$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa File: 6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa (raw, json) Hash identifier: gC1xVpvFnYu2RyoRA8ECaQRpR2UfpaS2qg3fEYDDi08= Subject key identifier: 52:73:C5:EB:BA:DA:AC:63:74:90:27:D5:7D:7C:76:C4:09:43:5B:77 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F432858499DBF29717EC4BF7840413D80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 212669 IP address blocks: 65.110.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:29:71:7e:c4:bf:78:40:41:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=6b6c0170-2226-49ce-aa51-872c9b287ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:3f:8a:ef:09:b9:a3:14:55:84:d4:af:5d: ba:5a:d5:7e:46:38:6e:6e:5d:18:e3:99:21:b9:64: c2:2a:cc:e0:53:73:16:c7:c9:5f:a3:22:95:cd:43: 90:1e:d3:ed:db:86:cf:d0:52:17:9b:e9:65:93:b2: fd:da:0e:a6:1f:03:13:e4:f7:e1:dd:c4:9a:1f:46: a7:86:bb:56:68:85:58:07:d8:c0:78:ca:87:cb:95: be:1b:2d:ab:fc:28:34:54:7e:ae:0c:b1:b7:9a:05: b0:b6:73:6c:0b:9a:7d:a4:75:13:ea:4c:00:20:d2: ea:a9:a8:ab:ba:d1:6b:c8:fd:d0:1f:12:4d:2f:17: f0:ca:c3:5d:aa:f9:c7:ed:77:e8:14:a4:02:65:72: 7d:57:52:3c:c8:f2:c3:12:43:a4:e5:6d:9e:47:57: 3e:15:37:8e:27:69:67:ac:57:84:7e:e0:d6:f2:19: e1:2e:47:47:48:84:64:55:34:76:50:8f:66:34:26: 52:9f:a2:a3:af:ef:35:e0:e8:19:f6:26:d4:f1:24: ac:c1:3e:0c:5e:ff:f9:32:67:4e:81:64:ba:90:f2: dd:b0:0f:ac:61:69:17:aa:bd:23:d1:9e:2c:93:87: 13:fe:0a:b4:63:d9:c8:fe:49:0c:34:04:c9:5f:4e: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:C5:EB:BA:DA:AC:63:74:90:27:D5:7D:7C:76:C4:09:43:5B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/6fa964dd-f2d5-3a5d-bd91-93616798a6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f2:ee:dd:5e:c3:01:f4:ae:e9:8b:cb:af:86:14:38:4a:61: 2f:c1:77:9a:d6:68:70:c4:77:7a:0f:f5:bc:41:13:22:22:be: 77:24:31:ce:d6:da:e4:f5:34:42:70:f5:cd:0c:79:4a:ae:4f: f0:88:dc:41:a8:c5:a9:e2:4e:fb:6e:90:cf:85:66:09:9f:f3: 68:62:92:5f:20:48:d0:00:31:01:21:e5:9b:bb:32:86:e5:f4: 9d:06:2d:c0:09:d7:a0:77:7b:69:f8:10:4f:50:04:33:c5:e0: 03:55:1d:a7:87:fc:e2:31:b4:76:1b:34:d1:fb:dd:bd:f6:50: 76:50:dd:23:0c:77:b1:9b:96:05:7d:41:21:23:4a:d6:03:a3: e2:39:7f:3a:5a:a8:6c:49:5a:b5:7c:62:59:a9:36:cb:75:1b: c2:1e:fe:56:b7:06:bc:31:8f:36:07:43:d5:4a:6f:c2:ea:75: 24:68:74:49:df:6a:71:1f:0d:5f:57:ef:45:c2:be:dc:40:46: 25:8a:b8:4b:de:13:24:48:77:ef:03:cc:aa:f4:2f:63:b5:de: 19:d7:57:3b:67:cb:19:95:8d:07:0d:8f:b8:51:19:1d:77:f9: af:0a:b6:5b:92:a4:5b:ce:61:fd:49:a7:32:4a:1b:51:7e:8a: 85:7c:94:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvylxfsS/eEBBPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NmI2YzAxNzAtMjIyNi00OWNlLWFhNTEtODcyYzliMjg3ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKg/iu8JuaMUVYTUr126WtV+Rjhubl0Y45kh uWTCKszgU3MWx8lfoyKVzUOQHtPt24bP0FIXm+llk7L92g6mHwMT5Pfh3cSaH0an hrtWaIVYB9jAeMqHy5W+Gy2r/Cg0VH6uDLG3mgWwtnNsC5p9pHUT6kwAINLqqair utFryP3QHxJNLxfwysNdqvnH7XfoFKQCZXJ9V1I8yPLDEkOk5W2eR1c+FTeOJ2ln rFeEfuDW8hnhLkdHSIRkVTR2UI9mNCZSn6Kjr+814OgZ9ibU8SSswT4MXv/5MmdO gWS6kPLdsA+sYWkXqr0j0Z4sk4cT/gq0Y9nI/kkMNATJX04yOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJzxeu62qxjdJAn1X18dsQJQ1t3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNmZhOTY0ZGQtZjJkNS0z YTVkLWJkOTEtOTM2MTY3OThhNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3y7t1ewwH0rumLy6+GFDhKYS/Bd5rWaHDEd3oP9bxBEyIivnckMc7W 2uT1NEJw9c0MeUquT/CI3EGoxaniTvtukM+FZgmf82hikl8gSNAAMQEh5Zu7Mobl 9J0GLcAJ16B3e2n4EE9QBDPF4ANVHaeH/OIxtHYbNNH73b32UHZQ3SMMd7GblgV9 QSEjStYDo+I5fzpaqGxJWrV8YlmpNst1G8Ie/la3BrwxjzYHQ9VKb8LqdSRodEnf anEfDV9X70XCvtxARiWKuEveEyRId+8DzKr0L2O13hnXVztnyxmVjQcNj7hRGR13 +a8KtluSpFvOYf1JpzJKG1F+ioV8lG4= -----END CERTIFICATE-----Generated at Sun Apr 27 20:58:26 2025 by rpki-client