$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9724846a-3c03-3ffa-8769-f69c1f9565ec.roa File: 9724846a-3c03-3ffa-8769-f69c1f9565ec.roa (raw, json) Hash identifier: d8VgaTPMpCnabnIkxOhidIPeGl/zU/zNl1GpdqAAOOA= Subject key identifier: B2:FD:89:44:A5:4D:DC:5A:EE:06:B1:DE:F6:1B:CD:37:C6:EA:79:BD Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584A497066B7BB703E8F3F2EED00 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9724846a-3c03-3ffa-8769-f69c1f9565ec.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 54098 IP address blocks: 162.218.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:66:b7:bb:70:3e:8f:3f:2e:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=92909fa1-c962-4723-a63b-bda753953eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a1:57:79:2a:5d:38:70:5a:cf:9e:2c:04:63: ce:fa:f0:d7:69:ec:77:e8:55:fc:2d:d2:29:d3:ea: 0a:22:0f:09:d8:1d:86:1d:d6:34:c2:03:86:96:ad: 72:41:fb:da:ab:26:1d:10:5a:cd:d0:72:31:be:c5: 73:0b:27:97:a9:dc:aa:56:b5:ee:73:e4:87:3b:fa: a3:08:e4:cd:7c:41:8d:e1:fd:a2:b1:fb:4f:45:f6: 2b:35:da:4d:56:c8:db:8c:86:21:62:71:eb:80:3b: 31:fe:2a:6e:34:16:de:83:0b:32:94:f9:9a:ee:dc: 2b:08:ea:69:14:5e:f0:ca:bf:a3:08:3a:e4:53:6e: 93:e7:b7:d6:16:43:33:1e:cb:aa:ad:a2:c9:9b:18: 58:22:b0:9c:a3:d1:53:1d:70:db:cb:1a:ae:68:62: 53:d5:12:a5:3d:b2:90:ac:ab:8a:18:82:7a:54:53: 18:2c:c5:7e:75:04:5c:0b:75:ed:54:2c:4f:16:4f: 17:fb:8e:f1:fa:18:9c:93:01:16:e6:41:e5:4f:00: df:28:55:4f:43:29:51:4e:e4:ec:03:89:10:eb:3f: 34:f7:1b:a6:86:5d:1e:8c:79:9f:98:ff:08:6c:40: e0:4d:8d:af:0a:9b:1d:de:f5:95:13:4f:cd:85:df: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FD:89:44:A5:4D:DC:5A:EE:06:B1:DE:F6:1B:CD:37:C6:EA:79:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/9724846a-3c03-3ffa-8769-f69c1f9565ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 162.218.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fb:c0:3c:18:5f:87:11:1b:cb:54:e0:fb:fe:d7:4a:eb:c8: 84:65:b9:19:58:29:ff:1c:d1:a2:74:a3:09:9d:f5:9a:26:25: 89:8d:a6:20:9d:22:94:2b:80:e4:d3:bc:e2:58:76:9f:62:cb: 99:dc:2d:aa:be:b4:f9:cf:1c:13:48:6d:17:b1:ca:2f:3d:85: f1:b1:9d:ca:20:48:ac:e4:db:8c:e4:d2:4a:c7:38:a9:b6:98: b9:fb:0f:d9:08:f0:fe:d4:31:80:f1:2c:9f:42:01:e5:79:0d: 2e:0b:1a:22:11:16:5b:f8:fc:56:9d:42:c5:9c:3c:1d:0e:35: 5f:a5:cf:fd:b0:f6:c8:f0:ee:49:24:8c:6e:0f:6e:74:35:cc: bc:62:3a:f0:58:62:d4:5a:d3:96:2b:f7:40:21:bf:f0:5d:c2: e9:38:13:8d:18:97:39:ba:c5:78:2c:5a:51:45:8c:a8:98:ac: 06:04:2d:34:77:46:97:31:c5:d8:41:c5:11:a8:70:c7:ca:e1: e9:1a:f5:b1:68:2a:09:20:c3:30:5f:f4:44:6f:b8:bf:82:1c: 42:54:2c:c1:8c:b4:ec:77:24:dc:27:53:61:65:2e:19:94:58: e0:b9:d0:52:ad:78:a2:5a:df:a4:53:11:79:5b:96:b3:10:d6: 41:96:b2:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGa3u3A+jz8u7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OTI5MDlmYTEtYzk2Mi00NzIzLWE2M2ItYmRhNzUzOTUzZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKFXeSpdOHBaz54sBGPO+vDXaex36FX8LdIp 0+oKIg8J2B2GHdY0wgOGlq1yQfvaqyYdEFrN0HIxvsVzCyeXqdyqVrXuc+SHO/qj COTNfEGN4f2isftPRfYrNdpNVsjbjIYhYnHrgDsx/ipuNBbegwsylPma7twrCOpp FF7wyr+jCDrkU26T57fWFkMzHsuqraLJmxhYIrCco9FTHXDbyxquaGJT1RKlPbKQ rKuKGIJ6VFMYLMV+dQRcC3XtVCxPFk8X+47x+hickwEW5kHlTwDfKFVPQylRTuTs A4kQ6z809xumhl0ejHmfmP8IbEDgTY2vCpsd3vWVE0/Nhd9f8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL9iUSlTdxa7gax3vYbzTfG6nm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOTcyNDg0NmEtM2MwMy0z ZmZhLTg3NjktZjY5YzFmOTU2NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb7wDwYX4cRG8tU4Pv+10rryIRluRlYKf8c0aJ0owmd9ZomJYmNpiCd IpQrgOTTvOJYdp9iy5ncLaq+tPnPHBNIbRexyi89hfGxncogSKzk24zk0krHOKm2 mLn7D9kI8P7UMYDxLJ9CAeV5DS4LGiIRFlv4/FadQsWcPB0ONV+lz/2w9sjw7kkk jG4PbnQ1zLxiOvBYYtRa05Yr90Ahv/Bdwuk4E40Ylzm6xXgsWlFFjKiYrAYELTR3 RpcxxdhBxRGocMfK4eka9bFoKgkgwzBf9ERvuL+CHEJULMGMtOx3JNwnU2FlLhmU WOC50FKteKJa36RTEXlblrMQ1kGWssM= -----END CERTIFICATE-----Generated at Tue Jul 1 08:48:59 2025 by rpki-client