$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/11000238-2fa3-32c8-beb1-494591a35981.roa File: 11000238-2fa3-32c8-beb1-494591a35981.roa (raw, json) Hash identifier: OqBus2hu5C1gh6DqBJl2/m2pyMToeySxDSmvzAM3NY0= Subject key identifier: 94:1A:31:E5:41:18:3B:ED:6C:0C:13:29:28:9C:64:4F:34:01:04:5D Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A94F9F3C9BFA7A949D3F5F620 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/11000238-2fa3-32c8-beb1-494591a35981.roa Signing time: Sun 20 Jul 2025 14:24:01 +0000 ROA not before: Sun 20 Jul 2025 14:24:01 +0000 ROA not after: Sat 18 Oct 2025 14:24:01 +0000 asID: 401846 IP address blocks: 65.87.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:f9:f3:c9:bf:a7:a9:49:d3:f5:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jul 20 14:24:01 2025 GMT Not After : Oct 18 14:24:01 2025 GMT Subject: CN=44138ad8-5d6b-4b75-83c9-b419679a79e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:cd:af:d1:cb:36:18:b9:b6:36:28:9e:20: 89:23:bf:36:21:3a:38:b2:68:c4:2b:48:f6:fb:f5: dd:0c:23:a8:02:91:68:42:2b:bd:c1:3e:47:d4:d5: e6:49:78:07:6b:4c:75:3f:c5:62:e2:6f:3f:2f:cd: 8a:b4:51:8c:d7:a2:f0:69:37:db:31:ac:f7:8e:55: a0:41:b6:81:57:96:dc:ba:bd:eb:53:61:5f:59:32: d9:a6:c9:17:e9:cd:36:44:f0:72:37:df:59:9d:cb: a1:81:62:8c:c8:3a:ef:8a:3d:8b:7e:a2:81:58:93: cc:24:b3:8f:c1:24:4d:a1:2e:2d:b7:36:d4:83:84: 59:e0:6b:fe:cd:37:4b:f5:87:6c:ae:82:fb:b9:5d: a0:bf:c2:d0:95:42:1b:a0:77:f3:8c:d0:23:3a:ed: 77:1c:4f:1e:a5:7c:4a:16:e5:8d:42:97:4d:6a:e0: a2:e1:44:08:5b:05:d5:a7:e4:f3:70:08:1b:39:7e: e3:ad:f6:1a:67:2d:c4:ba:fb:d5:59:7a:c1:aa:ab: e7:be:9f:3c:18:3e:b3:06:6b:01:27:32:2a:77:bf: 72:d5:c1:7f:53:51:5c:2a:a1:be:67:e9:d7:1d:81: 95:d1:33:85:e9:66:a9:cf:96:8e:17:82:fb:1b:fd: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:31:E5:41:18:3B:ED:6C:0C:13:29:28:9C:64:4F:34:01:04:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/11000238-2fa3-32c8-beb1-494591a35981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b3:28:a5:72:10:00:b8:4c:b0:57:7b:32:a6:73:e0:9f:a1: dc:bd:e7:19:03:f0:6f:8c:e4:85:c2:be:e6:a4:e6:8d:da:58: 82:f1:85:ab:14:68:b7:72:de:0d:53:44:a7:f9:34:18:8a:de: ef:42:02:6b:14:4c:c8:6b:72:79:a2:25:6f:95:3c:83:26:09: 45:18:10:42:ab:d1:71:be:5c:1f:61:9c:4c:b3:c1:00:b5:6b: ab:3b:ba:37:dc:d2:77:da:76:e0:f8:44:c2:00:98:34:66:4a: c5:0d:7a:38:55:52:7d:79:df:1c:79:a9:42:ae:74:9b:ea:75: 3c:f7:21:3f:fb:0d:61:1f:e6:ff:12:3c:68:73:ce:4c:eb:00: 72:77:49:20:78:63:42:06:26:00:cb:39:05:f7:5c:0a:cd:a8: 9d:11:e6:5b:25:47:7a:c5:6b:69:f1:b1:26:f4:bc:3f:4f:91: f4:d1:a7:67:40:ec:ce:61:a6:ad:a2:24:61:17:6e:c0:09:89: 51:66:6b:78:5e:16:a5:5c:26:5e:85:c0:91:12:65:81:e6:c7: ec:45:27:5b:83:c5:0d:ff:d4:b2:30:6e:bf:74:4f:06:97:4a: 12:da:12:7b:f0:d5:e2:26:bc:42:68:71:7c:cd:c5:d7:ac:6f: 12:ef:3c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU+fPJv6epSdP19iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDcyMDE0MjQwMVoXDTI1MTAxODE0MjQwMVowLzEtMCsGA1UEAxMk NDQxMzhhZDgtNWQ2Yi00Yjc1LTgzYzktYjQxOTY3OWE3OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxvNr9HLNhi5tjYoniCJI782ITo4smjEK0j2 +/XdDCOoApFoQiu9wT5H1NXmSXgHa0x1P8Vi4m8/L82KtFGM16LwaTfbMaz3jlWg QbaBV5bcur3rU2FfWTLZpskX6c02RPByN99ZncuhgWKMyDrvij2LfqKBWJPMJLOP wSRNoS4ttzbUg4RZ4Gv+zTdL9YdsroL7uV2gv8LQlUIboHfzjNAjOu13HE8epXxK FuWNQpdNauCi4UQIWwXVp+TzcAgbOX7jrfYaZy3EuvvVWXrBqqvnvp88GD6zBmsB JzIqd79y1cF/U1FcKqG+Z+nXHYGV0TOF6Wapz5aOF4L7G/2YTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQaMeVBGDvtbAwTKSicZE80AQRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMTEwMDAyMzgtMmZhMy0z MmM4LWJlYjEtNDk0NTkxYTM1OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmzKKVyEAC4TLBXezKmc+Cfody95xkD8G+M5IXCvuak5o3aWILxhasU aLdy3g1TRKf5NBiK3u9CAmsUTMhrcnmiJW+VPIMmCUUYEEKr0XG+XB9hnEyzwQC1 a6s7ujfc0nfaduD4RMIAmDRmSsUNejhVUn153xx5qUKudJvqdTz3IT/7DWEf5v8S PGhzzkzrAHJ3SSB4Y0IGJgDLOQX3XArNqJ0R5lslR3rFa2nxsSb0vD9PkfTRp2dA 7M5hpq2iJGEXbsAJiVFma3heFqVcJl6FwJESZYHmx+xFJ1uDxQ3/1LIwbr90TwaX ShLaEnvw1eImvEJocXzNxdesbxLvPBA= -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:13 2025 by rpki-client