$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa File: df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa (raw, json) Hash identifier: MnWFXNpNwCmCjUD+MtxQOz3hGQDmBhB7bsRoVnWZit8= Subject key identifier: FE:74:ED:D3:D5:37:2A:2F:29:B4:EB:21:47:11:40:0C:25:05:97:52 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926DC8AD0D171E3A91C6580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 22168 IP address blocks: 65.49.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:dc:8a:d0:d1:71:e3:a9:1c:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=78724c49-79b6-4a56-83bc-80a3fef042c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:ae:d6:4e:6b:1b:7f:fd:89:32:fa:57:1c: cc:f5:c9:a6:45:97:a4:b5:91:11:7d:8f:38:70:fd: b0:42:f0:9f:fb:e6:ea:ae:f9:c6:7e:9f:33:1a:fd: 64:87:27:81:81:84:e1:90:7b:25:94:43:52:64:21: 6a:53:7f:79:d4:21:2b:b9:1e:38:d8:f9:a9:b6:4b: 7e:dc:6f:da:42:86:9d:c1:8b:a7:6c:3d:ac:01:d7: b4:28:8b:6e:8c:17:43:66:30:74:70:72:9f:89:a3: b4:5f:d6:e7:cf:24:44:fd:fe:50:97:7b:44:27:57: 20:e7:5d:09:5f:76:ae:08:b5:8e:4a:8f:54:a5:cb: 59:d5:76:b7:cb:12:42:2f:30:92:66:c1:3c:c8:86: fb:59:38:c0:7d:f6:0d:fa:78:71:f6:b7:3e:e7:ba: e5:ac:40:ad:f7:e5:a9:ae:f7:1a:03:9c:17:4e:d2: ff:ac:99:01:3e:80:87:3c:74:7b:71:95:81:52:eb: 6c:89:bb:a2:50:e7:1e:c2:09:cb:46:a3:05:15:cc: 4e:b9:5a:52:36:7a:ea:e4:12:75:43:40:e0:6a:b0: 3f:7b:61:57:03:8b:25:e8:17:27:17:40:ef:1d:1b: de:52:7f:38:c0:c5:0c:08:92:36:2d:d9:f1:75:11: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:ED:D3:D5:37:2A:2F:29:B4:EB:21:47:11:40:0C:25:05:97:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9a:1d:69:f4:66:71:0f:79:a5:9f:da:03:c7:b6:d0:ff:6e: c9:8f:cc:93:17:f9:77:6b:42:2a:3b:7c:6a:4b:6b:22:35:3c: 93:04:a7:a9:6a:84:86:f2:2d:d1:5d:96:5e:c2:bf:41:d9:22: 55:26:ed:9c:e7:e6:c3:75:01:a3:cf:54:f1:55:a1:ef:e5:d1: 4d:3c:dc:c7:86:55:a7:5b:59:2f:ef:68:3e:ff:11:79:54:1f: 1b:41:f3:71:f5:6f:51:1e:2e:47:9f:14:8a:fd:9c:bf:7b:63: 31:e8:a8:ca:8c:ba:42:64:b2:fd:e3:91:1e:99:b2:4c:82:1f: 6f:a8:8d:24:f7:e7:0b:07:11:65:67:c8:b4:a2:d8:5f:4a:b1: 2a:6e:b4:39:6b:5c:36:11:32:05:e5:f9:fd:f5:58:c8:93:39: 67:02:30:60:44:d2:1e:98:a8:a1:ca:f3:e6:df:57:e1:0e:eb: f6:8d:ee:e7:e1:df:6a:6b:c9:56:af:d7:bf:af:37:f4:70:91: e5:46:2d:e3:f3:03:6d:ab:bf:fc:3b:de:4c:bb:81:14:8b:df: ce:f2:d3:f1:34:32:f8:34:24:25:23:4e:31:1c:1f:9f:0c:a2: 00:43:35:41:d8:16:9d:2d:dd:03:23:d4:d7:64:43:a3:ce:58: 0e:1d:75:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtyK0NFx46kcZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Nzg3MjRjNDktNzliNi00YTU2LTgzYmMtODBhM2ZlZjA0MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/qu1k5rG3/9iTL6VxzM9cmmRZektZERfY84 cP2wQvCf++bqrvnGfp8zGv1khyeBgYThkHsllENSZCFqU3951CEruR442Pmptkt+ 3G/aQoadwYunbD2sAde0KItujBdDZjB0cHKfiaO0X9bnzyRE/f5Ql3tEJ1cg510J X3auCLWOSo9UpctZ1Xa3yxJCLzCSZsE8yIb7WTjAffYN+nhx9rc+57rlrECt9+Wp rvcaA5wXTtL/rJkBPoCHPHR7cZWBUutsibuiUOcewgnLRqMFFcxOuVpSNnrq5BJ1 Q0DgarA/e2FXA4sl6BcnF0DvHRveUn84wMUMCJI2LdnxdRGR3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP507dPVNyovKbTrIUcRQAwlBZdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY4MTM0MGUtMGIwNC0z ZThmLWI4ZDYtNGJmMGVmZTM2NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISaHWn0ZnEPeaWf2gPHttD/bsmPzJMX+XdrQio7fGpLayI1PJMEp6lq hIbyLdFdll7Cv0HZIlUm7Zzn5sN1AaPPVPFVoe/l0U083MeGVadbWS/vaD7/EXlU HxtB83H1b1EeLkefFIr9nL97YzHoqMqMukJksv3jkR6ZskyCH2+ojST35wsHEWVn yLSi2F9KsSputDlrXDYRMgXl+f31WMiTOWcCMGBE0h6YqKHK8+bfV+EO6/aN7ufh 32pryVav17+vN/RwkeVGLePzA22rv/w73ky7gRSL387y0/E0Mvg0JCUjTjEcH58M ogBDNUHYFp0t3QMj1NdkQ6POWA4ddZ4= -----END CERTIFICATE-----Generated at Fri Apr 4 17:43:13 2025 by rpki-client