$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa File: 87fd4b0d-6f9b-3caf-ad67-299517a44066.roa (raw, json) Hash identifier: 2iu2RoKjZMtGlwbM1HYYVzT+uZ1MYX48ORBw3SFhTeg= Subject key identifier: 67:D9:F1:B9:B2:24:BC:51:86:AD:99:D5:73:EE:62:AE:D2:4C:38:49 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584A43DB0B2A4FE5B9C33B366624 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 174 IP address blocks: 65.110.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0b:2a:4f:e5:b9:c3:3b:36:66:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=eb1465be-9867-4490-9d99-3cc8b8cbf20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:97:a8:39:e1:f6:ce:0f:fd:1d:18:f3:a8: 19:df:88:8c:09:6a:6b:86:6d:15:19:89:55:ac:97: 4e:da:36:b9:14:43:cd:48:a5:e9:43:14:36:4a:9c: 3b:57:dd:00:77:f5:42:82:b1:96:cd:7c:35:46:c3: a0:f0:de:39:1e:28:56:ad:09:81:a5:48:14:0d:2a: 8c:ae:f6:b3:f0:a7:05:95:89:f1:2a:ee:e6:33:75: d6:78:09:33:91:b2:36:3e:9c:a9:06:da:63:86:25: 0b:35:25:98:be:6d:09:be:8a:eb:26:8f:cd:bd:ac: 72:83:67:c3:15:d2:8e:eb:c4:73:6a:cf:23:ba:7b: 5b:65:8b:2d:08:44:e3:df:91:d2:04:ce:47:9f:79: 35:36:5f:f8:c3:83:75:f3:ad:bc:81:c9:24:47:da: c3:66:2a:1c:69:3d:9d:70:c1:2c:98:50:97:99:de: 8e:b1:84:77:2d:69:9f:4c:bc:e9:00:30:8b:cc:f6: d5:46:fd:fc:a5:5d:3e:f6:34:a4:b4:7b:17:f2:ba: 52:cd:30:a6:0d:9b:9d:11:ca:e0:dc:ca:b1:11:12: 32:47:19:da:6c:14:75:d7:f7:c0:f0:01:bd:e0:85: d5:98:41:7c:02:6b:d7:d1:24:f2:c9:98:a3:42:ff: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D9:F1:B9:B2:24:BC:51:86:AD:99:D5:73:EE:62:AE:D2:4C:38:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c0:4c:ac:d3:c8:94:3c:9a:ac:6f:07:06:c9:18:76:93:ef: 46:ca:17:41:a8:3b:71:be:06:8d:58:9c:80:93:d6:76:76:a8: 02:0a:f1:df:92:54:e4:82:2e:b6:e0:ff:f7:b8:0e:77:83:39: eb:c8:56:80:35:f1:b7:2e:3f:c3:0e:41:02:02:71:9d:67:bf: 7d:75:2b:70:3b:db:5a:05:5f:fe:8e:0a:03:de:10:7a:1a:ca: c9:ee:fa:10:07:52:f9:35:86:50:2a:cd:7c:37:a9:e5:ef:53: f7:d1:33:80:cb:ee:e8:78:bd:f7:cd:bd:bc:ae:19:ce:ee:b0: 2c:6f:d5:c2:18:f8:1c:02:fa:b0:12:8d:c1:38:0a:eb:a3:f7: b7:79:3b:c5:b1:e0:ab:b0:b2:dd:67:aa:86:91:a5:0a:2a:38: 3d:a8:06:ed:b6:9e:7e:12:ee:e4:6a:cd:66:bb:bf:3e:2a:ae: 37:70:2d:9d:f8:4f:56:70:be:3f:be:c0:ce:ab:b6:9b:1d:98: 59:55:c5:d6:fd:b1:d1:de:f9:e4:71:19:fe:bf:73:9e:b2:a1: dc:fb:11:bd:60:d0:8d:2d:6e:60:2c:c9:72:49:6c:9f:9a:b5: 90:ae:a1:20:fb:ac:6c:eb:15:8f:34:ca:6e:ef:c9:49:2c:4b: 44:05:a9:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wsqT+W5wzs2ZiQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZWIxNDY1YmUtOTg2Ny00NDkwLTlkOTktM2NjOGI4Y2JmMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz82XqDnh9s4P/R0Y86gZ34iMCWprhm0VGYlV rJdO2ja5FEPNSKXpQxQ2Spw7V90Ad/VCgrGWzXw1RsOg8N45HihWrQmBpUgUDSqM rvaz8KcFlYnxKu7mM3XWeAkzkbI2PpypBtpjhiULNSWYvm0JvorrJo/Nvaxyg2fD FdKO68Rzas8juntbZYstCETj35HSBM5Hn3k1Nl/4w4N18628gckkR9rDZiocaT2d cMEsmFCXmd6OsYR3LWmfTLzpADCLzPbVRv38pV0+9jSktHsX8rpSzTCmDZudEcrg 3MqxERIyRxnabBR11/fA8AG94IXVmEF8AmvX0STyyZijQv9OSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfZ8bmyJLxRhq2Z1XPuYq7STDhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODdmZDRiMGQtNmY5Yi0z Y2FmLWFkNjctMjk5NTE3YTQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrATKzTyJQ8mqxvBwbJGHaT70bKF0GoO3G+Bo1YnICT1nZ2qAIK8d+S VOSCLrbg//e4DneDOevIVoA18bcuP8MOQQICcZ1nv311K3A721oFX/6OCgPeEHoa ysnu+hAHUvk1hlAqzXw3qeXvU/fRM4DL7uh4vffNvbyuGc7usCxv1cIY+BwC+rAS jcE4Cuuj97d5O8Wx4Kuwst1nqoaRpQoqOD2oBu22nn4S7uRqzWa7vz4qrjdwLZ34 T1Zwvj++wM6rtpsdmFlVxdb9sdHe+eRxGf6/c56yodz7Eb1g0I0tbmAsyXJJbJ+a tZCuoSD7rGzrFY80ym7vyUksS0QFqRg= -----END CERTIFICATE-----Generated at Sun Jun 29 01:26:43 2025 by rpki-client