$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa File: dd8ac448-7845-3707-82ae-e039ea217c8d.roa (raw, json) Hash identifier: AIh0KDJWwvuJwT34Gjudw3/LO23e8aBlWpF04LKCsAo= Subject key identifier: 04:0A:79:6A:FE:85:03:E8:59:3F:49:0A:B3:01:A3:26:89:5C:08:62 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F43285849E4EFC0EBC7D82A3EB594EC80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 399629 IP address blocks: 65.38.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c0:eb:c7:d8:2a:3e:b5:94:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=c8510713-69b7-4783-b715-e915c335b29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:63:af:e9:c0:c4:9a:7b:93:61:5c:92:27: 5d:08:6e:1d:54:a9:0a:2a:b9:2f:8d:f7:86:67:d4: 26:a7:2d:90:f0:49:7a:38:e9:42:2a:84:16:d1:f8: 03:11:ef:2d:ae:d2:bd:38:58:43:f4:8d:b1:b9:fd: c5:ab:b1:53:ce:bf:75:cd:15:ea:75:30:69:37:ae: db:6c:f2:a5:c0:ef:69:c0:8c:a4:a2:83:bf:48:14: 00:1a:6f:97:28:f5:da:01:02:81:61:4f:1c:c8:59: 47:3e:2a:31:23:53:e3:80:2d:ae:67:b9:fb:aa:d0: ae:8b:c1:41:85:ba:7a:14:11:9b:32:d0:fd:8c:a1: 1f:1c:3a:17:c5:a1:d4:1a:c5:53:03:d4:d0:0e:74: c7:ae:90:5d:19:16:75:f1:41:1d:e9:86:6e:9f:14: 5b:09:d3:78:d5:62:f5:29:9b:0f:11:61:6c:c2:f4: d6:14:e5:60:77:77:67:b6:56:94:2a:51:f8:55:ad: b7:76:f0:41:a1:47:3b:3b:d6:c3:7c:8f:57:12:86: 0a:cf:8e:84:46:71:eb:b2:5b:d8:5c:cd:3e:48:4b: 0c:19:6d:68:d3:92:80:e5:c0:d9:ba:92:8b:ea:16: 00:14:a3:72:7b:27:7e:59:6c:00:12:a5:c3:1d:bf: f1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:79:6A:FE:85:03:E8:59:3F:49:0A:B3:01:A3:26:89:5C:08:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 65.38.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:21:5a:53:28:00:08:12:e3:c4:4e:f1:62:2c:a6:64:aa:e7: 7c:65:20:ed:1f:19:f4:2a:93:09:52:2b:b8:02:30:a1:a9:7e: d8:da:2c:30:02:bf:c2:17:33:8d:81:d8:58:08:25:6e:ab:66: ae:c4:98:f5:f0:e3:17:6c:bf:89:cc:81:62:de:ff:c2:37:77: 39:e1:28:5b:10:0b:04:20:98:d7:38:fb:8e:84:c4:82:68:66: 39:04:42:4e:29:8e:ff:c3:a9:ff:be:ae:06:7f:41:ff:54:f3: de:93:b7:b2:a4:e4:39:42:13:0e:d3:4b:7f:04:a1:9c:18:37: d1:db:8f:2c:c4:7a:93:27:e9:22:52:72:dd:93:2c:22:ce:bf: 8a:a2:6d:d9:9b:1f:76:2c:ce:9b:5a:a8:9d:a6:0c:21:29:b8: ff:7c:ce:6d:e9:c2:34:af:d4:d4:c5:22:97:51:53:83:1b:e6: db:be:49:4c:3a:6b:7a:5f:d5:bc:85:ff:84:06:1e:1a:37:c1: 80:3c:d1:7f:0d:ea:db:1b:5f:26:7e:5a:22:1d:4e:c4:cc:72: c4:21:4d:25:05:07:62:07:65:77:6e:f9:33:f2:73:e8:e6:9d: 72:8c:91:78:3b:31:58:33:f8:0a:9f:f8:31:db:eb:40:45:61: f0:cf:fa:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78Drx9gqPrWU7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk Yzg1MTA3MTMtNjliNy00NzgzLWI3MTUtZTkxNWMzMzViMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBJjr+nAxJp7k2FckiddCG4dVKkKKrkvjfeG Z9Qmpy2Q8El6OOlCKoQW0fgDEe8trtK9OFhD9I2xuf3Fq7FTzr91zRXqdTBpN67b bPKlwO9pwIykooO/SBQAGm+XKPXaAQKBYU8cyFlHPioxI1PjgC2uZ7n7qtCui8FB hbp6FBGbMtD9jKEfHDoXxaHUGsVTA9TQDnTHrpBdGRZ18UEd6YZunxRbCdN41WL1 KZsPEWFswvTWFOVgd3dntlaUKlH4Va23dvBBoUc7O9bDfI9XEoYKz46ERnHrslvY XM0+SEsMGW1o05KA5cDZupKL6hYAFKNyeyd+WWwAEqXDHb/xQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQKeWr+hQPoWT9JCrMBoyaJXAhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZGQ4YWM0NDgtNzg0NS0z NzA3LTgyYWUtZTAzOWVhMjE3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAhWlMoAAgS48RO8WIspmSq53xlIO0fGfQqkwlSK7gCMKGpftjaLDAC v8IXM42B2FgIJW6rZq7EmPXw4xdsv4nMgWLe/8I3dznhKFsQCwQgmNc4+46ExIJo ZjkEQk4pjv/Dqf++rgZ/Qf9U896Tt7Kk5DlCEw7TS38EoZwYN9HbjyzEepMn6SJS ct2TLCLOv4qibdmbH3YszptaqJ2mDCEpuP98zm3pwjSv1NTFIpdRU4Mb5tu+SUw6 a3pf1byF/4QGHho3wYA80X8N6tsbXyZ+WiIdTsTMcsQhTSUFB2IHZXdu+TPyc+jm nXKMkXg7MVgz+Aqf+DHb60BFYfDP+kY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:26:27 2025 by rpki-client