$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa File: a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa (raw, json) Hash identifier: IJb7XkxgL+ITVRAz7SWgbHrg0/JaO4qSwJOexin4F6M= Subject key identifier: 29:F0:BA:68:60:DE:E2:2E:E2:B2:93:04:C6:F5:0B:01:8F:60:01:DB Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BDF74D082418BC1ADBB80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 198148 IP address blocks: 65.72.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:df:74:d0:82:41:8b:c1:ad:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d791b33b-7397-4634-beaa-a6b88be0def8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:16:6d:d9:c2:98:14:bc:46:fa:24:bb:c2: 92:cd:d7:7b:bb:28:af:71:a6:c5:ad:e7:bb:7c:28: 04:07:83:df:68:e0:40:ac:91:b1:cd:d0:02:d7:6b: 94:b8:36:ce:d9:0d:20:de:ff:b4:1b:da:e4:0f:aa: f4:11:3d:86:1d:4f:01:8d:15:ca:21:10:3e:2d:6f: 34:a0:a9:db:3d:49:d8:9b:2d:3f:5f:20:cc:c4:f8: f7:82:a0:5e:2d:07:50:d9:e7:50:90:ee:93:ac:c1: 57:12:b2:c8:31:de:43:25:b3:53:e7:e2:f4:1e:30: f8:db:d2:d4:b6:0d:3a:f3:f9:c2:10:fb:3e:04:49: 49:eb:2a:f8:c2:d5:bd:e9:55:0c:ff:42:5d:d4:cd: 4a:26:72:fc:a7:cb:ba:a4:99:93:9a:21:f6:35:b6: 35:b3:82:5c:a9:c5:d3:99:e9:d3:7f:5e:dd:89:a4: 6d:ef:ea:3a:2e:bd:a6:ee:55:92:49:e9:49:74:42: ff:a2:e5:7f:32:ff:4d:58:72:78:35:53:51:42:20: 34:3a:96:fb:4a:67:16:76:19:56:43:06:ff:36:ae: 94:1d:b5:f0:cf:ee:12:57:1f:ce:3a:a1:16:52:a1: 09:f6:d3:93:b0:17:d8:ab:6b:82:74:20:7d:b7:47: af:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F0:BA:68:60:DE:E2:2E:E2:B2:93:04:C6:F5:0B:01:8F:60:01:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a72eea3e-9e90-38bc-9e8a-67182ad56a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 65.72.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:39:89:91:b9:01:6b:ab:32:79:b5:2e:12:dc:0b:6c:12:db: a5:97:aa:74:00:cd:f4:22:2b:22:4d:06:a9:27:ee:7a:e8:e6: 00:77:4a:86:75:6c:ff:39:ed:7d:9b:38:78:29:18:bd:69:af: 48:de:1b:85:f4:9e:51:de:fa:ac:51:0b:af:25:bb:87:b5:d2: aa:2f:79:10:af:97:1a:30:68:22:22:91:c5:d2:9b:71:b8:b1: cf:da:fb:b6:37:f1:2e:de:7e:19:27:a9:66:e8:a1:91:a3:fd: 3c:cb:5c:dc:64:5c:35:ec:30:51:74:b5:70:09:0e:52:15:ae: 60:f1:6f:f2:ab:82:66:da:dd:4e:0e:e6:2a:cd:7e:aa:25:2e: 50:e8:0c:87:9e:1d:38:a3:16:11:1a:38:cd:a9:44:21:7d:d2: 74:c1:ee:22:2c:fb:90:da:1c:c7:4e:df:03:54:31:6c:94:d5: b7:75:0b:f8:44:48:66:38:ba:f6:80:ee:f8:41:23:54:64:3f: 00:ba:1a:77:f5:ac:11:4d:69:f8:da:c3:fe:f4:87:31:8b:5c: 67:a3:3a:e0:83:0e:90:95:a5:6c:30:e2:77:3c:96:3b:58:0c: b6:a6:56:04:d3:46:cc:0c:5c:f6:eb:cd:b2:cd:6b:dd:f8:04: 76:d6:41:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9900IJBi8Gtu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDc5MWIzM2ItNzM5Ny00NjM0LWJlYWEtYTZiODhiZTBkZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOQWbdnCmBS8Rvoku8KSzdd7uyivcabFree7 fCgEB4PfaOBArJGxzdAC12uUuDbO2Q0g3v+0G9rkD6r0ET2GHU8BjRXKIRA+LW80 oKnbPUnYmy0/XyDMxPj3gqBeLQdQ2edQkO6TrMFXErLIMd5DJbNT5+L0HjD429LU tg068/nCEPs+BElJ6yr4wtW96VUM/0Jd1M1KJnL8p8u6pJmTmiH2NbY1s4JcqcXT menTf17diaRt7+o6Lr2m7lWSSelJdEL/ouV/Mv9NWHJ4NVNRQiA0Opb7SmcWdhlW Qwb/Nq6UHbXwz+4SVx/OOqEWUqEJ9tOTsBfYq2uCdCB9t0ev2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnwumhg3uIu4rKTBMb1CwGPYAHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTcyZWVhM2UtOWU5MC0z OGJjLTllOGEtNjcxODJhZDU2YTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQUhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs5iZG5AWurMnm1LhLcC2wS26WXqnQAzfQiKyJNBqkn7nro5gB3SoZ1 bP857X2bOHgpGL1pr0jeG4X0nlHe+qxRC68lu4e10qoveRCvlxowaCIikcXSm3G4 sc/a+7Y38S7efhknqWbooZGj/TzLXNxkXDXsMFF0tXAJDlIVrmDxb/Krgmba3U4O 5irNfqolLlDoDIeeHTijFhEaOM2pRCF90nTB7iIs+5DaHMdO3wNUMWyU1bd1C/hE SGY4uvaA7vhBI1RkPwC6Gnf1rBFNafjaw/70hzGLXGejOuCDDpCVpWww4nc8ljtY DLamVgTTRswMXPbrzbLNa934BHbWQdg= -----END CERTIFICATE-----Generated at Sun Apr 6 14:44:04 2025 by rpki-client