$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa File: ef494090-aba7-39db-8156-d416d68d068e.roa (raw, json) Hash identifier: xUlLouL1qXjXp4f/khgqtrJrSrhXsa+sV4wX9BQgkO4= Subject key identifier: D4:A7:9B:DF:5A:04:CE:EE:1B:23:8F:16:9D:60:E7:99:77:9B:31:DC Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584A506AF6B778EEFA5C2D91F500 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 7018 IP address blocks: 65.87.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f6:b7:78:ee:fa:5c:2d:91:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=1caf8d7f-ebfa-4c9b-be24-b514556ce301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b6:09:90:3e:c4:01:9b:ca:ee:6d:a1:22:b3: 19:fb:0b:7a:32:62:54:df:1e:b9:90:2e:4f:ce:3f: a3:8e:4c:59:a1:71:4c:68:de:05:f2:67:c5:60:0e: a0:db:b6:38:9d:22:a8:56:11:fb:14:84:2f:cf:a9: 21:f1:48:1f:22:a9:40:b4:70:76:51:3d:b7:81:04: 50:2f:4f:4c:e5:a5:b1:1d:71:ff:92:6f:69:2e:e0: 53:0a:20:da:9a:13:fc:17:9d:0d:a9:89:a0:b9:20: f5:be:b6:a7:b6:66:87:f5:88:18:ef:6a:1d:24:3b: 4b:c7:0a:c1:d7:e2:e3:74:65:6f:05:03:52:d8:c6: 87:e5:82:a7:81:46:4f:12:35:fd:a1:90:95:80:6e: b7:d9:30:54:2e:7a:a5:60:ea:9d:b4:d3:36:4e:4e: 16:1e:30:40:44:f4:45:2e:15:2b:a3:48:d7:75:69: 2a:ec:cc:d1:e3:f5:b9:f1:be:83:db:68:86:6e:23: 77:1a:0a:02:ef:9c:d9:73:dd:f9:c3:39:d1:92:2d: fe:63:b6:f2:3b:54:ca:bf:9e:6d:18:ae:b3:68:3f: 47:8b:2b:9d:b5:bc:0d:5d:91:2e:05:2f:44:d7:97: 9c:45:52:03:2f:de:59:29:0e:15:ec:99:9a:3c:61: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:9B:DF:5A:04:CE:EE:1B:23:8F:16:9D:60:E7:99:77:9B:31:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:34:b7:56:a8:f3:f8:22:13:6c:57:75:76:e7:f9:e7:2b:e9: 3e:19:d2:3d:d6:63:05:34:40:08:f2:89:3a:c0:6b:ca:04:58: 9a:3c:89:43:5d:28:70:47:07:f1:9b:3d:fc:1c:01:44:e6:dd: b5:f9:97:d0:be:06:4f:10:3d:3d:71:c0:81:92:16:2f:fd:1a: 42:69:47:ca:fb:4f:ca:b9:21:4e:e0:8d:a3:a1:3c:ef:60:df: 2d:c4:95:ef:1b:95:9a:55:e2:02:94:fd:74:28:8d:fc:e5:d7: 0b:ea:22:93:0c:b6:06:74:15:19:a8:d5:40:7f:7c:86:e2:1d: 29:10:ae:de:7e:e1:be:de:d3:1c:6a:e4:bf:d6:28:7a:4d:67: 30:34:a6:b2:ba:fe:6d:7b:64:1a:b4:5e:64:75:e2:0b:b0:5f: d6:0f:f1:21:88:77:68:e4:76:3f:d9:da:19:06:3a:5d:ad:7a: 44:78:a2:e7:1a:24:d8:d1:44:06:46:9d:d4:d6:f2:52:e3:f7: e2:f1:26:ae:20:b8:a3:b4:e9:65:b5:a3:57:d3:c1:08:c6:c3: 71:44:70:22:de:35:db:18:d5:d5:a2:e1:c4:6c:20:d7:c3:af: da:1e:31:71:c0:dd:d8:ad:c9:93:da:5f:01:b9:d6:c3:43:08: ac:d8:e4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQava3eO76XC2R9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk MWNhZjhkN2YtZWJmYS00YzliLWJlMjQtYjUxNDU1NmNlMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLYJkD7EAZvK7m2hIrMZ+wt6MmJU3x65kC5P zj+jjkxZoXFMaN4F8mfFYA6g27Y4nSKoVhH7FIQvz6kh8UgfIqlAtHB2UT23gQRQ L09M5aWxHXH/km9pLuBTCiDamhP8F50NqYmguSD1vrantmaH9YgY72odJDtLxwrB 1+LjdGVvBQNS2MaH5YKngUZPEjX9oZCVgG632TBULnqlYOqdtNM2Tk4WHjBARPRF LhUro0jXdWkq7MzR4/W58b6D22iGbiN3GgoC75zZc935wznRki3+Y7byO1TKv55t GK6zaD9HiyudtbwNXZEuBS9E15ecRVIDL95ZKQ4V7JmaPGELwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSnm99aBM7uGyOPFp1g55l3mzHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZWY0OTQwOTAtYWJhNy0z OWRiLTgxNTYtZDQxNmQ2OGQwNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE0t1ao8/giE2xXdXbn+ecr6T4Z0j3WYwU0QAjyiTrAa8oEWJo8iUNd KHBHB/GbPfwcAUTm3bX5l9C+Bk8QPT1xwIGSFi/9GkJpR8r7T8q5IU7gjaOhPO9g 3y3Ele8blZpV4gKU/XQojfzl1wvqIpMMtgZ0FRmo1UB/fIbiHSkQrt5+4b7e0xxq 5L/WKHpNZzA0prK6/m17ZBq0XmR14guwX9YP8SGId2jkdj/Z2hkGOl2tekR4ouca JNjRRAZGndTW8lLj9+LxJq4guKO06WW1o1fTwQjGw3FEcCLeNdsY1dWi4cRsINfD r9oeMXHA3dityZPaXwG51sNDCKzY5BE= -----END CERTIFICATE-----Generated at Mon Jun 30 04:40:03 2025 by rpki-client