$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/46d0c698-2746-32eb-9a14-8a6d8eb3565e.roa File: 46d0c698-2746-32eb-9a14-8a6d8eb3565e.roa (raw, json) Hash identifier: 4lcN6dXyl0sohUyRY/heYlZ1UwuCpit3CVDcAdZomI4= Subject key identifier: A9:22:D9:95:0C:9F:70:96:09:6C:36:0E:37:46:48:0B:FF:8A:85:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926BEB5B8105EC3FFCA3800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/46d0c698-2746-32eb-9a14-8a6d8eb3565e.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 398390 IP address blocks: 65.49.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:be:b5:b8:10:5e:c3:ff:ca:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=e32098cf-4151-4100-ad3e-41dee1304a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:bc:22:44:35:26:d5:72:e8:b5:75:e7:0e: ac:b3:ac:c8:5d:ab:d0:c9:b9:64:04:c9:61:f3:7e: 13:81:3f:64:74:f8:d6:a3:6a:08:82:9c:4a:cc:02: 98:2f:e2:f0:9f:b7:dc:95:f3:fb:a9:b5:34:ee:1c: 13:ff:b0:63:48:72:d8:64:43:b7:f6:67:e7:4c:96: 5a:eb:20:7c:6a:8a:52:a2:2e:41:c2:08:8f:a8:1e: f4:19:29:02:e9:86:0a:6d:6f:97:67:25:63:8d:ed: 45:05:65:61:97:7f:78:ce:5e:2b:f7:6b:8d:3b:11: ae:ef:10:5b:b7:33:5d:98:df:04:fb:f2:d1:f6:48: 2f:ca:7c:f0:3b:fa:40:ff:f7:95:3a:76:12:ae:23: 4b:ff:4b:0d:81:ae:c1:2d:46:23:e3:47:33:26:37: 68:a4:e9:e1:88:dc:b5:0e:26:84:97:1e:32:e8:8c: bd:8b:27:38:ae:fb:43:f4:f0:93:0f:3e:4d:92:2d: 81:81:f7:b6:61:6c:80:d1:4e:61:d2:fe:30:45:b5: a2:d5:6d:96:2d:ae:d5:67:62:d3:c5:98:16:ad:19: b5:ad:c9:0d:e9:74:2e:cb:99:79:d6:e4:fd:ce:55: bb:4c:e3:56:14:94:59:a4:cd:57:e7:c9:d9:e6:bc: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:D9:95:0C:9F:70:96:09:6C:36:0E:37:46:48:0B:FF:8A:85:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/46d0c698-2746-32eb-9a14-8a6d8eb3565e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f2:0f:cb:18:f0:33:a0:c2:4e:86:1d:fe:ce:3e:5c:b1:a7: 9e:21:80:6f:0d:11:c1:1d:47:4b:4a:85:6b:c2:94:6e:3f:3e: 8c:20:a3:83:1a:51:ef:0b:bb:33:ab:ef:72:22:23:d3:fb:a0: c5:8c:15:de:56:b7:ba:0c:f1:09:5e:ce:94:83:b2:7d:62:67: da:dc:70:47:68:11:a1:79:7a:56:17:9b:51:f4:8d:d3:5a:c6: 79:36:ef:f0:1d:04:63:10:c9:53:e7:5e:7d:4e:2f:c6:b7:70: 08:b9:9a:1d:fb:a8:03:d1:81:b3:d0:44:ab:9f:d8:0f:2c:7a: c4:f7:56:95:ea:ba:2d:a7:04:9e:67:7f:1c:2c:65:32:21:e4: 0b:4f:3f:cd:81:4e:21:de:bf:1c:cb:c0:3d:ee:68:76:3a:0a: 3a:ed:ac:e4:64:46:c9:bd:01:6b:09:77:98:e1:cc:4c:f6:28: 2d:8c:75:80:fe:fb:41:22:c5:66:7b:ee:66:b0:55:d4:ce:da: bc:a8:11:3b:bb:e5:64:c5:f1:0c:65:3a:df:a8:6b:fb:4b:a7: fe:c5:0d:2b:35:1d:1a:55:97:15:ee:de:9c:cb:ea:6f:78:e2: 4b:ea:61:51:64:18:ec:0a:63:0b:eb:4e:31:51:f1:6d:4f:b3: 08:14:39:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jr61uBBew//KOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTMyMDk4Y2YtNDE1MS00MTAwLWFkM2UtNDFkZWUxMzA0YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO+8IkQ1JtVy6LV15w6ss6zIXavQyblkBMlh 834TgT9kdPjWo2oIgpxKzAKYL+Lwn7fclfP7qbU07hwT/7BjSHLYZEO39mfnTJZa 6yB8aopSoi5BwgiPqB70GSkC6YYKbW+XZyVjje1FBWVhl394zl4r92uNOxGu7xBb tzNdmN8E+/LR9kgvynzwO/pA//eVOnYSriNL/0sNga7BLUYj40czJjdopOnhiNy1 DiaElx4y6Iy9iyc4rvtD9PCTDz5Nki2Bgfe2YWyA0U5h0v4wRbWi1W2WLa7VZ2LT xZgWrRm1rckN6XQuy5l51uT9zlW7TONWFJRZpM1X58nZ5ryzSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKki2ZUMn3CWCWw2DjdGSAv/ioV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDZkMGM2OTgtMjc0Ni0z MmViLTlhMTQtOGE2ZDhlYjM1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKryD8sY8DOgwk6GHf7OPlyxp54hgG8NEcEdR0tKhWvClG4/Powgo4Ma Ue8LuzOr73IiI9P7oMWMFd5Wt7oM8QlezpSDsn1iZ9rccEdoEaF5elYXm1H0jdNa xnk27/AdBGMQyVPnXn1OL8a3cAi5mh37qAPRgbPQRKuf2A8sesT3VpXqui2nBJ5n fxwsZTIh5AtPP82BTiHevxzLwD3uaHY6CjrtrORkRsm9AWsJd5jhzEz2KC2MdYD+ +0EixWZ77mawVdTO2ryoETu75WTF8QxlOt+oa/tLp/7FDSs1HRpVlxXu3pzL6m94 4kvqYVFkGOwKYwvrTjFR8W1PswgUOa0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:54:56 2025 by rpki-client