$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa File: 94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa (raw, json) Hash identifier: rEQ4+l6D00hUnXytYi+PTn8P1se9qQ2D2+Q0MSoBdnI= Subject key identifier: 39:B2:95:8F:2E:05:EA:A1:C4:99:25:F1:13:53:1F:A0:9C:22:C8:21 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584A56004D8AECF83171495E89C0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 13768 IP address blocks: 65.39.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4d:8a:ec:f8:31:71:49:5e:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=be35a632-c2fb-4afd-a0c3-7c8ae11effce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:f4:d6:76:79:b2:d0:8e:5d:71:5a:2b:8c: 53:e4:e6:98:c2:7e:dc:5b:b2:24:c2:9c:fa:46:df: 08:a2:87:1f:db:b6:9e:34:f4:9e:23:2a:57:a1:fc: d4:ae:d4:10:f9:eb:87:ad:67:a6:78:31:95:34:af: 9a:f3:73:ca:89:84:0b:d0:4e:3c:09:4e:cc:21:5d: f2:5d:ab:a5:01:02:8a:44:dd:93:28:02:5f:f5:cc: c4:dc:83:32:89:74:ae:99:e1:84:f6:28:38:8d:dc: ff:23:4f:ad:34:f7:0b:73:2b:14:15:9a:89:8f:f8: 57:49:8b:84:1a:ad:bc:88:11:8b:74:01:6f:58:9b: fe:37:cc:85:c9:8c:9d:21:7c:bc:76:07:92:42:f3: 21:56:92:45:90:64:dd:c2:cb:6f:21:9a:a0:86:cc: 84:d0:fb:03:04:b8:fc:98:0a:49:be:63:78:de:11: 3d:63:b9:42:36:ea:44:e1:78:1e:1d:e3:ba:07:7e: cd:aa:29:33:54:1a:b2:06:44:06:71:e0:c7:4c:13: 77:5b:bc:26:59:5b:1e:42:ea:da:ab:5d:57:ef:0f: cd:30:f1:71:36:b9:8f:fa:d3:c2:21:73:e8:f8:22: 71:75:05:9e:6a:4f:6b:90:df:c8:bc:9d:b8:be:b5: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B2:95:8F:2E:05:EA:A1:C4:99:25:F1:13:53:1F:A0:9C:22:C8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:86:e3:1d:51:50:8d:4d:57:c3:9f:7d:bc:a3:b1:fe:2c:98: 73:6b:5f:36:60:41:54:d8:00:b6:c6:8b:4c:2a:e2:57:11:c4: 55:b2:f1:24:30:33:5c:37:ec:f4:5e:c2:38:a6:fa:9a:af:8b: ba:a5:df:10:b7:4e:37:03:50:d7:92:55:50:16:ce:8e:47:31: 72:89:ad:3c:08:d8:7d:95:19:3c:30:eb:94:9f:c1:f3:d2:ba: ac:98:f8:b6:c5:04:1a:5b:9e:bc:2e:01:ab:a6:87:cd:db:da: 2e:e3:ce:7f:67:e9:eb:3c:21:f6:5d:ec:d1:33:ee:d7:01:5f: 3b:b5:e9:71:af:da:e7:ae:fa:16:0f:a8:16:d3:66:45:ca:8f: 27:c4:04:41:31:10:21:95:98:5d:5f:24:b6:f5:7b:93:43:00: 46:71:6b:15:5c:e1:b3:1e:52:cb:9a:97:23:ca:f7:af:da:18: 9a:76:06:23:94:7a:20:25:68:71:81:e0:96:4e:d9:81:1f:0b: b8:09:5e:52:bb:8c:89:40:97:1e:10:c3:6a:2d:a2:92:6d:1e: 4e:19:21:4b:53:c7:49:af:c3:0a:85:54:e6:86:b1:b2:88:c7: 17:51:1f:fd:61:9a:2e:08:fa:8f:60:cb:55:0a:ea:9e:4f:c9: 2b:07:29:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAE2K7PgxcUleicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk YmUzNWE2MzItYzJmYi00YWZkLWEwYzMtN2M4YWUxMWVmZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXD01nZ5stCOXXFaK4xT5OaYwn7cW7Ikwpz6 Rt8Ioocf27aeNPSeIypXofzUrtQQ+euHrWemeDGVNK+a83PKiYQL0E48CU7MIV3y XaulAQKKRN2TKAJf9czE3IMyiXSumeGE9ig4jdz/I0+tNPcLcysUFZqJj/hXSYuE Gq28iBGLdAFvWJv+N8yFyYydIXy8dgeSQvMhVpJFkGTdwstvIZqghsyE0PsDBLj8 mApJvmN43hE9Y7lCNupE4XgeHeO6B37NqikzVBqyBkQGceDHTBN3W7wmWVseQura q11X7w/NMPFxNrmP+tPCIXPo+CJxdQWeak9rkN/IvJ24vrXsKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmylY8uBeqhxJkl8RNTH6CcIsghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOTRhOWM0NTYtYWQ5Zi0z NTdiLTk1YzItMDZkOGJmOGM1YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSf7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaG4x1RUI1NV8Offbyjsf4smHNrXzZgQVTYALbGi0wq4lcRxFWy8SQw M1w37PRewjim+pqvi7ql3xC3TjcDUNeSVVAWzo5HMXKJrTwI2H2VGTww65SfwfPS uqyY+LbFBBpbnrwuAaumh83b2i7jzn9n6es8IfZd7NEz7tcBXzu16XGv2ueu+hYP qBbTZkXKjyfEBEExECGVmF1fJLb1e5NDAEZxaxVc4bMeUsualyPK96/aGJp2BiOU eiAlaHGB4JZO2YEfC7gJXlK7jIlAlx4Qw2otopJtHk4ZIUtTx0mvwwqFVOaGsbKI xxdRH/1hmi4I+o9gy1UK6p5PySsHKZE= -----END CERTIFICATE-----Generated at Sun Jun 29 21:05:06 2025 by rpki-client