$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa File: 2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa (raw, json) Hash identifier: P1+SHRPM7FdHvlaep7nHwoN4oOdVSHTJI53c7FFpyHI= Subject key identifier: A7:03:94:8F:FE:4C:63:88:7D:8B:20:3A:4C:D6:AA:B3:71:EC:B9:C5 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A9900D0178DB62D11B2335D80 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 213990 IP address blocks: 65.87.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:d0:17:8d:b6:2d:11:b2:33:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=8b99a107-f6b5-43b5-bb5c-012a165131e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:28:f2:ba:5a:3b:14:3d:f2:bc:d2:21:ee:01: 4a:78:29:97:95:ad:6f:3e:0b:d8:6d:f4:c6:7e:ae: 2a:96:35:10:ce:77:6b:08:c0:57:65:9c:fa:c3:0b: 13:73:8d:72:f6:8a:b9:89:be:46:cf:42:dc:d6:d3: 45:f8:9c:1f:2c:a3:73:a1:95:e3:83:da:3a:70:40: 3c:aa:77:10:e3:d4:c6:b1:54:e4:ab:98:c0:23:70: 95:56:b8:6c:89:a2:d8:4d:63:c4:b1:fe:3b:49:05: 4d:21:5c:c7:d3:91:6b:61:d9:92:db:8c:87:96:3d: f1:ad:a0:80:51:fa:5a:3d:c3:7c:26:26:d4:97:13: 5f:f3:7b:e1:f6:da:86:f5:5c:89:5f:f2:f1:f4:9b: 38:f3:90:15:2f:64:8a:1f:36:fa:ca:c1:49:b2:b1: 67:b2:0f:df:31:d6:26:00:ce:45:99:05:a8:da:19: 4d:45:c3:34:98:1f:98:4e:ca:d3:da:ff:0f:cc:1e: ee:7f:a7:54:c4:d1:b9:af:d4:8e:c4:11:69:b2:12: a7:d1:cf:de:c3:d6:c2:62:1f:86:18:6d:da:2d:7b: b6:ea:71:05:99:a2:a1:98:2a:5d:bf:f9:d6:16:2a: f0:6e:85:b9:8f:ec:16:4c:e3:97:92:2a:c1:f5:cd: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:03:94:8F:FE:4C:63:88:7D:8B:20:3A:4C:D6:AA:B3:71:EC:B9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8d:a1:ec:2d:8a:0b:8c:f3:d6:b7:55:c8:c1:4b:9d:36:eb: c8:f1:04:44:4c:ba:e6:a0:67:73:e1:af:3a:00:b1:d1:06:02: 2c:e7:91:f8:94:ac:c8:69:e3:bb:28:ed:4a:62:36:aa:42:b7: f6:a2:77:15:49:24:6b:eb:41:99:9b:7e:36:c7:84:e1:b3:df: 91:ef:c9:7d:7c:f2:48:b1:d9:8a:8f:77:34:04:74:d7:11:cc: bf:db:c8:91:ac:3a:9f:8e:4b:3f:9d:35:8e:c3:02:2d:72:4d: ee:6d:fd:01:f4:98:12:76:bf:85:fa:0a:6a:22:74:b6:b7:8e: 79:4f:c6:e4:f1:eb:1f:6d:bb:88:05:b2:7e:10:bd:5b:3e:e8: 77:e3:35:e9:8a:ac:cc:25:1d:9b:8a:67:a0:57:4a:84:96:32: 9a:0b:d9:c6:b9:26:c2:da:47:1c:ba:9d:38:b7:32:3e:07:78: d5:c5:58:a2:58:86:98:55:6c:c2:1d:ef:64:ad:20:8a:ba:bb: b1:95:b2:56:d4:2e:fa:5a:4f:be:68:bd:5a:f0:88:2a:74:30: 90:ce:ac:bf:fc:de:9c:5d:c2:c0:5f:fe:b7:f3:6f:a7:6f:1a: f8:9e:8a:c1:ca:4a:9e:af:c8:2f:c1:4e:f2:67:48:ae:26:21: 88:7c:f5:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZANAXjbYtEbIzXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk OGI5OWExMDctZjZiNS00M2I1LWJiNWMtMDEyYTE2NTEzMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCjyulo7FD3yvNIh7gFKeCmXla1vPgvYbfTG fq4qljUQzndrCMBXZZz6wwsTc41y9oq5ib5Gz0Lc1tNF+JwfLKNzoZXjg9o6cEA8 qncQ49TGsVTkq5jAI3CVVrhsiaLYTWPEsf47SQVNIVzH05FrYdmS24yHlj3xraCA UfpaPcN8JibUlxNf83vh9tqG9VyJX/Lx9Js485AVL2SKHzb6ysFJsrFnsg/fMdYm AM5FmQWo2hlNRcM0mB+YTsrT2v8PzB7uf6dUxNG5r9SOxBFpshKn0c/ew9bCYh+G GG3aLXu26nEFmaKhmCpdv/nWFirwboW5j+wWTOOXkirB9c3HlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcDlI/+TGOIfYsgOkzWqrNx7LnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMjA1MmVjM2EtZGUzNi0z YzUxLTkyY2UtM2FjZTMwNDFhNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASNoewtiguM89a3VcjBS50268jxBERMuuagZ3PhrzoAsdEGAiznkfiU rMhp47so7UpiNqpCt/aidxVJJGvrQZmbfjbHhOGz35HvyX188kix2YqPdzQEdNcR zL/byJGsOp+OSz+dNY7DAi1yTe5t/QH0mBJ2v4X6CmoidLa3jnlPxuTx6x9tu4gF sn4QvVs+6HfjNemKrMwlHZuKZ6BXSoSWMpoL2ca5JsLaRxy6nTi3Mj4HeNXFWKJY hphVbMId72StIIq6u7GVslbULvpaT75ovVrwiCp0MJDOrL/83pxdwsBf/rfzb6dv GvieisHKSp6vyC/BTvJnSK4mIYh89TQ= -----END CERTIFICATE-----Generated at Fri Aug 8 00:44:57 2025 by rpki-client