$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa File: 2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa (raw, json) Hash identifier: qiZoUoCAxOVduYRD/VAz3TAZ/3ceWeEz+dVkbUlDolc= Subject key identifier: 1C:F1:91:8D:C2:D5:F9:C7:93:B9:90:71:E6:F5:44:B6:5B:AF:45:2C Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F43285848D9E7B55B508FC436E04E6200 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa Signing time: Tue 11 Feb 2025 21:24:10 +0000 ROA not before: Tue 11 Feb 2025 21:24:10 +0000 ROA not after: Mon 12 May 2025 20:24:10 +0000 asID: 213990 IP address blocks: 65.87.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:e7:b5:5b:50:8f:c4:36:e0:4e:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Feb 11 21:24:10 2025 GMT Not After : May 12 20:24:10 2025 GMT Subject: CN=865388f9-2b4c-44a6-baba-b876bd1b7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:33:5c:21:46:ed:fc:f7:d8:9d:33:34:3c: 21:85:b1:d2:7e:c4:28:3a:7e:bf:02:62:17:af:ac: cd:61:65:2b:ab:b3:cf:00:cb:f4:65:47:f2:ca:d7: f4:ac:0a:14:b1:b0:c7:b4:2c:21:0a:6a:c3:a4:77: 2d:b7:d9:69:15:d4:9f:f3:86:84:af:d9:4f:cc:01: 08:0a:b5:e1:a8:5b:54:d6:f0:13:05:e1:57:8a:24: 28:c3:a9:79:bc:02:0e:f0:f3:ba:6c:c7:57:81:bf: 87:98:03:a2:fd:25:ea:d7:a2:7f:f9:48:a6:a1:a2: f0:95:5e:05:c8:71:00:bb:78:94:04:70:40:6d:5f: a9:18:d4:c7:45:bd:93:18:a0:b3:38:45:ea:46:f0: 53:db:16:ce:4a:22:e4:0a:94:3d:19:7d:28:02:83: 9c:0e:40:83:65:85:1c:60:20:70:bb:27:f5:b0:89: 7d:89:0b:75:d4:fa:5c:cd:86:ec:6b:ad:40:88:42: e2:dc:ac:6e:fb:f7:47:c9:0c:3e:a9:28:43:b6:45: 9a:34:8f:00:38:93:a4:fe:ac:3a:be:9e:7d:18:71: cf:d3:1c:7d:69:ac:a4:e8:ae:47:6e:f0:14:3f:e8: 94:e4:b1:5d:bf:e9:29:b9:c5:53:2d:cf:f8:5f:81: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:91:8D:C2:D5:F9:C7:93:B9:90:71:E6:F5:44:B6:5B:AF:45:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3d:67:f6:1e:5f:03:b5:67:e9:20:45:7a:b8:c2:59:10:76: 74:54:a7:87:d1:d1:43:15:1c:d6:b9:39:dd:25:f9:43:fe:76: 70:b4:df:31:43:d9:fa:94:22:8b:22:17:4b:66:ca:d3:84:b8: 28:b5:5d:da:04:78:6c:a7:83:43:5c:3c:b0:d5:63:24:42:20: af:d6:a7:a4:be:00:dd:52:91:3c:7c:08:00:8c:4f:36:68:d5: 85:6f:c9:a7:fa:e0:b3:6b:af:a0:4f:b4:fe:e0:de:06:25:36: 2e:46:b2:f1:8a:20:11:6c:d1:f5:a6:6b:41:cb:59:14:86:07: d9:e4:37:d1:34:63:40:25:4c:9a:71:17:71:80:e5:76:e8:44: 92:8c:d4:49:ed:7a:94:48:1f:8f:54:1d:d1:4c:57:c3:a3:16: e1:a5:22:d7:82:46:c5:49:84:7a:90:73:a7:bf:cc:fa:a0:86: d7:0c:e0:69:ae:ff:6c:53:6a:56:e0:f3:5a:4e:e5:87:62:0d: 9e:f1:c4:fd:c4:4d:18:7c:23:26:0e:77:90:3c:1b:68:70:67: c7:f7:55:b4:42:f8:18:c4:be:1f:e5:35:d3:a8:60:4e:f3:0e: c2:42:56:7b:a8:08:a3:38:0f:66:08:09:24:75:45:af:c6:ff: 7f:8e:ce:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZ57VbUI/ENuBOYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDIxMTIxMjQxMFoXDTI1MDUxMjIwMjQxMFowLzEtMCsGA1UEAxMk ODY1Mzg4ZjktMmI0Yy00NGE2LWJhYmEtYjg3NmJkMWI3MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTszXCFG7fz32J0zNDwhhbHSfsQoOn6/AmIX r6zNYWUrq7PPAMv0ZUfyytf0rAoUsbDHtCwhCmrDpHctt9lpFdSf84aEr9lPzAEI CrXhqFtU1vATBeFXiiQow6l5vAIO8PO6bMdXgb+HmAOi/SXq16J/+UimoaLwlV4F yHEAu3iUBHBAbV+pGNTHRb2TGKCzOEXqRvBT2xbOSiLkCpQ9GX0oAoOcDkCDZYUc YCBwuyf1sIl9iQt11PpczYbsa61AiELi3Kxu+/dHyQw+qShDtkWaNI8AOJOk/qw6 vp59GHHP0xx9aayk6K5HbvAUP+iU5LFdv+kpucVTLc/4X4FLJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzxkY3C1fnHk7mQceb1RLZbr0UsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMjA1MmVjM2EtZGUzNi0z YzUxLTkyY2UtM2FjZTMwNDFhNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY9Z/YeXwO1Z+kgRXq4wlkQdnRUp4fR0UMVHNa5Od0l+UP+dnC03zFD 2fqUIosiF0tmytOEuCi1XdoEeGyng0NcPLDVYyRCIK/Wp6S+AN1SkTx8CACMTzZo 1YVvyaf64LNrr6BPtP7g3gYlNi5GsvGKIBFs0fWma0HLWRSGB9nkN9E0Y0AlTJpx F3GA5XboRJKM1EntepRIH49UHdFMV8OjFuGlIteCRsVJhHqQc6e/zPqghtcM4Gmu /2xTalbg81pO5YdiDZ7xxP3ETRh8IyYOd5A8G2hwZ8f3VbRC+BjEvh/lNdOoYE7z DsJCVnuoCKM4D2YICSR1Ra/G/3+Ozns= -----END CERTIFICATE-----Generated at Sun Apr 27 04:04:22 2025 by rpki-client