$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa File: 1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa (raw, json) Hash identifier: voQT5y62KdXXgZ53RTkPaAJaBFvuvyO8ezu/zzyxqcI= Subject key identifier: D1:0A:B3:A2:3F:A2:40:E8:93:D4:C4:F3:0B:19:93:79:78:5F:CA:9D Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584AD8328BB01589249D0B469D80 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa Signing time: Wed 13 Aug 2025 16:17:13 +0000 ROA not before: Wed 13 Aug 2025 16:17:13 +0000 ROA not after: Tue 11 Nov 2025 17:17:13 +0000 asID: 401838 IP address blocks: 65.87.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d8:32:8b:b0:15:89:24:9d:0b:46:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Aug 13 16:17:13 2025 GMT Not After : Nov 11 17:17:13 2025 GMT Subject: CN=20b403bf-95a2-4f40-89a4-958e3f5e96b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:76:ca:cc:18:ee:f8:0e:45:0e:94:ba:53: 9f:16:44:bd:84:e9:7f:d5:65:4e:3c:dd:c9:09:f9: 34:f4:c5:45:d8:c9:5b:ed:5b:0b:81:d3:a9:57:61: ec:d8:83:26:24:0e:c1:a9:33:18:92:e2:42:a2:48: e9:e3:5b:11:5b:c9:91:fb:e9:34:1a:6a:4c:a9:ad: ce:cd:7a:97:74:d2:55:59:1e:a9:89:31:01:19:cf: 22:07:2a:e2:10:e5:91:37:1a:b9:8c:ed:fe:31:9e: 7b:2c:a0:fd:f1:1c:34:f3:6e:33:fc:b5:5d:ff:4c: f7:1c:9f:0b:7b:c9:99:91:71:75:81:3b:d2:a0:52: 81:a1:5f:86:6d:72:ba:c3:80:0d:1e:16:88:36:ed: f5:d0:43:e8:c3:de:83:15:74:3c:76:7f:1e:4a:4a: 73:80:fe:40:43:0b:2e:75:03:dc:43:83:8a:57:03: ba:e7:5d:ec:34:c1:48:c0:5d:5f:24:ff:eb:a8:a2: 23:52:b9:84:1e:2f:b8:09:14:0d:e7:31:94:74:ec: b5:c7:7c:fa:cc:99:b9:62:55:48:99:bf:cd:14:b4: 99:b9:21:47:a2:3d:a9:cc:c7:26:86:36:79:62:0b: be:76:0c:8b:db:08:b9:16:e6:9b:01:a5:d4:81:69: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0A:B3:A2:3F:A2:40:E8:93:D4:C4:F3:0B:19:93:79:78:5F:CA:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1b9efe8e-dc87-3d23-bff1-a82e6048650e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c2:c5:74:66:62:b6:70:e6:77:83:23:98:03:53:13:b2:d2: 78:75:7f:40:1e:99:e8:fb:19:f1:9f:ae:9c:19:74:11:de:0e: 99:46:f6:49:80:7e:1e:a2:df:40:48:82:eb:83:6a:03:43:5c: 00:a7:b5:10:89:d7:8d:a1:c6:5b:2a:15:11:97:4e:e0:14:69: 95:16:f8:35:02:62:61:a4:74:bb:55:05:8b:b5:03:9a:30:9e: d2:fa:9c:d9:ab:74:a5:ca:84:54:a1:cd:bb:e0:0d:7f:2b:c5: 72:d5:f7:b1:ea:7b:74:0a:8c:e3:8a:e5:ca:39:50:93:cc:59: ca:01:42:8e:3a:71:fc:9e:d6:fd:67:71:77:dd:22:c2:41:1a: 1b:fb:a2:a7:73:4b:2a:37:13:d5:95:c2:99:0d:0a:25:4a:5d: c7:8b:1e:0f:36:0d:59:44:5a:a9:e9:ae:bb:ea:07:ba:1f:17: 8e:30:3c:ac:d5:e3:9d:70:de:08:94:40:c6:9b:69:cc:40:aa: a7:39:f7:3f:85:c9:4d:5c:bd:19:54:b9:96:b8:8f:c3:f7:82: 86:0a:fd:ff:97:69:2c:80:8b:64:26:d4:83:02:02:6e:c6:7a: c1:6e:8b:be:19:f7:0a:fb:e2:34:7a:17:76:80:84:ae:c2:e0: f3:9d:4e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYMouwFYkknQtGnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDgxMzE2MTcxM1oXDTI1MTExMTE3MTcxM1owLzEtMCsGA1UEAxMk MjBiNDAzYmYtOTVhMi00ZjQwLTg5YTQtOTU4ZTNmNWU5NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitt2yswY7vgORQ6UulOfFkS9hOl/1WVOPN3J Cfk09MVF2Mlb7VsLgdOpV2Hs2IMmJA7BqTMYkuJCokjp41sRW8mR++k0GmpMqa3O zXqXdNJVWR6piTEBGc8iByriEOWRNxq5jO3+MZ57LKD98Rw0824z/LVd/0z3HJ8L e8mZkXF1gTvSoFKBoV+GbXK6w4ANHhaINu310EPow96DFXQ8dn8eSkpzgP5AQwsu dQPcQ4OKVwO6513sNMFIwF1fJP/rqKIjUrmEHi+4CRQN5zGUdOy1x3z6zJm5YlVI mb/NFLSZuSFHoj2pzMcmhjZ5Ygu+dgyL2wi5FuabAaXUgWk4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEKs6I/okDok9TE8wsZk3l4X8qdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMWI5ZWZlOGUtZGM4Ny0z ZDIzLWJmZjEtYTgyZTYwNDg2NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPCxXRmYrZw5neDI5gDUxOy0nh1f0Aemej7GfGfrpwZdBHeDplG9kmA fh6i30BIguuDagNDXACntRCJ142hxlsqFRGXTuAUaZUW+DUCYmGkdLtVBYu1A5ow ntL6nNmrdKXKhFShzbvgDX8rxXLV97Hqe3QKjOOK5co5UJPMWcoBQo46cfye1v1n cXfdIsJBGhv7oqdzSyo3E9WVwpkNCiVKXceLHg82DVlEWqnprrvqB7ofF44wPKzV 451w3giUQMabacxAqqc59z+FyU1cvRlUuZa4j8P3goYK/f+XaSyAi2Qm1IMCAm7G esFui74Z9wr74jR6F3aAhK7C4POdToQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:55:45 2025 by rpki-client