$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa File: 11f88e34-07bc-3f95-9191-762ad2f8559d.roa (raw, json) Hash identifier: o6S8V+AcE+/PwbNgeYhDRRkNSjBfEVIN8X5akOV24Wg= Subject key identifier: 8E:A5:B7:08:BD:7F:FE:47:F3:0A:7C:5F:95:B6:41:92:82:59:F8:19 Certificate issuer: /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Certificate serial: 010D0C9F4328584A4C3B1924EB97619E104CD380 Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 65.38.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:19:24:eb:97:61:9e:10:4c:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=788d1caf-a6f4-4451-b127-2d8511f802d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:ad:97:5b:fe:7c:7b:44:f2:72:0b:36:4f: 91:96:a6:3a:a2:eb:c3:64:fd:26:c2:37:de:9b:76: 5c:54:c0:d0:55:1c:d9:7a:fd:99:2d:44:eb:5a:2e: b7:a4:8b:66:13:79:2c:62:1a:99:36:4f:d0:8b:24: fc:9a:26:97:fd:21:7f:18:61:8c:3a:b5:cc:f4:3e: 04:d4:b9:8d:4b:ec:94:f6:0f:8d:99:19:4d:bf:3b: b8:ca:a8:82:17:07:40:93:9c:ad:71:19:3c:4d:60: ac:2c:75:74:27:cd:14:0f:f2:ba:a8:b0:15:25:14: f2:fc:e2:65:01:35:ff:e7:85:d9:e3:a0:76:8a:0d: 2f:94:f3:f7:03:09:1a:d3:0a:cf:87:d2:0a:e9:cc: 08:c9:df:b3:2b:f2:cc:ca:f5:a9:89:a7:d8:93:08: 5b:c4:01:49:75:bf:17:59:d1:57:df:a5:30:06:98: fb:f3:51:c5:a8:68:ea:5f:ce:4c:28:ef:9b:3f:3d: 88:d3:ab:14:db:e3:4e:e3:ee:71:21:1f:ea:29:e9: 63:00:b7:f1:0b:82:e8:45:88:8e:92:00:c6:fd:07: ed:95:aa:b0:77:96:ae:43:e6:e1:b6:ef:be:d8:8d: 9e:79:e4:08:0e:70:53:1c:5d:30:d4:5d:52:6f:3b: 57:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A5:B7:08:BD:7F:FE:47:F3:0A:7C:5F:95:B6:41:92:82:59:F8:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl X509v3 Authority Key Identifier: keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer sbgp-ipAddrBlock: critical IPv4: 65.38.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8c:12:53:e2:c6:89:2d:76:27:b0:8f:ae:ea:74:c8:08:e8: c1:fa:1e:fc:f6:f5:8f:9a:5e:12:46:53:40:49:7d:5f:5f:b9: dd:c8:95:15:87:de:5d:84:de:a6:38:c2:d3:63:75:28:ec:cc: 1d:9d:11:04:c1:2c:d9:e7:5d:c0:3a:c0:c6:ee:79:d3:da:bb: 60:65:0c:27:27:de:0b:72:7e:91:f5:f8:85:f8:e4:14:ea:8d: ff:55:bd:28:18:eb:1e:dd:e0:a0:8b:48:ad:c1:6d:b3:3b:ac: 7b:79:de:79:44:c3:3a:d3:cf:39:47:ea:cf:dc:b2:69:fd:81: 4a:75:c2:f1:44:96:8d:7c:33:ea:75:c1:53:8c:56:3f:8b:05: 4f:69:99:14:77:33:aa:87:46:ef:ce:93:05:ba:52:bc:ce:85: 6b:56:04:f4:44:68:10:c0:7d:71:6e:b1:e4:85:6f:6e:c9:64: 96:5c:a0:35:07:49:22:da:d8:d4:87:e4:1b:bd:47:72:a2:e6: c4:be:87:0a:58:89:ba:0c:17:9e:fd:56:ce:45:d3:be:6b:3f: d6:e7:0b:98:c4:81:dd:89:0d:3a:09:12:27:1b:e3:29:da:5f: 3a:43:bb:67:4b:45:81:88:2f:90:b4:81:c0:2a:b5:c4:31:8a: af:8d:19:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxkk65dhnhBM04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZWJkNGUtMTBkNy00NGIzLTgwMmUtNGVmZTYwN2Rk NGUzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk Nzg4ZDFjYWYtYTZmNC00NDUxLWIxMjctMmQ4NTExZjgwMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAqtl1v+fHtE8nILNk+RlqY6ouvDZP0mwjfe m3ZcVMDQVRzZev2ZLUTrWi63pItmE3ksYhqZNk/QiyT8miaX/SF/GGGMOrXM9D4E 1LmNS+yU9g+NmRlNvzu4yqiCFwdAk5ytcRk8TWCsLHV0J80UD/K6qLAVJRTy/OJl ATX/54XZ46B2ig0vlPP3Awka0wrPh9IK6cwIyd+zK/LMyvWpiafYkwhbxAFJdb8X WdFX36UwBpj781HFqGjqX85MKO+bPz2I06sU2+NO4+5xIR/qKeljALfxC4LoRYiO kgDG/Qftlaqwd5auQ+bhtu++2I2eeeQIDnBTHF0w1F1SbztXUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6ltwi9f/5H8wp8X5W2QZKCWfgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNl YmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZlNjA3ZGQ0ZTMvMTFmODhlMzQtMDdiYy0z Zjk1LTkxOTEtNzYyYWQyZjg1NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWFjZWJkNGUtMTBkNy00NGIzLTgw MmUtNGVmZTYwN2RkNGUzLzlhY2ViZDRlLTEwZDctNDRiMy04MDJlLTRlZmU2MDdk ZDRlMy5jcmwwHwYDVR0jBBgwFoAUqpc1PZOsrdVw+9tWLaXUD1ZVdGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNlYmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZl NjA3ZGQ0ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeMElPixoktdiewj67qdMgI6MH6Hvz29Y+aXhJGU0BJfV9fud3IlRWH 3l2E3qY4wtNjdSjszB2dEQTBLNnnXcA6wMbuedPau2BlDCcn3gtyfpH1+IX45BTq jf9VvSgY6x7d4KCLSK3BbbM7rHt53nlEwzrTzzlH6s/csmn9gUp1wvFElo18M+p1 wVOMVj+LBU9pmRR3M6qHRu/OkwW6UrzOhWtWBPREaBDAfXFuseSFb27JZJZcoDUH SSLa2NSH5Bu9R3Ki5sS+hwpYiboMF579Vs5F075rP9bnC5jEgd2JDToJEicb4yna XzpDu2dLRYGIL5C0gcAqtcQxiq+NGQA= -----END CERTIFICATE-----Generated at Sun Jun 29 08:13:08 2025 by rpki-client