$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2dbc4c11-2012-3f41-af28-0b6c638e263e.roa File: 2dbc4c11-2012-3f41-af28-0b6c638e263e.roa (raw, json) Hash identifier: zVewq2eKAbp+C6CKuDg1zRaK8mOYSl+ZloZmvzJV+hI= Subject key identifier: 87:CD:F6:3A:AC:17:66:05:53:B7:F0:74:F7:C8:42:91:E6:EB:11:DE Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A71EB551309FC66164A3EBD00 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2dbc4c11-2012-3f41-af28-0b6c638e263e.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 215659 IP address blocks: 65.87.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:13:09:fc:66:16:4a:3e:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=4092a5d5-d518-40b5-a68d-21f8c6fde43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fa:a1:c7:65:9e:20:09:5d:0a:0e:2e:ad:cb: cc:a4:a4:7a:2c:2f:1d:65:c7:0f:a0:5a:1c:cd:b0: 0a:b7:d6:f1:62:53:c9:34:ea:92:c1:ea:81:c4:af: ea:7c:b2:da:03:1a:d7:bd:bb:f7:86:2f:a0:0f:4a: 9f:13:8c:a0:e3:ae:b9:66:99:bc:a3:f7:97:e7:e2: 57:93:a3:fc:32:39:92:24:f8:6c:a6:bf:e6:b2:1a: 52:f6:72:71:de:94:d8:3b:78:50:9d:58:18:cb:30: 04:f8:89:5e:f6:cd:40:ff:18:b5:c6:03:07:a0:4b: a8:c5:0f:c4:3a:4b:c7:b3:12:26:65:b6:d7:a2:34: 7d:34:86:a7:95:0b:22:d9:3f:4c:e1:00:de:42:31: dc:2d:96:f2:a9:f9:10:3e:6d:f6:8a:a2:d6:7b:58: dd:fc:4d:2f:0e:f9:6f:98:5e:88:b4:06:6e:65:ef: bd:ee:7e:dc:e2:9c:2e:39:ac:e4:c7:89:b2:de:10: f7:03:8c:02:51:57:f0:9a:31:e9:47:d9:91:2b:ae: 61:ad:20:a7:7c:0e:05:df:b5:63:15:f3:d1:06:89: 69:2a:87:06:02:ee:7c:09:1f:13:3e:c0:4d:08:39: c8:e9:3f:72:e0:e3:7d:b4:c4:76:fa:46:54:7b:db: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:F6:3A:AC:17:66:05:53:B7:F0:74:F7:C8:42:91:E6:EB:11:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2dbc4c11-2012-3f41-af28-0b6c638e263e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f8:c5:4a:2d:ba:f4:20:f5:67:08:28:c9:9d:15:cd:11:a2: 23:ce:73:e6:49:22:2b:b5:e6:42:09:ee:e5:d0:23:49:88:18: 41:3d:95:06:b4:65:2d:ad:a9:95:d5:c8:82:81:ec:a7:81:d9: 63:99:be:ce:0a:01:23:4c:74:fc:36:91:68:b6:fc:fc:18:3e: 30:16:d5:17:a0:8e:1d:50:2b:5f:13:6f:b2:75:5d:8c:8b:f1: 5e:71:f8:ba:78:48:b0:9b:90:e4:be:53:e2:03:5d:cf:3e:ee: f0:06:4d:32:ec:91:49:cb:4d:ee:bb:65:05:b2:fc:c4:3f:b9: a7:09:b5:97:e7:13:c4:1d:24:18:4d:e3:70:0a:5f:3e:56:87: da:ef:4d:10:6c:f0:43:9b:a9:96:44:8d:4d:8f:f9:ce:da:27: 22:f5:3d:c2:be:fe:4f:38:95:42:7c:90:04:70:4d:78:09:c0: 9a:fa:7f:07:de:59:20:c1:18:c9:54:c2:52:f6:68:61:0a:6b: 10:ce:82:e4:2c:50:6d:8f:99:2f:5d:09:0f:66:f9:48:5a:93: 1f:cc:bf:f3:4c:e8:ea:94:64:ef:35:20:8f:a5:47:5b:63:7e: 4d:54:be:22:db:5f:2c:31:b1:77:02:1a:c7:79:93:18:48:dc: aa:45:8d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61UTCfxmFko+vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk NDA5MmE1ZDUtZDUxOC00MGI1LWE2OGQtMjFmOGM2ZmRlNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/qhx2WeIAldCg4urcvMpKR6LC8dZccPoFoc zbAKt9bxYlPJNOqSweqBxK/qfLLaAxrXvbv3hi+gD0qfE4yg4665Zpm8o/eX5+JX k6P8MjmSJPhspr/mshpS9nJx3pTYO3hQnVgYyzAE+Ile9s1A/xi1xgMHoEuoxQ/E OkvHsxImZbbXojR9NIanlQsi2T9M4QDeQjHcLZbyqfkQPm32iqLWe1jd/E0vDvlv mF6ItAZuZe+97n7c4pwuOazkx4my3hD3A4wCUVfwmjHpR9mRK65hrSCnfA4F37Vj FfPRBolpKocGAu58CR8TPsBNCDnI6T9y4ON9tMR2+kZUe9topQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfN9jqsF2YFU7fwdPfIQpHm6xHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMmRiYzRjMTEtMjAxMi0z ZjQxLWFmMjgtMGI2YzYzOGUyNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf4xUotuvQg9WcIKMmdFc0RoiPOc+ZJIiu15kIJ7uXQI0mIGEE9lQa0 ZS2tqZXVyIKB7KeB2WOZvs4KASNMdPw2kWi2/PwYPjAW1Regjh1QK18Tb7J1XYyL 8V5x+Lp4SLCbkOS+U+IDXc8+7vAGTTLskUnLTe67ZQWy/MQ/uacJtZfnE8QdJBhN 43AKXz5Wh9rvTRBs8EObqZZEjU2P+c7aJyL1PcK+/k84lUJ8kARwTXgJwJr6fwfe WSDBGMlUwlL2aGEKaxDOguQsUG2PmS9dCQ9m+Uhakx/Mv/NM6OqUZO81II+lR1tj fk1UviLbXywxsXcCGsd5kxhI3KpFjQo= -----END CERTIFICATE-----Generated at Wed Jul 9 00:17:41 2025 by rpki-client