$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa File: 2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa (raw, json) Hash identifier: 0VE4lnDGtQPOrlFMxUycPJFwD1iAASFkDLDd7hDG4u8= Subject key identifier: 59:62:C7:8F:2E:58:15:7A:76:80:8A:B2:64:3C:AB:DE:AF:1B:D9:51 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F43285849B9A9FC7829C3AE19F28D48D0 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 213990 IP address blocks: 65.87.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:fc:78:29:c3:ae:19:f2:8d:48:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=b7f147ed-d9c0-4a0a-841e-b9f89ebd10d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:62:96:80:7b:c5:64:6a:1f:49:4a:bb:2a: ab:50:13:ac:93:81:71:d6:80:14:f1:ef:e6:33:7f: eb:83:04:4a:91:58:b6:39:23:e3:8e:97:80:1f:dd: 3f:af:e8:b8:96:4f:ba:59:05:4b:39:ab:4f:70:b8: 97:14:ec:2a:df:0d:e4:22:51:4a:da:2f:ef:dd:82: 9e:56:26:14:4b:fd:69:8a:44:9c:03:e9:fc:a0:fb: eb:63:b0:f3:7e:fd:a3:37:40:63:bc:ca:84:b9:19: 0c:04:18:13:33:35:4d:62:8e:f1:93:db:88:88:84: 2d:55:58:07:6c:b2:ae:a9:56:51:e0:0c:bb:b7:12: ce:f6:c6:98:f3:ad:41:c9:20:c2:fa:77:77:f4:8b: ae:f1:ac:84:0d:f6:da:46:02:d6:23:50:cb:37:bf: 60:2e:72:fd:20:c1:15:b7:4e:b1:c0:42:7b:35:67: 18:5e:5d:eb:59:2a:79:3d:6b:69:01:4f:89:3d:c3: 04:6c:79:06:d5:c6:6c:10:2c:5c:d5:39:69:5a:4d: 36:aa:b8:87:19:5c:fe:b4:16:b4:66:6c:16:dd:98: b8:f4:24:80:2a:41:f8:4a:d3:46:eb:ed:2c:83:ea: ec:4b:2f:ab:26:e1:ab:52:06:07:82:ac:ef:dd:27: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:62:C7:8F:2E:58:15:7A:76:80:8A:B2:64:3C:AB:DE:AF:1B:D9:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2052ec3a-de36-3c51-92ce-3ace3041a6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f0:95:91:a4:19:bb:03:14:37:3e:6d:48:96:fb:b7:04:00: f3:22:52:bc:46:bc:b1:7d:e5:a1:19:e3:57:f9:0f:95:40:ed: 55:a8:83:9f:2e:b3:12:4b:e3:f7:99:13:0b:70:50:c0:d2:40: ff:94:2d:e1:43:55:87:b9:7f:bd:ea:81:33:21:b4:c4:ec:84: 10:c2:77:a0:c8:0c:ac:95:fa:f3:e6:f8:98:a7:b3:b0:e9:4e: 1a:7c:dd:fb:45:22:92:72:69:bc:05:26:77:b1:c2:7d:64:29: 2d:a6:92:fa:01:9d:ed:8c:d6:bc:27:86:12:7a:d5:d4:ac:63: c7:13:f9:08:6b:e7:1a:1e:4d:e6:2d:b7:13:51:59:aa:f7:f7: b2:25:37:ea:69:a8:13:bd:6b:56:89:1f:37:c1:6a:74:ac:4a: 19:bc:97:ca:1b:78:27:8a:2d:a3:2d:11:fc:6e:0d:20:53:18: 72:24:7b:2d:dc:81:84:0f:c8:b5:46:cc:9e:de:56:5d:7d:e9: 68:07:63:59:9b:7a:a4:d4:fd:01:23:72:aa:42:54:f4:ea:50: 52:4f:14:4b:14:ea:78:74:09:83:60:ec:8c:68:02:6c:08:70: 12:e8:40:1b:cf:59:74:5a:c8:2c:af:21:02:b0:1f:59:20:69: b3:58:09:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qfx4KcOuGfKNSNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YjdmMTQ3ZWQtZDljMC00YTBhLTg0MWUtYjlmODllYmQxMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLtiloB7xWRqH0lKuyqrUBOsk4Fx1oAU8e/m M3/rgwRKkVi2OSPjjpeAH90/r+i4lk+6WQVLOatPcLiXFOwq3w3kIlFK2i/v3YKe ViYUS/1pikScA+n8oPvrY7Dzfv2jN0BjvMqEuRkMBBgTMzVNYo7xk9uIiIQtVVgH bLKuqVZR4Ay7txLO9saY861BySDC+nd39Iuu8ayEDfbaRgLWI1DLN79gLnL9IMEV t06xwEJ7NWcYXl3rWSp5PWtpAU+JPcMEbHkG1cZsECxc1TlpWk02qriHGVz+tBa0 ZmwW3Zi49CSAKkH4StNG6+0sg+rsSy+rJuGrUgYHgqzv3Sd/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlix48uWBV6doCKsmQ8q96vG9lRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMjA1MmVjM2EtZGUzNi0z YzUxLTkyY2UtM2FjZTMwNDFhNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPwlZGkGbsDFDc+bUiW+7cEAPMiUrxGvLF95aEZ41f5D5VA7VWog58u sxJL4/eZEwtwUMDSQP+ULeFDVYe5f73qgTMhtMTshBDCd6DIDKyV+vPm+Jins7Dp Thp83ftFIpJyabwFJnexwn1kKS2mkvoBne2M1rwnhhJ61dSsY8cT+Qhr5xoeTeYt txNRWar397IlN+ppqBO9a1aJHzfBanSsShm8l8obeCeKLaMtEfxuDSBTGHIkey3c gYQPyLVGzJ7eVl196WgHY1mbeqTU/QEjcqpCVPTqUFJPFEsU6nh0CYNg7IxoAmwI cBLoQBvPWXRayCyvIQKwH1kgabNYCds= -----END CERTIFICATE-----Generated at Sun May 11 15:08:41 2025 by rpki-client