$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa File: e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa (raw, json) Hash identifier: tPUAYOTe0g2EQLL+DzL/Ds7Kf6kkhPKgm0hvQyGJvrs= Subject key identifier: 03:F5:6F:01:A2:28:5C:A2:7A:94:78:77:11:C4:EA:D8:B3:8A:87:F8 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584A41106254E08B83DCB1941320 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 62802 IP address blocks: 65.170.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:62:54:e0:8b:83:dc:b1:94:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=c3129c54-6815-40c3-b505-bf7ca486f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6e:2e:95:c2:7d:c8:47:ad:76:e8:ad:a2:2a: 4f:96:87:56:e0:8d:c5:ab:e1:01:73:81:4e:b4:28: c6:ca:89:40:62:e6:e4:69:f2:96:de:97:99:9f:89: 1d:c7:e3:20:87:d2:f8:d2:66:04:56:2e:c4:90:08: 97:3b:60:62:d9:d4:ea:0b:f7:d0:37:2e:61:f1:cc: b7:e6:21:96:28:00:ec:b6:57:66:3e:74:ad:fb:18: 98:4f:d0:c9:ec:2f:e5:55:99:18:89:4a:8f:82:22: 47:49:46:6b:b1:11:46:82:2e:5d:de:10:e7:5e:f5: 7e:33:40:74:89:df:3f:ec:86:99:3c:7d:6b:74:56: 3d:31:21:1b:e9:90:84:8b:cf:d6:44:f0:98:08:61: 39:a4:52:f9:0e:98:ac:c2:9f:e7:86:ca:88:4f:04: 24:78:72:90:3b:85:89:e3:ea:de:cb:de:50:aa:fd: c4:64:f8:58:7c:c6:ea:4a:77:d4:3a:a3:4d:6e:ba: ab:91:7c:08:5b:c6:df:ae:61:17:a6:67:55:20:31: dd:f3:01:9a:aa:c2:e3:c9:a0:f0:41:89:d2:e3:6b: 07:f4:d6:96:27:f5:3f:35:87:ca:e9:08:24:ea:8c: e2:3e:2c:19:d1:ba:89:f7:4a:a3:a1:e1:4a:ca:e9: ff:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F5:6F:01:A2:28:5C:A2:7A:94:78:77:11:C4:EA:D8:B3:8A:87:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e1b57de2-8602-3009-8bb0-7a0c43c0989c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 65.170.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:67:7f:b7:54:97:05:ec:a2:96:27:63:7d:aa:ae:27:c4:76: cf:7e:95:e4:65:42:45:cd:54:b3:0d:2d:e0:b2:34:14:1d:53: e2:6f:49:e0:cb:8c:3a:0b:d2:3e:28:fd:a0:c0:4a:8c:54:1b: 61:35:4d:2e:38:1b:09:aa:29:a3:58:1a:28:dc:29:04:68:03: f9:a3:03:25:2d:fa:6a:c6:cc:ab:bb:14:91:63:36:7d:53:45: d0:65:dd:f1:93:e0:03:ec:e8:a1:95:a9:7e:e7:61:60:81:0f: a8:4f:86:4b:a2:b8:03:80:ea:80:e4:d8:87:96:22:cf:1c:34: 70:35:a6:20:f5:28:61:ca:7e:6e:0d:d5:e8:49:d8:57:0a:83: 88:bf:13:4e:fb:29:9f:4e:a7:70:8b:9b:c3:d5:ab:43:0c:e7: eb:95:20:e7:d1:df:67:8a:d8:b6:bc:fb:54:5f:5b:cf:6a:93: e0:c8:73:f7:3c:6f:96:e0:8d:19:50:86:21:69:b3:ea:8f:2f: 10:e1:7b:1a:46:d6:f9:eb:07:3d:9e:86:0e:eb:09:d7:e0:9d: e2:0d:b9:3e:14:1a:f9:b9:ef:61:aa:cb:5a:bb:3f:61:08:f2: ac:11:08:05:fb:0c:3d:4c:58:a5:df:28:04:d1:ee:a0:0e:27: 02:d0:bf:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEGJU4IuD3LGUEyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YzMxMjljNTQtNjgxNS00MGMzLWI1MDUtYmY3Y2E0ODZmOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG4ulcJ9yEetduitoipPlodW4I3Fq+EBc4FO tCjGyolAYubkafKW3peZn4kdx+Mgh9L40mYEVi7EkAiXO2Bi2dTqC/fQNy5h8cy3 5iGWKADstldmPnSt+xiYT9DJ7C/lVZkYiUqPgiJHSUZrsRFGgi5d3hDnXvV+M0B0 id8/7IaZPH1rdFY9MSEb6ZCEi8/WRPCYCGE5pFL5Dpiswp/nhsqITwQkeHKQO4WJ 4+rey95Qqv3EZPhYfMbqSnfUOqNNbrqrkXwIW8bfrmEXpmdVIDHd8wGaqsLjyaDw QYnS42sH9NaWJ/U/NYfK6Qgk6oziPiwZ0bqJ90qjoeFKyun/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP1bwGiKFyiepR4dxHE6tiziof4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZTFiNTdkZTItODYwMi0z MDA5LThiYjAtN2EwYzQzYzA5ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQarKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtnf7dUlwXsopYnY32qrifEds9+leRlQkXNVLMNLeCyNBQdU+JvSeDL jDoL0j4o/aDASoxUG2E1TS44GwmqKaNYGijcKQRoA/mjAyUt+mrGzKu7FJFjNn1T RdBl3fGT4APs6KGVqX7nYWCBD6hPhkuiuAOA6oDk2IeWIs8cNHA1piD1KGHKfm4N 1ehJ2FcKg4i/E077KZ9Op3CLm8PVq0MM5+uVIOfR32eK2La8+1RfW89qk+DIc/c8 b5bgjRlQhiFps+qPLxDhexpG1vnrBz2ehg7rCdfgneINuT4UGvm572Gqy1q7P2EI 8qwRCAX7DD1MWKXfKATR7qAOJwLQvyM= -----END CERTIFICATE-----Generated at Sun Jun 29 20:46:37 2025 by rpki-client