$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d688c313-2094-344a-8853-68b13918e28d.roa File: d688c313-2094-344a-8853-68b13918e28d.roa (raw, json) Hash identifier: H3aI3RqZifpY/9i6frSnOjuNlHgm295h06xjE9T3YmI= Subject key identifier: 84:42:6B:AD:B6:BD:9B:7C:63:F8:B6:63:99:8E:D1:68:4D:6C:4D:45 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D91959DAC860A7F89300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d688c313-2094-344a-8853-68b13918e28d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 54288 IP address blocks: 65.49.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d9:19:59:da:c8:60:a7:f8:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=a2733bf9-bded-41ac-9d77-d4bf63e22a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:7f:e9:06:3d:c8:37:a3:86:a0:11:12:bb: 9c:6f:48:a6:91:54:e6:26:bf:9b:b2:60:f7:9b:c0: d3:4b:57:51:4e:7c:04:50:7b:ed:f3:1b:a0:12:63: 77:07:c7:3e:dd:29:b3:16:0c:fa:57:b8:a5:3e:c2: 49:bd:11:2d:84:d9:06:78:68:23:49:05:96:9b:a6: ea:76:bf:05:42:e5:83:40:a2:a8:11:b0:ce:5a:05: bc:42:17:23:76:4f:5e:5b:c1:1b:e2:eb:7d:b0:66: f9:b9:17:32:0b:93:fa:87:16:03:66:20:1f:77:15: f1:47:37:25:98:c9:59:78:52:00:57:48:5f:6e:da: c3:2a:a9:c1:b1:49:d0:4f:a2:22:a9:c5:9d:bd:8a: 74:60:29:1e:32:b0:4a:ce:72:0f:42:23:a0:5a:0c: 97:de:1f:49:f6:bc:59:ff:81:35:c1:e4:0c:a1:47: 58:c2:93:cd:2e:68:19:13:61:1c:b4:70:7f:88:dc: fe:1c:94:f7:04:ed:c2:78:ef:b9:71:43:9f:d4:76: 56:8b:72:af:7c:05:78:65:bb:60:dc:42:5a:9f:de: 61:79:f8:86:0b:f7:cf:4d:6b:09:45:c2:02:16:d3: e3:3e:89:26:23:91:37:17:3e:43:37:52:6d:58:93: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:42:6B:AD:B6:BD:9B:7C:63:F8:B6:63:99:8E:D1:68:4D:6C:4D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d688c313-2094-344a-8853-68b13918e28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:99:fc:29:22:ad:2f:f5:e4:60:75:29:1c:24:eb:ef:60:60: 49:80:b5:d8:87:dd:0c:e7:14:03:b0:56:80:7b:e5:28:c8:5b: 33:c9:bb:23:9e:23:41:df:95:80:15:d5:8d:a0:c8:ef:c8:9f: 28:59:0c:3f:64:71:03:f8:5d:73:20:cb:d8:20:9c:d1:e0:f6: ba:dd:75:9b:f3:e5:15:f5:c5:7e:67:9d:99:cb:a6:15:26:cd: 3c:9a:d2:2c:59:cd:21:1d:e1:11:3e:b8:5e:fc:b3:0c:e6:e5: 00:c4:01:d1:50:6b:c5:a6:be:5a:40:44:39:88:8d:d1:22:dd: ad:6e:00:e0:f8:f8:50:d8:1c:d3:58:b3:fd:41:04:24:41:6d: d9:48:55:c1:50:da:d8:30:c8:f2:9e:0b:e6:f6:01:ee:b3:9f: d3:95:0c:c9:a4:3f:fa:48:90:a8:27:a7:13:77:82:06:32:e8: 52:0f:32:75:2f:41:13:e8:8e:11:ba:d1:26:5c:f9:d8:41:ee: b7:17:fb:40:8a:17:08:d4:70:0e:01:c1:0b:04:17:26:2b:30: 67:b9:04:3f:d4:2a:43:7e:a7:ca:a7:dd:cf:c9:33:3d:23:3b: aa:4f:2d:65:56:3b:1d:16:63:0d:75:cb:28:6d:b0:4c:ef:ad: a4:11:2a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtkZWdrIYKf4kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YTI3MzNiZjktYmRlZC00MWFjLTlkNzctZDRiZjYzZTIyYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+p/6QY9yDejhqARErucb0imkVTmJr+bsmD3 m8DTS1dRTnwEUHvt8xugEmN3B8c+3SmzFgz6V7ilPsJJvREthNkGeGgjSQWWm6bq dr8FQuWDQKKoEbDOWgW8Qhcjdk9eW8Eb4ut9sGb5uRcyC5P6hxYDZiAfdxXxRzcl mMlZeFIAV0hfbtrDKqnBsUnQT6IiqcWdvYp0YCkeMrBKznIPQiOgWgyX3h9J9rxZ /4E1weQMoUdYwpPNLmgZE2EctHB/iNz+HJT3BO3CeO+5cUOf1HZWi3KvfAV4Zbtg 3EJan95hefiGC/fPTWsJRcICFtPjPokmI5E3Fz5DN1JtWJMDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRCa622vZt8Y/i2Y5mO0WhNbE1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDY4OGMzMTMtMjA5NC0z NDRhLTg4NTMtNjhiMTM5MThlMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKZ/CkirS/15GB1KRwk6+9gYEmAtdiH3QznFAOwVoB75SjIWzPJuyOe I0HflYAV1Y2gyO/InyhZDD9kcQP4XXMgy9ggnNHg9rrddZvz5RX1xX5nnZnLphUm zTya0ixZzSEd4RE+uF78swzm5QDEAdFQa8WmvlpARDmIjdEi3a1uAOD4+FDYHNNY s/1BBCRBbdlIVcFQ2tgwyPKeC+b2Ae6zn9OVDMmkP/pIkKgnpxN3ggYy6FIPMnUv QRPojhG60SZc+dhB7rcX+0CKFwjUcA4BwQsEFyYrMGe5BD/UKkN+p8qn3c/JMz0j O6pPLWVWOx0WYw11yyhtsEzvraQRKqg= -----END CERTIFICATE-----Generated at Fri Apr 4 17:58:37 2025 by rpki-client