$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa File: 0e53396b-8611-3d42-ac77-f3f6a383e7de.roa (raw, json) Hash identifier: sxoOjnrFfIfX9jv5p5I94t3Hp1uyFkMhfypv1wzjXS4= Subject key identifier: 9B:2D:5D:FF:64:3C:32:42:64:FA:92:58:DD:E0:C3:18:4E:C5:3F:F1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D7BCCB297A048D531500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 394996 IP address blocks: 65.49.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d7:bc:cb:29:7a:04:8d:53:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=897d5429-540d-4f61-beda-2f374509c874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:2b:3d:74:1c:08:b9:22:8e:89:e5:4a:59: f8:1f:b4:80:c5:38:d5:4d:3a:d6:c5:1a:54:76:e1: 59:ea:1c:37:df:3a:de:7b:69:15:84:1d:a6:56:54: 77:1c:f9:c2:e6:85:ea:43:7a:eb:b8:79:7a:6e:64: b1:68:f0:ac:09:07:9a:1d:df:39:75:69:14:de:5d: 77:d2:6d:45:2a:6f:0f:19:17:c8:c5:53:ae:4f:10: 37:7d:ff:9d:f0:6f:3e:3c:3f:33:d3:33:84:cf:e3: a9:b1:63:f9:39:46:c1:26:c3:71:e3:7f:56:aa:ba: 55:df:22:15:d7:ad:ac:9c:2a:42:a2:b7:0a:cc:93: 97:51:86:eb:89:7e:dd:34:5c:aa:57:6c:73:09:3c: 7d:d7:c1:0e:e9:d1:bf:93:9e:db:34:ec:4c:29:b0: 9b:a0:b3:f6:08:77:40:e7:b7:ec:ad:28:0e:ee:ca: 83:5b:a7:7c:e6:df:b3:c7:93:e2:4d:0e:d5:3a:f6: 25:59:3f:a5:c0:78:84:8e:28:5f:cc:fd:c7:30:b2: 9a:b0:94:54:b1:31:07:9f:5e:7f:10:62:df:86:01: 30:a6:d4:98:a5:6b:d3:5e:db:c6:70:37:07:81:e0: 0f:f2:8c:40:79:81:9e:26:9b:9c:0b:de:c2:9f:64: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2D:5D:FF:64:3C:32:42:64:FA:92:58:DD:E0:C3:18:4E:C5:3F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:d9:5b:fb:b3:11:d9:33:41:88:cf:60:28:f3:18:71:b6:d8: c0:78:9f:9b:e8:ad:ab:4d:67:ef:f3:56:48:d4:a4:79:96:89: 18:ab:64:77:b6:ae:0c:b5:9c:05:e4:00:d7:c0:da:35:6a:6b: 91:a4:89:b1:79:27:04:53:4c:35:e1:74:87:8b:32:f2:6f:be: e5:e8:9e:ec:1f:f0:26:03:eb:a1:98:09:e8:41:09:29:b7:79: 2d:b0:ac:1c:e0:b7:59:e8:67:dc:52:d0:46:3c:08:77:a7:53: 42:5a:d3:eb:53:52:03:5f:b5:96:a8:09:4e:ad:7c:e2:df:4f: ea:44:2e:54:b1:00:a1:15:ef:b0:76:1b:d6:bb:38:12:61:c9: 2d:8f:bf:e7:64:de:e1:49:e7:6a:48:3d:48:1f:15:cb:ac:4a: 36:0b:bc:4f:c9:92:cf:3c:31:2e:5a:a8:93:62:fb:a6:e7:72: 33:3c:c9:cf:5b:34:7c:1e:e8:94:e7:1a:5c:5d:82:a9:26:30: 44:db:a8:ab:e6:24:db:f6:e3:16:f9:8e:b1:14:3b:cf:96:2a: a4:d1:f0:f7:77:7d:cd:df:0c:e3:3c:41:f6:0b:8e:6e:8d:17: fc:b5:07:37:ec:c0:b2:0a:ce:2c:63:8f:a0:a8:25:74:da:01: 7e:ff:94:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jte8yyl6BI1TFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODk3ZDU0MjktNTQwZC00ZjYxLWJlZGEtMmYzNzQ1MDljODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj8rPXQcCLkijonlSln4H7SAxTjVTTrWxRpU duFZ6hw33zree2kVhB2mVlR3HPnC5oXqQ3rruHl6bmSxaPCsCQeaHd85dWkU3l13 0m1FKm8PGRfIxVOuTxA3ff+d8G8+PD8z0zOEz+OpsWP5OUbBJsNx439WqrpV3yIV 162snCpCorcKzJOXUYbriX7dNFyqV2xzCTx918EO6dG/k57bNOxMKbCboLP2CHdA 57fsrSgO7sqDW6d85t+zx5PiTQ7VOvYlWT+lwHiEjihfzP3HMLKasJRUsTEHn15/ EGLfhgEwptSYpWvTXtvGcDcHgeAP8oxAeYGeJpucC97Cn2TjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJstXf9kPDJCZPqSWN3gwxhOxT/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGU1MzM5NmItODYxMS0z ZDQyLWFjNzctZjNmNmEzODNlN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTZW/uzEdkzQYjPYCjzGHG22MB4n5voratNZ+/zVkjUpHmWiRirZHe2 rgy1nAXkANfA2jVqa5GkibF5JwRTTDXhdIeLMvJvvuXonuwf8CYD66GYCehBCSm3 eS2wrBzgt1noZ9xS0EY8CHenU0Ja0+tTUgNftZaoCU6tfOLfT+pELlSxAKEV77B2 G9a7OBJhyS2Pv+dk3uFJ52pIPUgfFcusSjYLvE/Jks88MS5aqJNi+6bncjM8yc9b NHwe6JTnGlxdgqkmMETbqKvmJNv24xb5jrEUO8+WKqTR8Pd3fc3fDOM8QfYLjm6N F/y1BzfswLIKzixjj6CoJXTaAX7/lFk= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:14 2025 by rpki-client