$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa File: df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa (raw, json) Hash identifier: 8V8X9gHmU/TmB7h1dOf6YPYopbmFhxmLEqIJhY3s/to= Subject key identifier: 6B:5D:1B:FE:06:F1:CB:81:00:B6:2D:1C:04:F8:65:50:EB:D1:7D:ED Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285849D85FDE5DFEB7FF67B21A3260 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 22168 IP address blocks: 65.49.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:de:5d:fe:b7:ff:67:b2:1a:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=dda66e03-0e69-4171-9740-c941b96e406c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:14:17:f2:aa:52:05:15:62:ed:02:53:aa:cd: 1b:c5:7f:f9:84:2c:93:c8:32:4d:d9:dc:20:6d:7b: 5d:3e:63:12:81:fb:58:1a:0e:c1:9c:54:a7:b8:d3: f3:a9:b1:97:3f:ef:1f:35:cf:81:27:fd:31:51:80: 95:26:b8:b1:1d:1c:9e:82:81:a9:07:eb:f5:87:8c: 7f:c5:9e:97:22:76:b2:57:cc:04:cd:c3:af:0e:bc: 80:5e:8b:b2:66:2a:9d:a8:a7:f1:81:b8:11:32:ab: a1:94:94:16:6d:c6:1c:e8:20:43:a1:6a:85:02:24: 19:95:52:05:19:a3:2a:fb:8b:26:ca:02:a5:f6:6a: 0a:b3:a9:a8:53:e1:ed:a8:37:f9:24:29:44:1e:c2: e0:f4:44:cf:49:eb:03:8c:f2:6d:1c:de:5b:89:9f: 4e:75:8c:56:27:f0:4e:ce:3b:85:aa:82:61:91:87: df:18:2f:e7:fc:ee:15:ba:5a:68:3f:2d:a7:02:9e: 15:69:c6:ef:c4:6f:14:95:b3:5a:c5:87:c1:3f:a7: 9b:5b:07:17:be:f8:11:d0:73:e7:a6:0c:43:c3:ef: 28:96:7b:3e:f2:ac:4f:53:bd:be:df:f8:aa:76:a8: 9c:8a:9f:ad:d5:d5:52:8b:e8:64:75:19:44:11:45: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:1B:FE:06:F1:CB:81:00:B6:2D:1C:04:F8:65:50:EB:D1:7D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:78:dc:ab:4f:be:5e:78:cf:cf:d4:7a:ca:e5:1f:43:a6:05: 00:48:a2:c3:09:be:b4:4a:0a:10:79:02:a3:f5:d6:ab:07:a2: e8:e8:dd:be:2d:a5:71:db:02:76:c4:22:96:1a:96:a9:97:9e: de:b2:51:e8:28:fd:58:df:f6:fb:84:69:ef:d1:9e:a2:4a:54: 6f:79:b9:ed:41:39:cf:25:42:e0:24:7e:0b:5c:5e:d2:06:38: 6e:f3:20:68:f7:b0:cf:13:2d:1b:ba:91:4d:09:ff:9f:f9:88: f2:45:18:cd:d6:b5:99:1b:5d:c6:64:d3:01:0b:0b:52:b1:2d: d5:69:7f:60:a8:3f:b2:2a:9d:c0:85:62:a5:3f:bc:24:5e:0a: f8:5d:48:50:38:b6:66:9f:f2:e6:b7:75:03:b9:52:00:ee:8a: 6b:d6:25:e2:ef:47:f1:c2:83:4f:43:fa:4b:3a:a4:0e:24:2c: 33:fb:c1:74:87:2d:7a:fa:2e:7f:09:c5:53:2d:15:c0:7a:af: 47:63:95:83:06:5d:e1:03:ec:c0:84:30:6b:91:db:42:84:cb: 02:ce:42:b7:56:fb:4e:58:89:d8:d2:a4:ee:6b:1f:4d:a8:67: 09:d0:71:40:e6:39:77:76:cc:27:dd:9f:bd:b3:15:24:9b:95: 0c:aa:ff:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX95d/rf/Z7IaMmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZGRhNjZlMDMtMGU2OS00MTcxLTk3NDAtYzk0MWI5NmU0MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRQX8qpSBRVi7QJTqs0bxX/5hCyTyDJN2dwg bXtdPmMSgftYGg7BnFSnuNPzqbGXP+8fNc+BJ/0xUYCVJrixHRyegoGpB+v1h4x/ xZ6XInayV8wEzcOvDryAXouyZiqdqKfxgbgRMquhlJQWbcYc6CBDoWqFAiQZlVIF GaMq+4smygKl9moKs6moU+HtqDf5JClEHsLg9ETPSesDjPJtHN5biZ9OdYxWJ/BO zjuFqoJhkYffGC/n/O4VulpoPy2nAp4VacbvxG8UlbNaxYfBP6ebWwcXvvgR0HPn pgxDw+8olns+8qxPU72+3/iqdqicip+t1dVSi+hkdRlEEUXhtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtdG/4G8cuBALYtHAT4ZVDr0X3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY4MTM0MGUtMGIwNC0z ZThmLWI4ZDYtNGJmMGVmZTM2NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI943KtPvl54z8/UesrlH0OmBQBIosMJvrRKChB5AqP11qsHoujo3b4t pXHbAnbEIpYalqmXnt6yUego/Vjf9vuEae/RnqJKVG95ue1BOc8lQuAkfgtcXtIG OG7zIGj3sM8TLRu6kU0J/5/5iPJFGM3WtZkbXcZk0wELC1KxLdVpf2CoP7IqncCF YqU/vCReCvhdSFA4tmaf8ua3dQO5UgDuimvWJeLvR/HCg09D+ks6pA4kLDP7wXSH LXr6Ln8JxVMtFcB6r0djlYMGXeED7MCEMGuR20KEywLOQrdW+05YidjSpO5rH02o ZwnQcUDmOXd2zCfdn72zFSSblQyq/60= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:29 2025 by rpki-client