$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa File: 1013b58b-c978-32db-a484-4f958d5cd161.roa (raw, json) Hash identifier: N5ivKMxFp9iTz2WkTccSeQ1KD0OpdKBdJe7KWpzLtWc= Subject key identifier: 71:48:52:5B:C9:9C:42:77:10:BB:F9:17:D8:30:1A:51:B5:AA:59:11 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F43285849F44A5A402C3D9E54C7B9B6C0 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 5650 IP address blocks: 65.87.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5a:40:2c:3d:9e:54:c7:b9:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=fdd0aab9-9d7e-49a7-b7fe-f7030c2af1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:b4:18:e3:30:b6:fe:7a:7c:88:e9:97:de: 16:39:00:c4:1a:92:25:71:8c:e0:79:50:86:41:c1: 0a:f0:00:93:7a:bd:6c:2c:bc:1c:ee:4f:c1:76:c8: 8d:14:f0:1c:54:8f:32:7b:a9:53:32:95:b1:df:e6: d4:e3:6d:54:91:ea:2d:26:e0:24:7b:a6:7a:87:a5: 21:e7:75:3a:7c:14:24:ed:66:88:48:c2:8a:4f:98: 88:af:ba:15:60:25:fa:53:62:f2:d7:73:d0:1d:25: 89:ee:a0:d3:88:48:74:9e:0c:a2:ff:b4:9d:8e:ac: 9b:cf:8c:b5:c3:54:6f:d9:88:aa:39:d7:ce:ac:02: 66:5f:73:60:60:07:3f:a8:01:3a:82:93:15:28:5b: 61:97:0b:a3:09:70:99:27:16:88:99:42:dc:8f:a2: 0e:46:5b:59:17:be:46:4e:e3:29:40:46:ab:29:a8: 56:37:8d:3c:18:d4:2c:53:18:53:64:38:51:16:51: e8:e7:b9:f4:7e:a9:29:3d:e8:00:ee:ae:04:8a:3f: 29:d9:35:96:47:60:03:98:d3:e2:70:27:10:f8:da: f7:e0:72:5c:80:d2:c2:2e:8b:6f:0c:2c:02:75:32: 18:38:97:39:29:d7:c1:e0:43:c8:38:c7:98:b2:a1: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:52:5B:C9:9C:42:77:10:BB:F9:17:D8:30:1A:51:B5:AA:59:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:12:a7:83:0f:ad:54:bd:d1:dc:44:e9:e8:82:51:48:1a:47: a9:18:24:df:97:5a:6e:0f:5e:7a:ab:86:33:10:10:8f:2b:4a: 5b:8c:b0:9f:60:df:b5:fe:08:32:50:9f:d8:8f:c7:1f:e8:20: 84:58:60:bc:af:8f:f1:d1:0b:8a:cf:a7:09:26:76:79:b2:01: 83:94:2f:8b:c9:42:d8:8f:6c:cf:6f:e4:c6:09:07:53:32:05: 73:24:95:26:93:de:4f:e7:25:19:67:36:0c:0b:c6:84:2b:18: 00:3f:e2:8b:54:15:3f:b7:6e:e5:c3:f0:84:fd:1c:8d:8e:11: 32:00:38:77:25:4f:47:3d:5d:18:d6:3e:bf:76:46:20:63:b6: e9:30:a2:aa:f9:80:80:bc:5f:c7:46:94:30:f3:17:19:92:87: 1c:0c:1e:7e:a5:04:6b:fa:72:06:d1:05:29:c0:4f:c1:95:db: 42:6d:29:ae:db:62:dd:b8:77:e5:81:b2:5c:4e:06:92:5f:73: c7:d7:69:fc:cd:63:0a:04:26:4d:f8:c2:e1:40:6a:0e:59:7b: 0a:e4:70:64:33:b8:c0:51:42:17:d0:ba:e5:51:8c:f0:d5:3a: d8:7e:0b:b0:a6:50:5e:17:31:30:ee:0a:6b:2c:07:5f:71:cc: c7:65:3c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SlpALD2eVMe5tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ZmRkMGFhYjktOWQ3ZS00OWE3LWI3ZmUtZjcwMzBjMmFmMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+u0GOMwtv56fIjpl94WOQDEGpIlcYzgeVCG QcEK8ACTer1sLLwc7k/BdsiNFPAcVI8ye6lTMpWx3+bU421UkeotJuAke6Z6h6Uh 53U6fBQk7WaISMKKT5iIr7oVYCX6U2Ly13PQHSWJ7qDTiEh0ngyi/7Sdjqybz4y1 w1Rv2YiqOdfOrAJmX3NgYAc/qAE6gpMVKFthlwujCXCZJxaImULcj6IORltZF75G TuMpQEarKahWN408GNQsUxhTZDhRFlHo57n0fqkpPegA7q4Eij8p2TWWR2ADmNPi cCcQ+Nr34HJcgNLCLotvDCwCdTIYOJc5KdfB4EPIOMeYsqEVwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFIUlvJnEJ3ELv5F9gwGlG1qlkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMTAxM2I1OGItYzk3OC0z MmRiLWE0ODQtNGY5NThkNWNkMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUSp4MPrVS90dxE6eiCUUgaR6kYJN+XWm4PXnqrhjMQEI8rSluMsJ9g 37X+CDJQn9iPxx/oIIRYYLyvj/HRC4rPpwkmdnmyAYOUL4vJQtiPbM9v5MYJB1My BXMklSaT3k/nJRlnNgwLxoQrGAA/4otUFT+3buXD8IT9HI2OETIAOHclT0c9XRjW Pr92RiBjtukwoqr5gIC8X8dGlDDzFxmShxwMHn6lBGv6cgbRBSnAT8GV20JtKa7b Yt24d+WBslxOBpJfc8fXafzNYwoEJk34wuFAag5ZewrkcGQzuMBRQhfQuuVRjPDV Oth+C7CmUF4XMTDuCmssB19xzMdlPOk= -----END CERTIFICATE-----Generated at Sun Jun 15 18:35:39 2025 by rpki-client