$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/b6ba2bca-51b1-33bd-85dc-e6387a41e0b0.roa File: b6ba2bca-51b1-33bd-85dc-e6387a41e0b0.roa (raw, json) Hash identifier: E5F5mFJVhQMFX6Q6iZMyd/T2eIGvvsV/tOVUdbLtkuM= Subject key identifier: 2B:C2:ED:96:0A:BF:6D:6C:53:03:49:77:A3:B2:04:F3:7B:65:5D:EA Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A4DA03DA39A5038C5D9C0EC80 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/b6ba2bca-51b1-33bd-85dc-e6387a41e0b0.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 174 IP address blocks: 65.87.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3d:a3:9a:50:38:c5:d9:c0:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=15f29bdd-a62c-4b11-b982-14c967f74da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:08:20:a5:86:ec:e8:0a:4c:04:bc:6f:06: d9:01:0a:1f:f5:5d:6c:03:d4:58:98:96:34:6b:85: f2:47:71:ea:3d:6f:94:e6:ce:1b:f5:4a:59:3a:cb: 46:04:b9:56:d4:a8:87:86:de:ef:a7:36:23:d1:bb: 90:d5:f5:6b:27:8b:c3:58:39:05:f9:77:be:b0:08: c5:7b:c3:38:42:69:05:bb:5f:4d:99:4a:e4:08:12: 87:87:ab:2e:b3:a8:0b:fb:d0:c4:4b:c5:88:90:ef: d4:e5:a3:63:d8:d6:6b:ab:9a:38:e8:ef:9f:ce:b9: 9b:bb:6c:da:2f:10:08:c6:a1:8a:1d:7e:f2:80:a1: 74:29:09:e4:56:13:db:98:1a:ec:08:34:cf:7d:b7: 94:d5:8b:7d:ab:0f:cd:be:72:23:35:95:cd:52:1f: 19:74:6e:0e:f8:a5:88:46:ec:3b:7f:4b:7d:4a:86: c3:a3:37:5d:46:9f:59:ab:b1:bf:78:a4:e2:84:1e: 3b:d9:8a:92:87:2c:81:e6:57:08:a0:ed:11:4d:e6: 94:7a:8d:0e:8f:7a:64:2c:0c:84:e7:12:5a:8e:50: c1:98:66:3e:78:c9:87:08:2a:69:33:f0:79:59:72: e6:0e:f3:7c:db:0f:43:39:e2:8b:0c:20:d3:9d:59: 09:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:ED:96:0A:BF:6D:6C:53:03:49:77:A3:B2:04:F3:7B:65:5D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/b6ba2bca-51b1-33bd-85dc-e6387a41e0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a8:6e:bb:ed:45:64:e5:62:4c:dc:6e:84:2f:33:3a:19:cb: d9:fa:5e:00:24:c9:a2:44:30:17:ad:11:c5:19:bb:70:88:50: 03:32:7d:dc:ba:4b:d2:62:c0:ec:05:3f:22:62:65:c4:11:35: 66:81:fa:93:41:a5:54:d8:11:d0:17:d9:a7:73:f6:39:e2:1c: 6a:bf:97:c3:95:ba:bc:1e:da:b2:6c:39:cd:6c:be:fe:4d:52: 0d:1d:57:0f:57:7e:e4:a4:a6:2c:0a:63:b3:5f:1c:2d:ca:2b: 61:4b:2e:a5:40:bc:59:9f:7d:01:b4:b7:40:c5:83:fe:3d:68: 5b:d2:67:7b:27:70:93:be:84:c0:4e:bd:2f:e9:ae:bc:ec:61: 8b:df:57:18:59:e4:41:31:d5:98:42:68:d4:b5:e0:8a:c2:64: 55:ba:4a:c9:f7:87:85:ec:6e:4b:98:91:1b:71:c5:63:0e:8c: b8:aa:1a:2d:c8:48:87:da:be:6e:bc:61:7d:f3:91:b0:48:b7: fe:4a:40:bd:20:19:7a:34:fd:29:20:1d:fb:66:d4:fc:fe:b3: 14:d7:58:6e:de:8a:82:a5:65:7d:e1:fb:50:32:f7:52:fe:71: 54:d7:9f:13:5a:da:4f:1d:81:dc:08:ad:89:24:3a:cd:48:3f: 39:5c:17:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoD2jmlA4xdnA7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk MTVmMjliZGQtYTYyYy00YjExLWI5ODItMTRjOTY3Zjc0ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApusIIKWG7OgKTAS8bwbZAQof9V1sA9RYmJY0 a4XyR3HqPW+U5s4b9UpZOstGBLlW1KiHht7vpzYj0buQ1fVrJ4vDWDkF+Xe+sAjF e8M4QmkFu19NmUrkCBKHh6sus6gL+9DES8WIkO/U5aNj2NZrq5o46O+fzrmbu2za LxAIxqGKHX7ygKF0KQnkVhPbmBrsCDTPfbeU1Yt9qw/NvnIjNZXNUh8ZdG4O+KWI Ruw7f0t9SobDozddRp9Zq7G/eKTihB472YqShyyB5lcIoO0RTeaUeo0Oj3pkLAyE 5xJajlDBmGY+eMmHCCppM/B5WXLmDvN82w9DOeKLDCDTnVkJ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvC7ZYKv21sUwNJd6OyBPN7ZV3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvYjZiYTJiY2EtNTFiMS0z M2JkLTg1ZGMtZTYzODdhNDFlMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKobrvtRWTlYkzcboQvMzoZy9n6XgAkyaJEMBetEcUZu3CIUAMyfdy6 S9JiwOwFPyJiZcQRNWaB+pNBpVTYEdAX2adz9jniHGq/l8OVurwe2rJsOc1svv5N Ug0dVw9XfuSkpiwKY7NfHC3KK2FLLqVAvFmffQG0t0DFg/49aFvSZ3sncJO+hMBO vS/prrzsYYvfVxhZ5EEx1ZhCaNS14IrCZFW6Ssn3h4XsbkuYkRtxxWMOjLiqGi3I SIfavm68YX3zkbBIt/5KQL0gGXo0/SkgHftm1Pz+sxTXWG7eioKlZX3h+1Ay91L+ cVTXnxNa2k8dgdwIrYkkOs1IPzlcF/0= -----END CERTIFICATE-----Generated at Tue Jul 1 12:30:46 2025 by rpki-client