$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa File: 87fd4b0d-6f9b-3caf-ad67-299517a44066.roa (raw, json) Hash identifier: ihfaLpcSVyqNuE2i2hg//rd0NvXF65aqFGAOiBWn//o= Subject key identifier: B0:6B:89:ED:13:4F:53:24:BA:90:6C:B8:31:16:DA:FD:9A:8E:BC:C8 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B2496DA69536CD936852F0B00 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 174 IP address blocks: 65.110.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:da:69:53:6c:d9:36:85:2f:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=1c717c50-52d4-4c4e-9a69-e116cc3e1adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:ff:48:de:32:06:94:0c:92:46:7d:80:a8: 7f:f1:43:b7:60:3b:11:9a:28:4e:fa:c8:20:d7:32: 09:70:97:24:19:a1:d8:e1:98:b6:95:96:4c:43:f7: a6:e2:1f:26:e9:94:36:2d:c9:de:26:3f:8b:8b:47: ae:1e:bb:b9:7b:2f:b9:5e:57:38:37:85:87:1e:a3: c3:eb:90:fe:1c:b9:cd:1b:37:24:5b:e5:7d:49:0f: 0b:e2:09:76:7b:03:b1:82:54:98:91:57:b5:84:2e: bb:10:b8:0c:a1:5f:4b:98:bc:d0:48:3b:df:5e:9c: 3b:5e:00:46:77:9c:b9:be:90:49:f1:77:5b:93:11: d2:23:c1:48:b0:24:6c:19:c8:d4:8b:08:3d:88:0b: b7:86:0b:33:72:7b:77:72:eb:80:39:7f:3f:b6:9d: 89:da:40:b3:76:6e:30:0f:46:8d:27:b4:0b:bd:df: b1:25:25:2b:68:64:80:dc:c7:86:5a:fe:fe:32:1d: a9:4b:a9:a8:f7:25:d9:b2:3e:0f:66:7a:08:39:aa: d2:7d:cd:dc:9f:3f:08:63:84:f9:92:24:3d:30:5c: c2:df:ec:95:88:bc:4e:cc:cd:ec:09:14:bb:d9:7f: d4:aa:20:7f:c5:e1:23:60:09:31:3d:16:31:95:37: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6B:89:ED:13:4F:53:24:BA:90:6C:B8:31:16:DA:FD:9A:8E:BC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1a:48:79:76:74:58:39:31:98:ce:25:3c:07:77:aa:a1:98: cc:25:e5:79:12:4c:f9:8d:45:8a:24:cd:e6:e8:cd:2f:e2:ed: 00:42:52:12:52:0f:03:54:cd:1b:70:20:a2:90:e0:33:3f:0a: 35:7e:8e:37:39:1c:3b:24:38:c8:a8:35:b1:c9:d1:ba:55:61: 0a:1b:2d:e3:d6:fc:a6:d5:ed:47:9a:d5:d7:d6:a2:16:4f:43: 57:ce:df:14:58:a0:bd:01:39:6c:80:e5:b0:9c:7d:74:51:06: ec:d6:35:da:6c:de:41:8c:45:c9:28:cc:05:06:97:ca:2f:fc: 18:46:48:6a:c0:d3:4c:9b:50:e0:17:65:af:bd:67:2b:de:7b: 89:cf:bd:0c:2e:c8:aa:be:e7:3b:99:b0:ae:e4:00:86:b1:4b: 9a:74:be:71:b9:7e:25:af:cd:75:97:1e:26:c9:5b:06:18:e2: 24:1f:05:25:d8:6d:c1:67:93:2f:a2:ce:2d:7e:8e:3c:08:ed: ab:ba:b8:6c:53:ed:b3:c7:c8:d6:de:ad:de:01:6d:d3:06:9d: 27:37:49:05:c4:9b:c7:7d:83:8b:99:e0:03:74:38:6b:b1:94: 22:6e:a7:b0:bc:a3:20:bf:d3:93:96:f8:78:f6:33:16:74:f5: df:97:88:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltppU2zZNoUvCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MWM3MTdjNTAtNTJkNC00YzRlLTlhNjktZTExNmNjM2UxYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9r/SN4yBpQMkkZ9gKh/8UO3YDsRmihO+sgg 1zIJcJckGaHY4Zi2lZZMQ/em4h8m6ZQ2LcneJj+Li0euHru5ey+5Xlc4N4WHHqPD 65D+HLnNGzckW+V9SQ8L4gl2ewOxglSYkVe1hC67ELgMoV9LmLzQSDvfXpw7XgBG d5y5vpBJ8XdbkxHSI8FIsCRsGcjUiwg9iAu3hgszcnt3cuuAOX8/tp2J2kCzdm4w D0aNJ7QLvd+xJSUraGSA3MeGWv7+Mh2pS6mo9yXZsj4PZnoIOarSfc3cnz8IY4T5 kiQ9MFzC3+yViLxOzM3sCRS72X/UqiB/xeEjYAkxPRYxlTejDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBrie0TT1MkupBsuDEW2v2ajrzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODdmZDRiMGQtNmY5Yi0z Y2FmLWFkNjctMjk5NTE3YTQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoaSHl2dFg5MZjOJTwHd6qhmMwl5XkSTPmNRYokzebozS/i7QBCUhJS DwNUzRtwIKKQ4DM/CjV+jjc5HDskOMioNbHJ0bpVYQobLePW/KbV7Uea1dfWohZP Q1fO3xRYoL0BOWyA5bCcfXRRBuzWNdps3kGMRckozAUGl8ov/BhGSGrA00ybUOAX Za+9Zyvee4nPvQwuyKq+5zuZsK7kAIaxS5p0vnG5fiWvzXWXHibJWwYY4iQfBSXY bcFnky+izi1+jjwI7au6uGxT7bPHyNberd4BbdMGnSc3SQXEm8d9g4uZ4AN0OGux lCJup7C8oyC/05OW+Hj2MxZ09d+XiFY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:02:02 2025 by rpki-client