$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/acd2785b-7c86-3093-83c8-1646794147c2.roa File: acd2785b-7c86-3093-83c8-1646794147c2.roa (raw, json) Hash identifier: rKXUKDnYw5I9qERw3RlrQv/SoJzkXstmfeQH57Dj5y8= Subject key identifier: EC:82:29:B4:1E:0A:CE:D8:50:7F:27:6F:7D:4D:77:EC:96:F6:B7:13 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A71EB4F0E603F8A29C3951EC0 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/acd2785b-7c86-3093-83c8-1646794147c2.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 46488 IP address blocks: 65.87.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:4f:0e:60:3f:8a:29:c3:95:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=db66b25d-7edc-4243-8e40-07b612593848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:5c:cd:89:5e:85:d4:a5:89:df:f9:da:8e: c2:7c:64:0f:97:12:e7:b7:e9:9c:f7:b7:b1:e5:57: 5f:48:4d:a5:c8:e0:e6:de:68:5c:2d:d5:1f:ea:bf: 5c:20:bc:ce:bb:b6:eb:70:17:be:83:e4:5e:9c:6c: f1:f8:87:77:7b:9c:ba:79:1f:66:7e:3e:02:52:dc: 42:7f:ad:2b:80:a2:61:ff:ee:ea:4a:cb:d9:89:a9: 18:3c:20:6c:e6:ac:d5:b7:ed:a8:bc:8e:11:f3:25: da:51:5e:ed:81:b6:f0:a2:5d:85:20:a6:46:0b:85: 66:c4:c0:2f:08:8c:fe:f1:21:4a:0f:6a:fc:09:df: 82:c8:b0:e3:bf:d1:39:4a:13:5b:9c:61:f8:2a:e6: 43:17:ab:83:62:ac:17:61:10:75:e6:52:57:d4:d3: f0:30:34:54:99:a3:ef:91:56:52:f1:21:88:ff:e4: d7:ba:05:99:ec:84:60:36:f6:dc:72:f2:90:55:36: 9c:1e:f2:14:ee:82:23:a1:6d:57:6c:6f:25:f8:29: 89:22:77:c1:4f:11:8a:55:33:26:d9:1e:fe:8c:ec: 9f:c6:8f:5d:c2:a3:a5:c5:97:ad:47:cf:d9:42:43: 7d:21:b6:00:03:5c:74:b3:71:7c:ef:2f:70:c9:4a: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:82:29:B4:1E:0A:CE:D8:50:7F:27:6F:7D:4D:77:EC:96:F6:B7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/acd2785b-7c86-3093-83c8-1646794147c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:62:9b:b5:98:15:f6:99:64:b4:75:b9:da:79:a6:81:e2:4c: 48:3a:fb:16:83:e0:1b:20:f4:04:ab:28:be:6e:4d:19:ec:79: 88:37:76:cb:bb:58:6c:0a:61:f0:76:ae:a8:85:65:14:d7:a8: 72:dc:bf:7e:6a:cd:d8:5f:6d:38:19:7b:23:61:f3:9e:9e:ad: f3:ad:df:8b:1f:51:96:68:fc:c4:fe:de:9e:25:56:02:e2:b8: 08:f2:ea:de:1e:1b:b8:da:39:88:25:8c:50:b1:20:ac:a5:35: 21:fd:d2:7e:8c:ac:3e:09:6c:05:7c:67:5a:5f:08:a3:95:5f: fe:ab:ef:39:f8:4f:6e:bb:8d:ae:22:4f:3a:36:21:f0:05:b8: 47:9b:63:0e:e0:eb:29:d9:fc:84:da:7c:bf:05:2c:49:47:70: dc:b0:83:d3:83:57:69:bb:80:a8:6b:75:f6:0e:2b:92:2b:27: 48:ee:38:a0:bf:c8:a2:be:be:52:4e:7a:d9:e1:f7:36:4b:04: 10:ae:05:c3:bb:2b:be:b2:fc:72:0c:31:ca:a5:6c:6e:34:78: 6e:aa:eb:01:74:c1:81:05:68:f6:9f:89:62:bb:df:eb:65:e1: fb:52:1e:14:68:16:3e:e2:16:52:1a:82:85:fa:79:57:40:5f: f9:e0:b3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx608OYD+KKcOVHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZGI2NmIyNWQtN2VkYy00MjQzLThlNDAtMDdiNjEyNTkzODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIdczYlehdSlid/52o7CfGQPlxLnt+mc97ex 5VdfSE2lyODm3mhcLdUf6r9cILzOu7brcBe+g+RenGzx+Id3e5y6eR9mfj4CUtxC f60rgKJh/+7qSsvZiakYPCBs5qzVt+2ovI4R8yXaUV7tgbbwol2FIKZGC4VmxMAv CIz+8SFKD2r8Cd+CyLDjv9E5ShNbnGH4KuZDF6uDYqwXYRB15lJX1NPwMDRUmaPv kVZS8SGI/+TXugWZ7IRgNvbccvKQVTacHvIU7oIjoW1XbG8l+CmJInfBTxGKVTMm 2R7+jOyfxo9dwqOlxZetR8/ZQkN9IbYAA1x0s3F87y9wyUq4fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyCKbQeCs7YUH8nb31Nd+yW9rcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvYWNkMjc4NWItN2M4Ni0z MDkzLTgzYzgtMTY0Njc5NDE0N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlim7WYFfaZZLR1udp5poHiTEg6+xaD4Bsg9ASrKL5uTRnseYg3dsu7 WGwKYfB2rqiFZRTXqHLcv35qzdhfbTgZeyNh856erfOt34sfUZZo/MT+3p4lVgLi uAjy6t4eG7jaOYgljFCxIKylNSH90n6MrD4JbAV8Z1pfCKOVX/6r7zn4T267ja4i Tzo2IfAFuEebYw7g6ynZ/ITafL8FLElHcNywg9ODV2m7gKhrdfYOK5IrJ0juOKC/ yKK+vlJOetnh9zZLBBCuBcO7K76y/HIMMcqlbG40eG6q6wF0wYEFaPafiWK73+tl 4ftSHhRoFj7iFlIagoX6eVdAX/ngs20= -----END CERTIFICATE-----Generated at Wed Jul 9 06:46:20 2025 by rpki-client