$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2219c2a3-ffae-3f25-b507-196d218742ba.roa File: 2219c2a3-ffae-3f25-b507-196d218742ba.roa (raw, json) Hash identifier: 6KmwebnZg8BcPpKfRXwaTOpno4BzwBIL1EhpuT3YG+w= Subject key identifier: 65:B6:28:5B:D7:BE:13:61:CD:25:85:7A:1A:F6:78:22:B2:6C:3E:AD Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A4F5E52A7A35EBB9AE95DC140 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2219c2a3-ffae-3f25-b507-196d218742ba.roa Signing time: Wed 25 Jun 2025 15:59:40 +0000 ROA not before: Wed 25 Jun 2025 15:59:40 +0000 ROA not after: Tue 23 Sep 2025 15:59:40 +0000 asID: 58212 IP address blocks: 65.87.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:5e:52:a7:a3:5e:bb:9a:e9:5d:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jun 25 15:59:40 2025 GMT Not After : Sep 23 15:59:40 2025 GMT Subject: CN=94dbbbbd-4def-47f0-b9fc-3fe200cb4804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:a7:63:e9:8a:af:de:ad:64:cb:e0:bb:d3: 30:c3:b8:9e:96:7d:f7:e7:54:80:24:36:d8:fe:2a: eb:f6:13:e7:07:7e:b6:6d:89:23:d0:8d:2d:e6:ec: b0:0a:fd:eb:6f:fa:c2:06:34:3c:44:d8:b7:26:12: 53:6f:ba:06:9b:3e:2d:fb:a7:81:7e:dd:ff:e9:51: ec:b8:b9:d1:67:fa:6d:40:cd:b0:a3:e6:2b:ca:a6: a4:3f:9f:9e:e4:2a:1c:e8:2c:d3:3b:97:30:47:fe: 06:48:c7:06:13:dc:d8:69:0d:de:34:43:17:09:af: 09:6e:e3:c7:c1:29:33:75:03:f8:5a:8c:4f:c1:24: b2:f7:45:80:ee:25:ff:f4:e3:02:23:0f:7f:c0:27: 4a:a7:13:eb:27:0b:9e:f9:da:9b:be:1f:6e:78:13: b0:11:87:88:95:c3:30:9e:89:3f:26:a4:a6:7e:4a: 2b:1e:3b:f7:00:2e:63:6f:32:e3:de:51:f1:48:70: 03:42:6f:1c:1e:91:8d:e2:9d:f6:68:00:5c:cb:79: ba:76:65:50:bd:88:8e:d9:f7:7a:6b:30:64:d7:c1: b9:2a:9b:a1:dd:97:d6:5a:43:12:14:c9:0e:d2:63: 95:11:12:1b:0b:a6:a0:2b:e1:4a:11:06:29:71:95: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B6:28:5B:D7:BE:13:61:CD:25:85:7A:1A:F6:78:22:B2:6C:3E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2219c2a3-ffae-3f25-b507-196d218742ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fd:42:31:9a:44:f1:f3:50:7a:e3:32:6e:cf:cc:52:d3:4f: ab:32:ae:52:5e:b3:c5:a6:12:2b:69:d6:30:d2:5b:96:25:b3: 2a:e7:53:9d:f8:ce:aa:fd:ba:c5:ef:7f:cf:a6:93:b4:bb:38: ac:86:42:46:8e:71:d6:f1:c6:ed:68:14:2a:81:d5:c7:f6:a0: 9d:c1:ff:b1:29:43:c6:71:5e:c2:fd:3b:69:bd:88:40:1f:55: 16:cd:72:00:fe:68:32:a0:25:80:86:39:87:69:4d:f0:0f:e8: 15:ce:1d:1a:b0:5d:d4:15:0a:d6:81:dd:42:a3:e0:34:e0:38: b7:bd:3f:c5:a7:ee:a7:8d:f5:37:f3:c5:98:50:2f:66:f3:d3: c4:d8:24:9a:da:05:55:43:b1:14:c5:5a:43:4a:1f:46:75:9e: 51:9b:16:fa:a9:fd:16:25:5d:3f:03:86:4f:cb:dc:ad:47:53: 8f:b9:c3:84:21:b0:05:20:81:68:ef:eb:87:b5:6d:49:a1:26: 31:e8:db:38:37:1b:b7:2f:21:87:11:5e:84:4f:8f:55:31:43: 89:56:7c:38:b9:a8:c8:f9:3a:0f:16:0b:3e:51:39:ae:ac:18: da:c1:c8:48:8a:fb:24:70:1c:e5:b8:6f:64:7f:6d:51:34:6b: ea:0f:ee:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPXlKno167muldwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDYyNTE1NTk0MFoXDTI1MDkyMzE1NTk0MFowLzEtMCsGA1UEAxMk OTRkYmJiYmQtNGRlZi00N2YwLWI5ZmMtM2ZlMjAwY2I0ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBenY+mKr96tZMvgu9Mww7ieln3351SAJDbY /irr9hPnB362bYkj0I0t5uywCv3rb/rCBjQ8RNi3JhJTb7oGmz4t+6eBft3/6VHs uLnRZ/ptQM2wo+YryqakP5+e5Coc6CzTO5cwR/4GSMcGE9zYaQ3eNEMXCa8JbuPH wSkzdQP4WoxPwSSy90WA7iX/9OMCIw9/wCdKpxPrJwue+dqbvh9ueBOwEYeIlcMw nok/JqSmfkorHjv3AC5jbzLj3lHxSHADQm8cHpGN4p32aABcy3m6dmVQvYiO2fd6 azBk18G5Kpuh3ZfWWkMSFMkO0mOVERIbC6agK+FKEQYpcZULywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW2KFvXvhNhzSWFehr2eCKybD6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMjIxOWMyYTMtZmZhZS0z ZjI1LWI1MDctMTk2ZDIxODc0MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv9QjGaRPHzUHrjMm7PzFLTT6syrlJes8WmEitp1jDSW5YlsyrnU534 zqr9usXvf8+mk7S7OKyGQkaOcdbxxu1oFCqB1cf2oJ3B/7EpQ8ZxXsL9O2m9iEAf VRbNcgD+aDKgJYCGOYdpTfAP6BXOHRqwXdQVCtaB3UKj4DTgOLe9P8Wn7qeN9Tfz xZhQL2bz08TYJJraBVVDsRTFWkNKH0Z1nlGbFvqp/RYlXT8Dhk/L3K1HU4+5w4Qh sAUggWjv64e1bUmhJjHo2zg3G7cvIYcRXoRPj1UxQ4lWfDi5qMj5Og8WCz5ROa6s GNrByEiK+yRwHOW4b2R/bVE0a+oP7n4= -----END CERTIFICATE-----Generated at Tue Jul 1 20:25:26 2025 by rpki-client