$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa File: 87fd4b0d-6f9b-3caf-ad67-299517a44066.roa (raw, json) Hash identifier: Srytr9mf7wEv25ggyQ1mv2Wb0bxex1OGXCoI8QgrRHw= Subject key identifier: 97:16:5E:4E:A0:58:96:B8:49:1F:8E:4F:61:30:06:9A:D6:1E:FD:91 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584964844AC876F3667C02360788 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 174 IP address blocks: 65.110.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:4a:c8:76:f3:66:7c:02:36:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=68fc3541-0bbc-437f-9f00-81b29f91a879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:c5:2c:92:77:99:01:c8:a4:80:a6:a9:b8: 07:84:c9:1f:8d:db:5d:64:2f:25:99:5c:ff:7d:2b: 97:cb:ac:66:87:a6:91:7f:72:fc:3a:49:4e:6c:ab: c6:75:f4:1b:93:ad:9c:2a:d1:eb:cd:49:6f:01:36: f4:1a:83:ab:df:6c:ac:8a:eb:46:69:a5:08:a4:26: 53:05:dc:d9:a6:b8:d4:e0:ed:1b:e9:9a:5d:95:36: 81:c4:3e:dd:c7:0d:83:e5:42:92:a6:f4:3d:1f:51: 75:2c:02:58:73:af:7d:d0:39:2e:f4:9b:cf:42:c0: 63:8a:91:91:26:77:05:b8:3e:df:b8:36:37:ed:0d: aa:bb:1d:60:88:f0:87:ac:4f:23:9f:4d:bb:ae:35: 5a:9d:d1:96:e6:08:95:60:6b:4b:a4:ce:1c:eb:18: 32:6b:1e:b4:64:d7:45:a2:a7:1d:5b:3b:b7:d7:f4: b7:03:a6:58:60:54:91:f3:46:0a:9b:ba:e5:0a:8e: de:5a:a2:83:75:6f:71:78:ab:7f:89:cb:af:f0:a1: 25:47:d9:5a:f4:fb:36:6c:81:58:2a:ab:68:88:b7: d0:53:38:4b:ba:1d:a0:8f:6c:13:36:79:57:6e:e9: d6:32:7c:32:f6:b6:28:6c:c0:91:d2:6c:4f:fa:1f: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:16:5E:4E:A0:58:96:B8:49:1F:8E:4F:61:30:06:9A:D6:1E:FD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9d:1c:65:09:f9:43:c9:1b:eb:bd:76:d8:a0:3b:0c:eb:98: 3e:7b:b3:5c:32:9d:79:3c:df:2b:9b:8c:d0:22:2b:d4:be:64: a6:55:67:84:ca:3a:d9:ce:50:61:d7:82:5e:87:73:7e:13:17: 90:04:e9:e7:3c:ba:2b:c4:c5:3f:5d:58:34:7e:b6:0a:ab:cb: 27:18:18:92:79:b4:2c:63:38:6f:35:9f:e4:1a:1b:a4:d7:1b: ba:5a:b2:b1:ca:ce:ea:78:85:f2:01:bf:99:20:85:6c:ee:27: 6b:25:bc:d2:85:57:c0:88:ab:c6:f3:2e:24:24:b0:19:90:6b: d1:cb:f9:1e:53:b9:58:ca:6d:f8:11:3e:c5:9d:31:d8:0e:f7: 72:df:ec:e0:03:2b:6f:fe:02:98:ff:61:5d:09:d8:24:f3:9c: b8:55:3d:3d:40:00:ea:a4:7a:9f:a2:a2:81:c1:70:89:82:09: 20:8f:20:12:51:30:c5:75:e2:c5:29:4f:41:b7:aa:b7:3a:01: 78:af:cf:0c:5c:d0:dd:9e:1a:d0:76:64:0a:c0:e8:cb:7a:58: 7c:df:0a:86:e0:5c:e4:e8:c2:c8:95:13:36:01:92:5d:3d:42: b3:86:3d:69:e3:87:61:8c:98:87:93:aa:22:08:d2:e3:2e:e9: 77:06:4d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhErIdvNmfAI2B4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk NjhmYzM1NDEtMGJiYy00MzdmLTlmMDAtODFiMjlmOTFhODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhrFLJJ3mQHIpICmqbgHhMkfjdtdZC8lmVz/ fSuXy6xmh6aRf3L8OklObKvGdfQbk62cKtHrzUlvATb0GoOr32ysiutGaaUIpCZT BdzZprjU4O0b6ZpdlTaBxD7dxw2D5UKSpvQ9H1F1LAJYc6990Dku9JvPQsBjipGR JncFuD7fuDY37Q2qux1giPCHrE8jn027rjVandGW5giVYGtLpM4c6xgyax60ZNdF oqcdWzu31/S3A6ZYYFSR80YKm7rlCo7eWqKDdW9xeKt/icuv8KElR9la9Ps2bIFY KqtoiLfQUzhLuh2gj2wTNnlXbunWMnwy9rYobMCR0mxP+h8FJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcWXk6gWJa4SR+OT2EwBprWHv2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODdmZDRiMGQtNmY5Yi0z Y2FmLWFkNjctMjk5NTE3YTQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGdHGUJ+UPJG+u9dtigOwzrmD57s1wynXk83yubjNAiK9S+ZKZVZ4TK OtnOUGHXgl6Hc34TF5AE6ec8uivExT9dWDR+tgqryycYGJJ5tCxjOG81n+QaG6TX G7pasrHKzup4hfIBv5kghWzuJ2slvNKFV8CIq8bzLiQksBmQa9HL+R5TuVjKbfgR PsWdMdgO93Lf7OADK2/+Apj/YV0J2CTznLhVPT1AAOqkep+iooHBcImCCSCPIBJR MMV14sUpT0G3qrc6AXivzwxc0N2eGtB2ZArA6Mt6WHzfCobgXOTowsiVEzYBkl09 QrOGPWnjh2GMmIeTqiII0uMu6XcGTaU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:23 2025 by rpki-client