$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa File: cbac2488-f4b2-3b9a-80e2-176f1395516e.roa (raw, json) Hash identifier: p9J++kOslzvVUbOQXplXp+r6bNUEEnU4DXV7/PnUtFg= Subject key identifier: AA:25:23:72:24:10:D2:86:68:03:5D:6B:25:0C:CA:76:67:E3:1D:58 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E4952494C131F4550A80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 3491 IP address blocks: 65.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e4:95:24:94:c1:31:f4:55:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=41c700a5-1ef5-4d8c-ac4b-501bd2212da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:c4:6f:d7:c1:7d:44:6b:f2:4a:93:c0:1c: 16:6c:0c:a7:79:98:f3:b6:ac:b4:05:73:d0:77:65: de:17:5a:3a:2e:6a:6a:f4:2f:6f:49:51:34:95:f7: 4f:d4:31:6b:4a:6d:80:36:d9:90:f9:4a:10:06:f4: 7a:9c:f3:43:51:e6:85:4d:7c:ad:7d:b2:22:d5:d8: 28:fb:1d:9d:eb:3b:3d:0a:2b:95:5e:46:10:4d:60: 2d:19:31:6f:30:28:16:4b:6d:99:1f:3b:f6:31:b5: e1:b1:73:80:f5:66:65:fd:83:29:cb:96:49:a2:28: c5:a4:54:55:fc:9c:d0:be:98:ed:93:4e:74:f9:13: 0b:9e:9d:96:a3:c5:e0:a2:ef:53:0b:3b:5c:aa:fe: ca:a0:db:6b:c6:5f:a0:4e:4b:0b:e7:63:59:ad:c1: a3:5b:d9:13:69:8d:97:24:1a:a7:b4:fa:e3:a2:c0: 2e:f7:a2:e3:6d:5a:23:78:0f:12:13:1c:25:4a:cb: 96:fc:37:70:46:07:11:5d:38:44:7c:93:09:9f:49: e5:dc:41:13:71:c6:5c:44:f3:e3:2c:3e:d7:c9:8a: de:d4:e8:23:08:c5:9a:cf:0d:90:53:e9:0b:b3:05: b7:df:8f:c3:05:8f:7d:a9:63:25:cd:2d:eb:c3:b5: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:25:23:72:24:10:D2:86:68:03:5D:6B:25:0C:CA:76:67:E3:1D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 65.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:65:41:5e:38:ae:e0:ce:80:36:bf:66:b6:93:5b:2c:d4:f4: b5:f8:a2:6f:a1:44:3b:1f:4c:bd:22:90:27:9c:3a:3e:7f:df: 84:a0:20:a6:23:2e:fb:a1:a8:95:fa:d9:53:77:ac:d5:d6:ac: eb:12:8f:08:83:c8:a1:b4:2e:a0:1b:24:62:f7:bf:1e:77:60: f7:39:49:a6:33:1c:04:a5:f3:7b:e6:e6:ef:f1:bb:1a:85:2b: 17:bb:14:a1:bb:1d:7e:6e:34:ec:f1:cb:81:6b:71:0e:8b:45: 0a:89:0d:f0:ad:63:43:a2:df:71:be:bd:d9:a0:a3:4b:b6:0c: 59:79:cc:fd:df:fc:c7:d5:cc:50:c3:8c:0a:71:83:df:5f:3d: 02:80:33:5e:8c:2e:0f:a2:2b:7a:dd:0e:0e:27:64:76:21:70: 7b:71:32:3b:e0:a5:33:9a:ac:eb:fb:42:41:41:08:d4:33:81: 09:31:be:a5:6f:bf:b3:56:57:93:df:75:45:d7:f8:ec:56:84: f7:58:8c:5c:ed:eb:6a:e8:0b:90:b4:f5:ff:79:54:e8:dd:0d: 21:4f:c1:cc:6e:e5:11:e0:3f:dc:87:71:92:95:ad:06:f4:20: b7:49:69:d7:3d:3c:c5:06:0a:59:41:59:9d:75:d4:26:90:c6: a6:ee:4f:f2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnVlOSVJJTBMfRVCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NDFjNzAwYTUtMWVmNS00ZDhjLWFjNGItNTAxYmQyMjEyZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV/Eb9fBfURr8kqTwBwWbAyneZjztqy0BXPQ d2XeF1o6Lmpq9C9vSVE0lfdP1DFrSm2ANtmQ+UoQBvR6nPNDUeaFTXytfbIi1dgo +x2d6zs9CiuVXkYQTWAtGTFvMCgWS22ZHzv2MbXhsXOA9WZl/YMpy5ZJoijFpFRV /JzQvpjtk050+RMLnp2Wo8Xgou9TCztcqv7KoNtrxl+gTksL52NZrcGjW9kTaY2X JBqntPrjosAu96LjbVojeA8SExwlSsuW/DdwRgcRXThEfJMJn0nl3EETccZcRPPj LD7XyYre1OgjCMWazw2QU+kLswW334/DBY99qWMlzS3rw7UJoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKolI3IkENKGaANdayUMynZn4x1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2JhYzI0ODgtZjRiMi0z YjlhLTgwZTItMTc2ZjEzOTU1MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQUgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZ2VBXjiu4M6ANr9mtpNbLNT0tfiib6FEOx9MvSKQJ5w6Pn/fhKAgpiMu +6GolfrZU3es1das6xKPCIPIobQuoBskYve/Hndg9zlJpjMcBKXze+bm7/G7GoUr F7sUobsdfm407PHLgWtxDotFCokN8K1jQ6Lfcb692aCjS7YMWXnM/d/8x9XMUMOM CnGD3189AoAzXowuD6Iret0ODidkdiFwe3EyO+ClM5qs6/tCQUEI1DOBCTG+pW+/ s1ZXk991Rdf47FaE91iMXO3raugLkLT1/3lU6N0NIU/BzG7lEeA/3IdxkpWtBvQg t0lp1z08xQYKWUFZnXXUJpDGpu5P8g== -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:41 2025 by rpki-client