$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c61cd111-ec9f-33e1-acb4-0daef830df7e.roa File: c61cd111-ec9f-33e1-acb4-0daef830df7e.roa (raw, json) Hash identifier: osXb+RHuvQ6efDZ9ri1CJOmIG1wfRoDlDOJmGK3BH/Q= Subject key identifier: 87:2C:81:03:81:A4:DD:5E:90:DA:46:05:01:2D:41:72:AA:52:2B:B1 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F43285849D16513C7682C9CDD56953500 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c61cd111-ec9f-33e1-acb4-0daef830df7e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7018 IP address blocks: 65.87.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:13:c7:68:2c:9c:dd:56:95:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=fb7d0913-f4de-45b7-9abb-8254a7ff56ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:51:64:56:7e:41:83:ae:bc:30:b8:33:6a: ed:99:dd:3c:aa:77:02:7c:82:94:7d:cf:98:53:81: 27:80:80:ac:4f:c4:10:4f:1a:e7:61:c9:b4:15:61: 78:a1:f5:11:d4:da:30:6f:ea:80:e9:f2:1d:13:dc: 0e:d4:ee:c8:15:9e:1e:51:e7:61:2c:a5:d2:dc:28: 95:88:e0:30:35:30:11:62:b2:9b:7b:70:95:37:c9: 3d:a4:46:c3:54:78:70:71:34:91:d8:ed:16:60:f5: 5e:32:4e:34:3f:d5:45:1f:79:84:99:68:65:83:ea: c4:df:08:2b:ea:09:f3:b7:b9:fb:72:86:fb:44:66: bc:11:30:26:b5:1d:2c:c8:76:c5:5e:f3:a4:a6:de: df:02:84:d3:ea:99:f9:36:65:65:1b:61:59:a2:9e: b4:4a:88:ab:c0:81:e3:45:b5:31:58:20:81:71:65: a2:f0:3f:29:4c:98:46:e7:8c:86:99:09:c3:fd:08: 79:c6:be:08:d3:2a:f7:64:25:99:48:90:1d:c8:e0: 69:6d:17:4d:63:9f:1b:cc:29:15:57:4c:96:f4:d8: f8:89:b6:3d:6b:93:cd:36:b6:67:2a:8c:11:aa:bc: a9:dc:ce:ae:1b:ae:20:00:5e:41:77:ea:9c:a2:72: 59:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2C:81:03:81:A4:DD:5E:90:DA:46:05:01:2D:41:72:AA:52:2B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/c61cd111-ec9f-33e1-acb4-0daef830df7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a9:16:2c:dc:a7:7f:f8:d0:41:14:cc:71:31:67:f3:8a:c1: e7:16:65:43:1f:81:62:40:5f:f3:20:a3:86:e6:ed:ed:31:ac: c7:70:58:6a:1f:02:46:d4:9b:38:7e:f1:f4:ad:02:16:af:f8: 15:74:10:c0:62:ba:a4:d4:64:08:c5:fd:bf:81:ce:26:09:c9: 5a:94:b8:8d:ef:15:be:2d:42:80:01:1e:4a:10:df:d5:6b:0f: ef:4e:86:77:df:13:b9:9d:bc:88:f5:41:3e:14:2b:6a:66:ef: 3a:4f:1f:33:ea:fb:1d:94:c4:2e:c0:e6:f9:b3:15:9d:b4:85: 05:f0:08:17:79:9b:19:7f:b2:d9:99:91:e3:9b:c3:80:2b:de: 69:e8:6e:c6:43:63:eb:d0:d3:fb:4d:5d:45:9c:4f:79:31:64: 11:66:5e:e1:4a:7f:36:f3:13:9b:0b:f0:09:b5:be:14:50:68: b2:2b:30:75:f9:6b:5e:42:26:9d:a6:d6:38:b7:1b:4b:5b:13: 89:fb:ca:5e:05:bc:1a:ce:54:ff:f7:dc:05:aa:04:fa:cd:ae: 76:7e:b9:26:5e:5e:f2:9b:60:d6:e2:03:b9:45:5c:86:ad:0e: 83:4e:0e:2f:af:ce:0b:57:cf:f6:a8:71:cd:44:91:bc:d9:b4: 53:60:9c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRPHaCyc3VaVNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZmI3ZDA5MTMtZjRkZS00NWI3LTlhYmItODI1NGE3ZmY1NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAVRZFZ+QYOuvDC4M2rtmd08qncCfIKUfc+Y U4EngICsT8QQTxrnYcm0FWF4ofUR1Nowb+qA6fIdE9wO1O7IFZ4eUedhLKXS3CiV iOAwNTARYrKbe3CVN8k9pEbDVHhwcTSR2O0WYPVeMk40P9VFH3mEmWhlg+rE3wgr 6gnzt7n7cob7RGa8ETAmtR0syHbFXvOkpt7fAoTT6pn5NmVlG2FZop60SoirwIHj RbUxWCCBcWWi8D8pTJhG54yGmQnD/Qh5xr4I0yr3ZCWZSJAdyOBpbRdNY58bzCkV V0yW9Nj4ibY9a5PNNrZnKowRqryp3M6uG64gAF5Bd+qconJZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcsgQOBpN1ekNpGBQEtQXKqUiuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvYzYxY2QxMTEtZWM5Zi0z M2UxLWFjYjQtMGRhZWY4MzBkZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIepFizcp3/40EEUzHExZ/OKwecWZUMfgWJAX/Mgo4bm7e0xrMdwWGof AkbUmzh+8fStAhav+BV0EMBiuqTUZAjF/b+BziYJyVqUuI3vFb4tQoABHkoQ39Vr D+9OhnffE7mdvIj1QT4UK2pm7zpPHzPq+x2UxC7A5vmzFZ20hQXwCBd5mxl/stmZ keObw4Ar3mnobsZDY+vQ0/tNXUWcT3kxZBFmXuFKfzbzE5sL8Am1vhRQaLIrMHX5 a15CJp2m1ji3G0tbE4n7yl4FvBrOVP/33AWqBPrNrnZ+uSZeXvKbYNbiA7lFXIat DoNODi+vzgtXz/aocc1EkbzZtFNgnJY= -----END CERTIFICATE-----Generated at Sun Jun 15 11:40:46 2025 by rpki-client