$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa File: 7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa (raw, json) Hash identifier: +NraAH1b9V+DkexPeWh7SylFshWi4S6o3FHAQDNnxLg= Subject key identifier: A6:16:26:64:18:C0:63:E0:D9:E0:44:DC:B7:1A:E9:79:B7:D7:3B:A8 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584AC876401A658AB683902755C0 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 65.37.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:40:1a:65:8a:b6:83:90:27:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=dc352b0d-6f71-4679-87ae-a95117138bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:da:da:9e:0f:38:bb:6d:c1:a1:1d:02:b4: 30:49:2b:ac:93:09:3c:1f:31:c8:db:93:58:ec:02: 3c:35:98:d5:60:12:04:e5:df:02:26:6e:b0:f9:86: 19:9a:5e:05:49:dc:7c:6d:b4:31:28:f4:54:c3:c1: af:45:5c:cc:86:de:56:0d:a5:7b:8d:25:9d:46:ff: 6e:85:1d:c5:ba:a5:9a:51:0e:18:41:24:95:70:4b: 26:d7:c2:f9:c3:20:e7:0e:5a:ca:af:b9:5c:dd:be: 8e:73:05:81:45:a9:b4:1c:c7:69:ab:ad:fa:fb:b6: c4:0c:7f:01:af:4a:70:f1:8a:5a:ed:50:55:95:57: 4e:33:6c:3f:6c:a5:7a:2e:1d:a4:da:e4:f6:b7:87: 6a:9e:73:f3:dd:16:3f:af:a1:41:42:4c:cf:b2:52: ae:c0:ca:9f:1f:60:c9:ca:21:c3:90:39:55:e0:a0: 1a:e6:27:55:89:de:88:1b:95:ee:68:b7:dc:92:0b: c5:c5:5a:fc:80:d2:74:7c:be:da:6d:70:5b:06:6e: ab:74:db:ce:ed:e7:50:b6:57:55:19:a8:5b:5c:4f: a3:25:34:9f:40:a7:2b:6b:bb:0b:8b:d4:e6:ae:db: 8c:d1:c2:5b:3e:67:89:2c:57:0e:f6:ef:18:d6:24: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:16:26:64:18:C0:63:E0:D9:E0:44:DC:B7:1A:E9:79:B7:D7:3B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 65.37.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4a:92:df:c8:ea:ac:18:b9:23:29:5b:25:ec:53:80:a6:2a: 4e:99:e3:f6:2a:32:dd:fe:7d:a1:ff:35:80:39:50:8f:ae:f9: eb:53:b6:cc:12:4d:ab:65:6c:64:48:2c:47:e6:fe:70:5d:75: 4a:8f:af:e8:f3:75:3a:b8:35:2b:c0:9d:9f:8c:04:db:c6:54: 2b:75:b6:be:a6:b8:3b:1e:0a:d3:c6:d6:db:72:c1:c9:19:98: f8:9a:d4:0f:b2:2f:45:9e:2d:68:23:8b:78:d6:49:9b:09:8a: 0c:e6:79:41:21:b7:9b:6e:55:e0:ce:fa:cb:7d:7a:56:6b:9e: bc:1b:42:fc:5e:b7:c5:fb:df:5c:72:f0:06:0e:53:51:8f:81: e9:2d:f4:6d:fc:38:ca:1e:99:ca:7d:c3:39:75:89:1a:6c:b0: a3:f2:76:16:55:68:7b:2f:61:b2:1b:e8:e3:2a:bc:7a:48:b1: bc:4b:1d:e1:eb:fe:2b:53:86:ff:39:38:58:48:54:b2:c7:40: b5:30:8d:a1:e3:46:b1:5f:23:9f:1e:45:43:fa:d2:68:43:ba: 50:b2:85:d4:65:bd:b8:9d:72:02:97:7f:a6:c3:04:c8:62:02: 01:e8:92:da:b6:1c:55:dd:e3:d9:1c:ec:88:b8:51:ce:df:f9: f5:5c:ab:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdkAaZYq2g5AnVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGMzNTJiMGQtNmY3MS00Njc5LTg3YWUtYTk1MTE3MTM4YmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCPa2p4POLttwaEdArQwSSuskwk8HzHI25NY 7AI8NZjVYBIE5d8CJm6w+YYZml4FSdx8bbQxKPRUw8GvRVzMht5WDaV7jSWdRv9u hR3FuqWaUQ4YQSSVcEsm18L5wyDnDlrKr7lc3b6OcwWBRam0HMdpq636+7bEDH8B r0pw8Ypa7VBVlVdOM2w/bKV6Lh2k2uT2t4dqnnPz3RY/r6FBQkzPslKuwMqfH2DJ yiHDkDlV4KAa5idVid6IG5XuaLfckgvFxVr8gNJ0fL7abXBbBm6rdNvO7edQtldV GahbXE+jJTSfQKcra7sLi9TmrtuM0cJbPmeJLFcO9u8Y1iT3HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYWJmQYwGPg2eBE3Lca6Xm31zuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvN2Y3OGVmYTQtMzQ0OC0z MWVmLWExZDUtY2Q2OTBhNGRjN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdKkt/I6qwYuSMpWyXsU4CmKk6Z4/YqMt3+faH/NYA5UI+u+etTtswS TatlbGRILEfm/nBddUqPr+jzdTq4NSvAnZ+MBNvGVCt1tr6muDseCtPG1ttywckZ mPia1A+yL0WeLWgji3jWSZsJigzmeUEht5tuVeDO+st9elZrnrwbQvxet8X731xy 8AYOU1GPgekt9G38OMoemcp9wzl1iRpssKPydhZVaHsvYbIb6OMqvHpIsbxLHeHr /itThv85OFhIVLLHQLUwjaHjRrFfI58eRUP60mhDulCyhdRlvbidcgKXf6bDBMhi AgHoktq2HFXd49kc7Ii4Uc7f+fVcq0Q= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:10 2025 by rpki-client