$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd2429e-a185-33cb-88e8-41ef3981f05b.roa File: 3fd2429e-a185-33cb-88e8-41ef3981f05b.roa (raw, json) Hash identifier: vDFGlOmseFXUnvXeLJnjtnPnDoAG5lhjXoPIzJEVfwU= Subject key identifier: B6:14:3E:C9:3A:11:6E:C5:ED:C7:ED:ED:F8:0C:11:19:9D:9A:E9:A2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848FD56CCE068FCCA6ACEF260B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd2429e-a185-33cb-88e8-41ef3981f05b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 3455 IP address blocks: 65.196.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cc:e0:68:fc:ca:6a:ce:f2:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=ddc077fe-9093-4b0b-a681-2f22ae38b5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:76:63:17:19:7a:20:fa:da:1a:bf:17:2e: 4c:3d:95:a0:c2:0b:91:29:5c:49:f6:31:d4:4d:2d: cd:4f:af:86:43:60:ff:bb:fb:58:65:91:37:96:74: e7:0d:17:6c:53:5b:49:b1:6e:ee:f0:3b:72:20:46: 1f:91:39:b2:5d:0b:73:03:bb:fc:41:b8:19:6a:b6: ba:4d:30:3d:9f:91:df:8d:08:95:3d:d5:b2:2d:1f: 9f:22:74:f3:c7:da:53:6d:b6:9a:a7:f9:a3:cf:e2: b5:fd:49:14:d7:4c:5c:35:4d:09:c1:06:1f:72:d3: 46:66:4b:51:41:c4:e6:b7:e0:bc:3e:ab:62:57:7e: c8:5c:71:c9:5d:d0:08:b0:d7:68:bb:dd:93:79:2d: 3f:96:eb:f6:d0:ca:ae:c5:2c:49:65:ac:c7:cd:b9: 88:69:d5:19:b8:95:3d:83:5f:45:08:01:f6:c8:cd: 60:a0:51:25:4a:7c:c6:18:88:14:b7:d2:bc:d7:23: 7a:da:2e:15:5c:ec:6d:d5:c5:05:17:c7:63:cb:0d: 93:3d:33:a1:61:fa:35:3a:11:46:97:81:a9:72:c9: 37:ad:c1:24:82:97:88:8d:36:14:b6:60:29:50:c6: 63:37:04:fe:82:06:b8:2d:42:d7:58:4c:01:7d:af: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:14:3E:C9:3A:11:6E:C5:ED:C7:ED:ED:F8:0C:11:19:9D:9A:E9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd2429e-a185-33cb-88e8-41ef3981f05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.196.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:e5:c0:3b:3d:eb:2b:2e:6c:ff:6e:c8:9c:bc:1d:06:85: 9c:c6:26:99:a6:d0:85:d3:49:11:bf:22:16:2c:a1:de:e9:a0: f8:5d:6b:21:d1:f2:04:55:6b:6c:35:21:b5:36:98:d5:72:01: 7a:88:f9:0a:ca:02:1f:95:75:f3:8e:6e:30:a4:aa:26:84:48: 05:84:ac:01:7d:08:27:f2:70:07:7d:96:7b:7d:80:3e:59:c1: 70:b6:aa:4e:bc:84:1f:16:93:85:36:cb:b6:9f:60:b6:1f:d5: 34:a9:5e:a6:d4:f2:59:84:16:77:f5:7f:c8:97:52:5a:1a:90: aa:79:7a:cf:b5:bd:93:fe:c8:68:95:96:df:83:b6:b1:59:6e: b5:04:14:84:14:a4:56:19:d3:9e:4f:a8:d0:e3:41:a6:53:cb: 7d:29:a9:6e:da:68:5e:3c:bf:5d:f3:4a:81:ee:07:64:9a:04: 4d:19:c8:ff:b4:fe:ff:07:d4:7e:f6:df:13:cd:7d:0e:02:07: 0b:8f:f2:1d:21:a4:c2:8c:14:d8:cb:44:44:42:ee:b6:15:51: 17:89:33:fd:bb:f1:85:83:ef:57:09:a0:8c:fc:69:85:15:99: 6a:ab:a9:48:25:9c:79:4e:09:13:d0:a0:8d:eb:ed:fa:d9:16: 34:f6:4f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VszgaPzKas7yYLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGRjMDc3ZmUtOTA5My00YjBiLWE2ODEtMmYyMmFlMzhiNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE52YxcZeiD62hq/Fy5MPZWgwguRKVxJ9jHU TS3NT6+GQ2D/u/tYZZE3lnTnDRdsU1tJsW7u8DtyIEYfkTmyXQtzA7v8QbgZara6 TTA9n5HfjQiVPdWyLR+fInTzx9pTbbaap/mjz+K1/UkU10xcNU0JwQYfctNGZktR QcTmt+C8PqtiV37IXHHJXdAIsNdou92TeS0/luv20MquxSxJZazHzbmIadUZuJU9 g19FCAH2yM1goFElSnzGGIgUt9K81yN62i4VXOxt1cUFF8djyw2TPTOhYfo1OhFG l4Gpcsk3rcEkgpeIjTYUtmApUMZjNwT+gga4LULXWEwBfa8S6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYUPsk6EW7F7cft7fgMERmdmumiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZkMjQyOWUtYTE4NS0z M2NiLTg4ZTgtNDFlZjM5ODFmMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQcQvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIx5cA7PesrLmz/bsicvB0GhZzGJpmm0IXTSRG/IhYsod7poPhdayHR 8gRVa2w1IbU2mNVyAXqI+QrKAh+VdfOObjCkqiaESAWErAF9CCfycAd9lnt9gD5Z wXC2qk68hB8Wk4U2y7afYLYf1TSpXqbU8lmEFnf1f8iXUloakKp5es+1vZP+yGiV lt+DtrFZbrUEFIQUpFYZ055PqNDjQaZTy30pqW7aaF48v13zSoHuB2SaBE0ZyP+0 /v8H1H723xPNfQ4CBwuP8h0hpMKMFNjLRERC7rYVUReJM/278YWD71cJoIz8aYUV mWqrqUglnHlOCRPQoI3r7frZFjT2T0I= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:19 2025 by rpki-client