$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa File: 1013b58b-c978-32db-a484-4f958d5cd161.roa (raw, json) Hash identifier: GyI0LG0wsXnuvjB5c97FThyDGea+O1AoRv8vA9z7VKs= Subject key identifier: 20:80:8E:A2:AF:C7:38:65:02:41:58:FA:A5:1D:A7:E7:25:DA:0F:5A Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584AD5065E0AD772FE81C73F8F60 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 5650 IP address blocks: 65.87.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:5e:0a:d7:72:fe:81:c7:3f:8f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=75030025-ba64-4f28-9de6-250a525d7b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:d4:e8:69:40:ae:96:eb:82:1a:e7:5d:84: cb:6b:47:3a:bc:03:61:47:08:07:7e:50:3d:33:44: b2:14:28:f5:67:99:3e:43:b5:0e:51:f8:47:29:f5: f3:d5:75:09:21:78:38:48:ae:40:c1:89:61:9e:e3: 4d:34:1d:6d:ab:64:23:d9:37:36:77:25:2e:c3:27: ea:91:74:49:5d:be:d3:03:89:e0:4a:86:3d:91:32: f2:01:26:dc:d4:6f:28:13:a2:64:c2:2f:1b:c9:23: d7:76:8a:59:82:54:ba:48:02:f3:af:24:32:13:57: f4:9b:7c:f1:5c:bc:74:e8:68:f1:ef:98:c6:ba:4e: db:73:37:f5:02:03:74:aa:dc:8e:b0:70:16:1f:f2: c5:b5:7a:d5:ee:4c:39:0d:ea:12:16:e9:c8:c3:59: d5:0b:72:c1:45:91:73:11:44:1f:22:43:d3:2d:95: 97:cc:82:64:7e:ec:97:af:56:d1:8a:c9:7e:f1:4a: 70:fa:bb:ba:c8:b5:3b:28:78:1e:a4:42:ac:73:86: 4e:2a:a6:26:8b:93:18:c2:52:83:c7:b5:37:c3:09: 5d:db:52:b7:05:81:5d:f3:cb:56:6d:31:7c:45:ed: 14:86:8c:4f:0f:16:b3:87:39:fd:06:9f:78:f2:12: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:8E:A2:AF:C7:38:65:02:41:58:FA:A5:1D:A7:E7:25:DA:0F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b8:1c:8c:4d:49:ed:b6:ad:70:81:e9:4e:70:0a:ed:f3:ff: 68:25:53:37:db:57:19:72:59:88:39:de:c2:57:16:7a:91:f7: 03:3d:21:2a:78:8e:af:90:2b:83:25:5e:39:9d:ce:8a:26:a1: b7:b1:0c:93:5c:f1:ec:6b:08:76:1c:ce:70:03:3e:9b:d3:3e: e8:b7:16:30:d0:57:67:01:e4:30:5d:18:9e:8f:89:2e:10:32: 39:e9:0b:0d:24:9b:5f:b4:43:70:16:b4:31:44:22:30:ef:a8: 84:4d:f4:0b:11:18:ac:d5:54:52:be:66:7f:d7:1d:12:d0:aa: 70:29:b1:69:3b:11:ac:7b:39:54:95:9d:1b:30:e6:25:af:2d: 50:1e:a8:27:5f:44:40:99:68:db:6a:68:5d:48:51:40:3f:78: 47:00:5a:b8:72:3c:4c:3a:c7:06:c6:41:48:ca:da:77:9f:9c: 4a:54:48:58:e8:63:dc:83:5b:55:3a:1a:2c:8e:07:51:a8:7e: e5:ce:d5:89:84:9f:4b:c7:58:74:14:c7:75:81:b1:28:ad:45: cc:87:a3:3b:35:5a:90:ba:e7:3f:c6:89:92:59:1a:1b:7d:df: 8d:10:26:d8:61:5d:69:27:5f:5b:0c:b1:f7:54:77:dd:e3:30: 17:32:14:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBl4K13L+gcc/j2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk NzUwMzAwMjUtYmE2NC00ZjI4LTlkZTYtMjUwYTUyNWQ3YjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GDU6GlArpbrghrnXYTLa0c6vANhRwgHflA9 M0SyFCj1Z5k+Q7UOUfhHKfXz1XUJIXg4SK5AwYlhnuNNNB1tq2Qj2Tc2dyUuwyfq kXRJXb7TA4ngSoY9kTLyASbc1G8oE6Jkwi8bySPXdopZglS6SALzryQyE1f0m3zx XLx06Gjx75jGuk7bczf1AgN0qtyOsHAWH/LFtXrV7kw5DeoSFunIw1nVC3LBRZFz EUQfIkPTLZWXzIJkfuyXr1bRisl+8Upw+ru6yLU7KHgepEKsc4ZOKqYmi5MYwlKD x7U3wwld21K3BYFd88tWbTF8Re0UhoxPDxazhzn9Bp948hLuuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCAjqKvxzhlAkFY+qUdp+cl2g9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMTAxM2I1OGItYzk3OC0z MmRiLWE0ODQtNGY5NThkNWNkMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa4HIxNSe22rXCB6U5wCu3z/2glUzfbVxlyWYg53sJXFnqR9wM9ISp4 jq+QK4MlXjmdzoomobexDJNc8exrCHYcznADPpvTPui3FjDQV2cB5DBdGJ6PiS4Q MjnpCw0km1+0Q3AWtDFEIjDvqIRN9AsRGKzVVFK+Zn/XHRLQqnApsWk7Eax7OVSV nRsw5iWvLVAeqCdfRECZaNtqaF1IUUA/eEcAWrhyPEw6xwbGQUjK2nefnEpUSFjo Y9yDW1U6GiyOB1GofuXO1YmEn0vHWHQUx3WBsSitRcyHozs1WpC65z/GiZJZGht9 340QJthhXWknX1sMsfdUd93jMBcyFPQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:16:54 2025 by rpki-client