$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa File: 826a4506-faff-3fc0-834f-c2447661ac44.roa (raw, json) Hash identifier: 4wMT2kw/30VLqWpgQepJZR8HM70HMJ797rRqdEUUExk= Subject key identifier: 36:40:DD:F7:C7:D8:6D:14:F4:BA:FB:FA:DC:B7:34:D5:EA:B7:B7:81 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F432858499829D6C0C0111ADEF5E75AE0 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 5065 IP address blocks: 65.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d6:c0:c0:11:1a:de:f5:e7:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=acaf970c-becb-47c1-9872-dfa70192598f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6d:f8:85:fe:9c:96:c1:04:5f:e8:bd:94:7e: dd:ca:89:90:1f:ad:4c:ab:01:e4:3e:e2:51:3a:3f: 5e:10:7b:5d:d0:80:36:b5:de:4d:4b:cf:12:0c:a4: 15:66:e8:f0:38:51:9c:be:48:8e:a6:d0:9e:44:71: 62:7f:35:72:b2:91:aa:11:cc:cb:48:64:4a:bd:8c: ab:45:f3:f0:99:18:62:2c:86:32:4b:f1:02:cf:e9: e8:2d:17:b3:d8:82:13:98:e4:38:6d:ec:f9:b1:d3: a4:58:74:81:df:05:67:51:b2:65:4f:9a:95:d4:06: c5:ba:a0:c0:3c:73:96:90:b8:66:1d:98:d5:3b:cd: 94:3c:cc:8f:b4:f4:24:c4:8c:10:28:de:1e:d4:be: 70:5c:97:20:ca:1c:63:16:ad:81:63:1b:c5:7e:93: 30:db:ab:ea:9d:f9:12:95:1a:1c:fb:b8:26:92:11: 68:68:8a:8f:80:38:b0:01:c0:83:fe:11:63:e1:83: eb:b2:0a:7b:29:73:83:74:03:a6:5d:62:2d:f7:28: 07:02:78:99:da:5a:06:2d:ae:ab:56:be:2f:26:59: 0b:0e:a6:72:6d:7c:3f:85:2c:1b:65:e4:5b:33:94: a6:5e:41:a9:31:e3:04:6b:62:e3:8e:d9:27:09:9f: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:40:DD:F7:C7:D8:6D:14:F4:BA:FB:FA:DC:B7:34:D5:EA:B7:B7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:73:40:de:1f:97:2c:a0:e5:8e:ff:9e:88:3b:d2:c2:48:21: 73:9a:a6:37:40:e5:0e:47:da:02:8e:3f:2e:c3:94:4b:4a:67: c9:15:27:77:97:60:44:2d:f6:5d:0a:29:94:53:8c:8d:a4:48: 43:fe:21:49:4e:1b:9d:cc:9b:26:87:38:c2:f6:dd:d9:12:6a: 4b:ef:cf:00:69:24:04:6b:4d:49:d3:45:a4:50:4b:41:00:e8: 8e:5b:6d:c3:b6:7f:ff:e0:7d:87:75:92:99:5d:73:78:d4:f4: c9:cc:76:a1:7d:1a:79:fb:10:32:59:7e:9e:f6:d1:55:52:2a: 9b:d2:e4:1b:ca:7d:17:ee:4e:b8:4e:1f:0b:86:dc:8b:94:1d: 88:86:03:d3:30:e4:67:6b:4c:83:9c:8f:fb:e0:a6:49:3c:d8: 1f:f5:7d:f4:4b:38:dc:93:0f:d4:2b:be:e9:2b:6e:d9:ec:ed: ea:b1:93:58:4f:8f:df:e3:21:e4:3b:3b:65:55:73:f9:e8:bd: 89:ee:e4:c1:09:b3:cf:6c:4d:90:ae:77:b2:e2:e1:6c:92:9c: ca:a1:fa:d5:4c:aa:fd:94:2c:08:91:4a:e7:9f:29:87:0d:75: a4:97:5f:44:15:14:2f:af:0f:fa:da:18:22:f3:fa:62:7a:25: 41:87:e7:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdbAwBEa3vXnWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YWNhZjk3MGMtYmVjYi00N2MxLTk4NzItZGZhNzAxOTI1OThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm34hf6clsEEX+i9lH7dyomQH61MqwHkPuJR Oj9eEHtd0IA2td5NS88SDKQVZujwOFGcvkiOptCeRHFifzVyspGqEczLSGRKvYyr RfPwmRhiLIYyS/ECz+noLRez2IITmOQ4bez5sdOkWHSB3wVnUbJlT5qV1AbFuqDA PHOWkLhmHZjVO82UPMyPtPQkxIwQKN4e1L5wXJcgyhxjFq2BYxvFfpMw26vqnfkS lRoc+7gmkhFoaIqPgDiwAcCD/hFj4YPrsgp7KXODdAOmXWIt9ygHAniZ2loGLa6r Vr4vJlkLDqZybXw/hSwbZeRbM5SmXkGpMeMEa2LjjtknCZ8eXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZA3ffH2G0U9Lr7+ty3NNXqt7eBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvODI2YTQ1MDYtZmFmZi0z ZmMwLTgzNGYtYzI0NDc2NjFhYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdzQN4flyyg5Y7/nog70sJIIXOapjdA5Q5H2gKOPy7DlEtKZ8kVJ3eX YEQt9l0KKZRTjI2kSEP+IUlOG53MmyaHOML23dkSakvvzwBpJARrTUnTRaRQS0EA 6I5bbcO2f//gfYd1kpldc3jU9MnMdqF9Gnn7EDJZfp720VVSKpvS5BvKfRfuTrhO HwuG3IuUHYiGA9Mw5GdrTIOcj/vgpkk82B/1ffRLONyTD9Qrvukrbtns7eqxk1hP j9/jIeQ7O2VVc/novYnu5MEJs89sTZCud7Li4WySnMqh+tVMqv2ULAiRSuefKYcN daSXX0QVFC+vD/raGCLz+mJ6JUGH57Y= -----END CERTIFICATE-----Generated at Sun May 11 01:20:48 2025 by rpki-client