$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/38684cc6-834e-38c5-82e6-a07bd418883c.roa File: 38684cc6-834e-38c5-82e6-a07bd418883c.roa (raw, json) Hash identifier: iGgcF9EyBZlUaX2heKnN3FmsttaSFSVVfOXmgFKZRms= Subject key identifier: 24:86:CE:12:07:DE:BA:01:09:52:99:25:90:73:85:0E:EA:67:23:21 Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Certificate serial: 010D0C9F43285849996F3D3CBCAC655BA061E6E0 Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/38684cc6-834e-38c5-82e6-a07bd418883c.roa Signing time: Mon 21 Apr 2025 11:56:38 +0000 ROA not before: Mon 21 Apr 2025 11:56:38 +0000 ROA not after: Sun 20 Jul 2025 11:56:38 +0000 asID: 14277 IP address blocks: 65.182.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:6f:3d:3c:bc:ac:65:5b:a0:61:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Validity Not Before: Apr 21 11:56:38 2025 GMT Not After : Jul 20 11:56:38 2025 GMT Subject: CN=c5a874d6-6ed4-4777-b9b4-bf1ff5384c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:64:d4:da:6e:a8:00:df:4a:93:56:0d:a7: a4:ac:ab:b2:6f:a7:0b:6d:75:98:29:f2:88:98:d7: 1e:0a:66:f5:47:ba:d5:49:c4:da:c3:0f:87:25:04: c0:14:7d:96:9d:41:4d:a4:cd:59:40:ed:67:71:f0: 3d:68:bd:bc:0f:0e:73:89:c9:80:c9:57:ea:72:3c: 2e:1a:91:95:ce:b1:55:cb:9e:f7:a8:95:66:6b:80: a6:a7:b8:bb:38:f8:2f:96:1a:2d:c6:5c:86:ae:35: ce:25:89:84:2d:ae:62:fa:7f:60:e8:70:8f:5e:51: 27:0d:16:31:09:f5:bb:ba:9b:5d:bc:6f:5c:a5:fd: 74:b3:39:ff:8f:05:b9:ec:5a:a9:85:88:1c:81:81: 3a:51:f2:bf:c4:80:d0:bc:c7:56:9e:a8:c8:75:41: b1:7d:41:28:cb:8e:92:79:6e:c8:0d:2f:af:1b:73: f1:41:7c:5b:f0:e2:71:51:b1:c8:46:83:ba:4a:5e: 6b:8a:71:0b:5f:a2:fb:61:de:0a:64:61:38:d7:43: 82:9e:20:3c:b8:4c:16:ed:8f:63:d1:18:4e:fb:0c: fa:6b:ca:18:fd:cf:59:ca:f1:81:79:2c:31:74:45: 39:9d:70:a3:cb:ae:4b:18:dd:7f:79:94:de:21:51: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:86:CE:12:07:DE:BA:01:09:52:99:25:90:73:85:0E:EA:67:23:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/38684cc6-834e-38c5-82e6-a07bd418883c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl X509v3 Authority Key Identifier: keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer sbgp-ipAddrBlock: critical IPv4: 65.182.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:53:41:38:82:ba:2a:72:7f:f7:10:44:d5:18:22:90:b4:15: 38:e7:ac:2e:47:a2:95:09:ea:34:05:25:ed:d9:69:0f:eb:c5: 6a:63:27:b6:d2:51:33:1c:60:6c:f9:5f:d5:09:02:00:09:a7: ba:42:33:68:6b:a8:5f:e2:8b:12:7e:c5:00:38:5f:2c:31:8a: 49:ce:e5:19:d2:06:4e:38:84:00:0d:79:a4:57:aa:c2:9d:e7: dc:cc:e1:f4:ea:4c:a2:bd:19:63:e2:6b:19:d0:d0:01:e3:a5: 3e:88:fd:87:52:75:34:80:cd:8e:22:11:d3:4e:b2:5b:3b:87: 5c:c3:81:db:6a:b3:7b:f1:d5:14:86:06:45:8c:72:fd:87:78: d6:af:45:af:af:6c:00:22:87:64:e3:4e:18:30:19:2b:a3:7c: ca:4f:0b:cc:90:b8:69:8e:f1:0e:68:aa:58:3e:c3:54:5d:17: 45:a0:52:e8:d2:17:20:a6:13:d4:a7:f5:48:78:d2:d1:0f:64: 4a:5f:ab:05:07:6d:d0:55:30:42:18:ae:d4:69:fe:28:d4:76: c0:bc:a8:63:97:5f:96:74:1a:9b:0d:2a:da:1a:c8:5d:c6:12: 38:f7:2d:37:14:fa:bc:1e:95:82:1f:a0:e4:e8:85:4b:98:73: e5:a7:41:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZbz08vKxlW6Bh5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy M2RkMB4XDTI1MDQyMTExNTYzOFoXDTI1MDcyMDExNTYzOFowLzEtMCsGA1UEAxMk YzVhODc0ZDYtNmVkNC00Nzc3LWI5YjQtYmYxZmY1Mzg0YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmItk1NpuqADfSpNWDaekrKuyb6cLbXWYKfKI mNceCmb1R7rVScTaww+HJQTAFH2WnUFNpM1ZQO1ncfA9aL28Dw5zicmAyVfqcjwu GpGVzrFVy573qJVma4Cmp7i7OPgvlhotxlyGrjXOJYmELa5i+n9g6HCPXlEnDRYx CfW7uptdvG9cpf10szn/jwW57FqphYgcgYE6UfK/xIDQvMdWnqjIdUGxfUEoy46S eW7IDS+vG3PxQXxb8OJxUbHIRoO6Sl5rinELX6L7Yd4KZGE410OCniA8uEwW7Y9j 0RhO+wz6a8oY/c9ZyvGBeSwxdEU5nXCjy65LGN1/eZTeIVEaNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSGzhIH3roBCVKZJZBzhQ7qZyMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvMzg2ODRjYzYtODM0ZS0z OGM1LTgyZTYtYTA3YmQ0MTg4ODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1 OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx YzM0ZDIzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbYxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9TQTiCuipyf/cQRNUYIpC0FTjnrC5HopUJ6jQFJe3ZaQ/rxWpjJ7bS UTMcYGz5X9UJAgAJp7pCM2hrqF/iixJ+xQA4XywxiknO5RnSBk44hAANeaRXqsKd 59zM4fTqTKK9GWPiaxnQ0AHjpT6I/YdSdTSAzY4iEdNOsls7h1zDgdtqs3vx1RSG BkWMcv2HeNavRa+vbAAih2TjThgwGSujfMpPC8yQuGmO8Q5oqlg+w1RdF0WgUujS FyCmE9Sn9Uh40tEPZEpfqwUHbdBVMEIYrtRp/ijUdsC8qGOXX5Z0GpsNKtoayF3G Ejj3LTcU+rwelYIfoOTohUuYc+WnQQM= -----END CERTIFICATE-----Generated at Tue Apr 29 10:29:27 2025 by rpki-client