$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa File: 3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa (raw, json) Hash identifier: uTy0Pf4PbIEPRBB8vrlVALnmmGChg0QtmPVKB+4hNNI= Subject key identifier: 8B:9D:F3:7F:0E:0A:F6:4B:57:66:FF:1B:D5:56:7E:C0:84:F5:A9:3E Certificate issuer: /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Certificate serial: 010D0C9F4328584AB91B9326E4606D02BBECF400 Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 65.20.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:93:26:e4:60:6d:02:bb:ec:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=b670a521-aacc-4233-a7b4-e1ae208e117a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:ae:de:a0:d0:25:7f:82:bd:73:c3:72:d4: 27:14:1e:ba:5b:ed:62:90:62:19:47:d0:6c:65:40: bd:b7:bc:e7:43:28:77:78:55:29:a7:2f:93:16:34: b0:6e:28:fd:f2:54:e2:d8:37:2a:87:e6:9b:a7:43: f2:61:a9:01:b2:02:da:3a:45:91:41:ee:cb:24:bc: f2:23:f3:dd:62:e6:e3:a8:da:d1:e0:9d:da:48:81: 61:ec:73:93:87:b9:72:0e:45:ec:88:3b:42:d4:f6: 21:a8:9d:09:b1:be:b6:dc:f6:aa:7c:b7:3e:0a:90: b1:fb:1a:17:3d:1f:7d:48:8f:1a:17:67:4a:c9:a2: 35:76:62:49:ff:aa:40:a4:d7:1a:ef:d8:c3:02:ec: b8:af:35:8e:80:b5:47:ac:b0:0e:96:81:d1:bb:a0: 0c:19:8d:0f:f7:4a:ef:09:26:c7:47:05:29:21:3b: 50:59:4f:b8:dc:32:6a:eb:14:8a:18:f8:0b:2e:be: f2:ad:87:dd:40:bb:e1:9c:30:e0:3a:e1:e1:70:69: eb:b7:94:da:81:e7:c7:c5:37:b7:07:c6:e1:8d:72: 98:4f:79:0c:1f:97:92:6a:7e:b3:57:82:31:38:2d: d7:f1:51:a4:f7:1f:e0:af:4a:0d:6c:f5:8f:ec:c1: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9D:F3:7F:0E:0A:F6:4B:57:66:FF:1B:D5:56:7E:C0:84:F5:A9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl X509v3 Authority Key Identifier: keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer sbgp-ipAddrBlock: critical IPv4: 65.20.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ed:b7:77:3e:89:03:a8:32:c1:2c:2a:67:1b:fc:4e:85:57: 55:48:43:98:9c:8f:a5:4e:e1:87:fb:a2:2d:a9:e9:29:78:f5: ca:de:01:bd:d5:6c:56:3c:15:0e:84:05:ed:d3:42:35:62:31: 8a:b3:c6:6a:13:60:c0:30:fd:8b:44:11:44:be:69:33:6c:c2: 39:cc:08:4b:32:7d:b8:dd:a8:23:4f:ef:00:18:56:14:c2:c9: ed:a7:77:d6:55:92:c6:d0:8e:7a:50:e8:c2:90:81:ee:0a:bb: 26:ef:fd:30:bf:aa:61:7d:7b:f1:08:ba:69:86:0c:0b:25:09: 8c:f8:9a:fe:64:eb:ea:79:27:9c:71:90:77:33:99:fe:58:28: be:b9:d8:2c:ee:ba:52:10:f9:e8:17:0c:2d:2c:01:38:4c:89: c0:af:ac:38:87:52:4f:25:0f:b8:95:9f:55:31:5c:e8:95:8a: 74:e1:79:c8:cf:4f:09:27:91:5d:d7:94:67:7b:14:c0:fc:68: 46:20:61:fe:c9:e7:ac:0d:21:04:3d:b3:47:f2:a7:d4:7b:3f: ac:6c:09:bf:c8:e8:9e:ae:4a:4d:56:08:61:7c:b3:b6:2d:0c: be:31:ae:be:58:ef:f9:b1:d5:ae:04:5c:76:f4:63:5f:de:8a: 78:15:93:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5Mm5GBtArvs9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmM2NjYTEtNmNkNC00MjMwLTkyZDMtMjBhYmY0ZGI3 MzEyMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YjY3MGE1MjEtYWFjYy00MjMzLWE3YjQtZTFhZTIwOGUxMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Ou3qDQJX+CvXPDctQnFB66W+1ikGIZR9Bs ZUC9t7znQyh3eFUppy+TFjSwbij98lTi2Dcqh+abp0PyYakBsgLaOkWRQe7LJLzy I/PdYubjqNrR4J3aSIFh7HOTh7lyDkXsiDtC1PYhqJ0Jsb623PaqfLc+CpCx+xoX PR99SI8aF2dKyaI1dmJJ/6pApNca79jDAuy4rzWOgLVHrLAOloHRu6AMGY0P90rv CSbHRwUpITtQWU+43DJq6xSKGPgLLr7yrYfdQLvhnDDgOuHhcGnrt5TagefHxTe3 B8bhjXKYT3kMH5eSan6zV4IxOC3X8VGk9x/gr0oNbPWP7MFCXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIud838OCvZLV2b/G9VWfsCE9ak+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYz Y2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFiZjRkYjczMTIvM2YxYTA2MTgtNzMyMS0z ZmU0LTgwNTItZmIwZTQ0Mjc3ZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2ZmM2NjYTEtNmNkNC00MjMwLTky ZDMtMjBhYmY0ZGI3MzEyL2NmZjNjY2ExLTZjZDQtNDIzMC05MmQzLTIwYWJmNGRi NzMxMi5jcmwwHwYDVR0jBBgwFoAUd+NEOHMzmN13phfC24B3cczjtZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYzY2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFi ZjRkYjczMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDtt3c+iQOoMsEsKmcb/E6FV1VIQ5icj6VO4Yf7oi2p6Sl49creAb3V bFY8FQ6EBe3TQjViMYqzxmoTYMAw/YtEEUS+aTNswjnMCEsyfbjdqCNP7wAYVhTC ye2nd9ZVksbQjnpQ6MKQge4Kuybv/TC/qmF9e/EIummGDAslCYz4mv5k6+p5J5xx kHczmf5YKL652CzuulIQ+egXDC0sAThMicCvrDiHUk8lD7iVn1UxXOiVinThecjP TwknkV3XlGd7FMD8aEYgYf7J56wNIQQ9s0fyp9R7P6xsCb/I6J6uSk1WCGF8s7Yt DL4xrr5Y7/mx1a4EXHb0Y1/eingVk0E= -----END CERTIFICATE-----Generated at Tue Aug 5 17:25:37 2025 by rpki-client