$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa File: dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa (raw, json) Hash identifier: CI1CD3BdtkwSixT0o5AEgT4C1oaEXe1zbYT22qO+WP0= Subject key identifier: 41:E1:5E:83:F9:8F:7A:9C:8D:5F:A8:C8:E2:66:F0:BD:03:A5:3E:E4 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285849ED4FCF95F8BB4BD24B722B00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 27235 IP address blocks: 65.120.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cf:95:f8:bb:4b:d2:4b:72:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=db0e4713-d767-46fc-800c-b2f9e077b16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:cc:31:b0:3b:28:2c:dc:e2:71:95:c8:47: 3d:94:5d:b2:c4:85:3e:e2:0b:56:c0:b9:cd:4c:96: c4:62:ce:0d:98:4a:2d:6c:1d:95:a3:b4:b4:32:51: 03:6d:b2:24:fa:17:0b:cd:1f:6e:3e:26:48:c3:bc: 14:b7:ff:52:20:f7:81:5f:b0:e1:3f:0a:f4:63:05: fb:cf:80:1d:fa:f4:08:f5:a2:e7:5e:b1:34:6a:68: 73:d6:d9:bc:f5:45:58:4b:41:50:15:f7:4b:4d:d6: 0a:08:18:41:b9:a4:b0:7c:f7:bc:7f:80:60:f7:1b: 10:d0:c1:40:05:7b:f5:72:64:89:76:db:8c:1f:cd: f0:4a:43:f1:db:35:93:65:cb:3a:89:6d:9c:69:58: 07:50:28:93:a6:2d:8f:20:e3:b5:6f:d8:0a:d1:9d: 69:35:46:7a:3c:8b:7b:64:9f:0a:55:54:9c:7a:dd: 14:5c:d0:ee:a5:f4:4e:71:01:a2:22:57:17:d0:eb: 64:b1:0a:63:a9:e5:fb:91:1e:a3:4f:e9:75:a3:23: cd:0d:81:93:79:e5:2c:0b:46:62:9b:57:01:7e:17: a4:39:78:97:86:9c:dc:24:98:67:41:e5:01:01:c7: 3f:f6:5e:16:88:1c:e8:2e:48:47:0d:b5:b1:53:24: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:5E:83:F9:8F:7A:9C:8D:5F:A8:C8:E2:66:F0:BD:03:A5:3E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.120.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c0:bf:93:10:97:0f:7b:1d:17:f0:55:5f:8b:21:51:96:ee: e4:23:d4:45:d9:a5:c1:4e:0e:87:0e:1b:1b:a2:c9:c9:83:17: f6:0e:17:56:b2:b2:e6:3b:58:ea:d7:a7:66:9d:3f:53:33:aa: b9:64:41:04:97:37:d1:b5:f7:90:ec:75:7b:07:ce:2e:43:59: ed:a4:12:67:80:07:4f:34:bf:e1:f8:74:ce:49:87:0a:80:40: f7:2c:ae:c2:48:65:f3:26:a3:12:c2:0f:70:6e:61:26:56:05: a0:3e:8b:4f:b4:86:35:59:90:49:e6:90:34:fc:e5:32:15:e8: ab:4f:54:b4:0e:8d:58:0c:c5:fe:b0:7f:7c:8f:77:b7:83:7d: 0a:a7:28:f7:eb:a1:3f:f0:dc:c9:ba:60:55:93:bd:95:91:c4: 8b:df:17:be:72:b7:01:81:05:5e:1d:f4:44:43:64:63:45:ef: 58:b2:e5:f6:68:3a:dd:c5:39:e0:6d:7f:30:76:1a:6c:d8:56: 54:84:44:e1:fd:57:fd:ec:9c:38:35:c5:02:da:c9:2a:eb:04: 45:21:9d:e4:a7:28:8c:48:8b:d6:0c:5a:55:5d:5d:7c:89:9a: 13:da:0a:0a:fb:fa:e6:77:d1:be:97:2c:27:6f:f8:d9:6e:ba: fb:df:6f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8+V+LtL0ktyKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZGIwZTQ3MTMtZDc2Ny00NmZjLTgwMGMtYjJmOWUwNzdiMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCTMMbA7KCzc4nGVyEc9lF2yxIU+4gtWwLnN TJbEYs4NmEotbB2Vo7S0MlEDbbIk+hcLzR9uPiZIw7wUt/9SIPeBX7DhPwr0YwX7 z4Ad+vQI9aLnXrE0amhz1tm89UVYS0FQFfdLTdYKCBhBuaSwfPe8f4Bg9xsQ0MFA BXv1cmSJdtuMH83wSkPx2zWTZcs6iW2caVgHUCiTpi2PIOO1b9gK0Z1pNUZ6PIt7 ZJ8KVVScet0UXNDupfROcQGiIlcX0OtksQpjqeX7kR6jT+l1oyPNDYGTeeUsC0Zi m1cBfhekOXiXhpzcJJhnQeUBAcc/9l4WiBzoLkhHDbWxUyReOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHhXoP5j3qcjV+oyOJm8L0DpT7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGZlMGVjM2MtMTRiMS0z YmRmLTlmMjUtNmRjZTc1MWRlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQXgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/Av5MQlw97HRfwVV+LIVGW7uQj1EXZpcFODocOGxuiycmDF/YOF1ay suY7WOrXp2adP1MzqrlkQQSXN9G195DsdXsHzi5DWe2kEmeAB080v+H4dM5JhwqA QPcsrsJIZfMmoxLCD3BuYSZWBaA+i0+0hjVZkEnmkDT85TIV6KtPVLQOjVgMxf6w f3yPd7eDfQqnKPfroT/w3Mm6YFWTvZWRxIvfF75ytwGBBV4d9ERDZGNF71iy5fZo Ot3FOeBtfzB2GmzYVlSEROH9V/3snDg1xQLaySrrBEUhneSnKIxIi9YMWlVdXXyJ mhPaCgr7+uZ30b6XLCdv+Nluuvvfb00= -----END CERTIFICATE-----Generated at Mon Jun 16 14:52:11 2025 by rpki-client