:fe:a0:7d:b4:45:de:78:ea:0d:b8:f7:66:cd:a2:c0:11:0b: 3a:3c:c1:c1:3c:37:41:2d:67:20:53:06:60:8e:fb:bd:3c:22: ca:fb:26:5f:5e:11:de:6f:d6:6d:e4:91:cb:90:7e:88:24:07: 0c:4d:6d:b4:0f:e2:76:9f:9e:8e:cc:42:e8:eb:31:cf:c8:e8: 3e:58:0e:73:aa:fd:63:04:0c:5d:75:43:a4:eb:6a:7d:f4:7d: 57:23:42:b2:a2:2b:70:40:30:18:96:b6:f9:01:55:08:26:fe: 6f:84:33:35:41:5b:2a:26:71:54:92:21:f6:7a:b4:27:70:61: c3:0a:3e:3a:c4:b0:ca:df:d0:20:99:ec:09:f4:39:d9:33:22: b9:3e:8e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltpYh7fWDYMMfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NzdjMDM5OGYtNjRmNC00NTdhLWE5Y2YtYWU2MGJhMjIwMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+a/h1Eu6vObCAz8upotR2I/BE0QFx38RY9o ZgINIyVwZzDtuFoGUGCpLNh7EmKWZ3kKnLjkH9rduGUdDbiELPi03sDuzWRL3RtF 7Y/4ijeRkgPcrqlyke2zXo41wSjBDKBOLMOnw9/VM8R8YxtZlhigWjglcy9ObqQt oj8mSgOXVVrIitJT7e+q0+yawDIz3nnxPc2VYAyoDqtn3TrWh9OojCX6oHIu08xX dWNPyinm3FQ1vI8zYG4S0k6tCekODce06N+JlyC9sObGoGPMnEg++t+sb1bHd03f X3wfO+DDFwY0EdKDRKqB2KYodNIG0UhmT8qZ3+osuG52u6+QbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaFzlWnzezqttaHAnByS4+J5Rf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvN2RkM2Y4MWUtOThjOC0z NjAzLWIwM2QtNDYyYTFmYjE0NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGICS9l1S0WZ8JZURBINcYxgbBkiJPskPZXzHJHvAHmFNljrDFaRYgR2 90T1aFwrMNbV4rgZfiPq0JH342wxhHZFQ8kO0A8zbwh+IVXnUVSfRlzZRknZLdIx kQqA8zJL5ixnv9OyHjEnMnlCeBT+oH20Rd546g2492bNosARCzo8wcE8N0EtZyBT BmCO+708Isr7Jl9eEd5v1m3kkcuQfogkBwxNbbQP4nafno7MQujrMc/I6D5YDnOq /WMEDF11Q6Tran30fVcjQrKiK3BAMBiWtvkBVQgm/m+EMzVBWyomcVSSIfZ6tCdw YcMKPjrEsMrf0CCZ7An0OdkzIrk+juI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:46 2025 by rpki-client