$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa File: cbac2488-f4b2-3b9a-80e2-176f1395516e.roa (raw, json) Hash identifier: NiOqkU78mSbQszpY7/0KxfHcmbsCqZndBs9Ozd7m3lU= Subject key identifier: 9E:4B:1E:26:70:F0:7A:02:32:82:06:FF:3A:FD:8B:83:95:72:B4:89 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BDF850CEEF0762A88D530 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 3491 IP address blocks: 65.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:df:85:0c:ee:f0:76:2a:88:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=8ab6796f-c157-464a-8c4d-0abb26f9f31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0f:4f:17:61:6a:97:b0:18:b3:49:77:8d:ad: ee:41:d6:69:29:73:e1:ed:37:89:e8:ee:39:47:c5: 36:c0:f3:05:22:3b:3c:81:5f:8c:17:a5:a2:5e:d6: fb:23:f4:04:63:97:29:f2:73:4f:42:d1:d8:8e:7c: 78:d1:ac:2f:0a:0e:75:3b:62:21:31:c0:c1:f7:28: a5:e8:d7:40:95:6e:cb:86:1f:63:1a:29:32:f4:f8: 37:09:33:ec:7f:95:49:fc:6d:14:30:00:8d:47:20: e3:61:2e:b6:24:b5:6b:fa:1e:2f:95:b0:78:4a:56: d2:b6:2f:ff:ed:97:24:d0:29:bd:3c:23:98:d3:6c: 8f:3d:70:8a:70:6a:61:81:93:ab:7e:52:be:0e:5e: 04:2f:62:e9:f1:dc:54:f5:d1:fa:d3:b0:05:7f:e4: 65:bf:cf:a2:c5:95:06:e8:d3:dc:80:90:3a:c5:1b: c7:52:d4:8c:60:78:16:c4:a1:53:7c:82:28:6b:fe: b8:cc:18:00:b3:ae:73:d0:3c:6e:9a:70:8e:ff:08: 5f:79:ca:45:9c:d0:f7:cc:8c:66:8d:e5:3a:2b:8c: 86:91:67:f4:69:01:c6:e0:92:f5:c7:84:1e:1a:2f: 10:21:25:4e:21:f4:ec:c2:25:0d:b2:e2:8f:a3:a3: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:1E:26:70:F0:7A:02:32:82:06:FF:3A:FD:8B:83:95:72:B4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbac2488-f4b2-3b9a-80e2-176f1395516e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 65.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:87:1a:8e:c1:ee:a2:31:30:65:56:52:2a:7f:43:c2:ae:c4: 30:23:b2:e8:72:3b:be:41:15:0e:e9:8f:51:36:42:c5:4b:f9: aa:65:1b:0f:64:ec:9d:3b:73:c6:7b:f7:8a:40:ea:b0:69:c2: 21:50:53:76:f8:d3:ce:df:b5:1b:67:c6:a4:53:f2:46:6a:dc: 6a:48:0c:67:e7:58:61:23:6c:db:fd:c6:c3:5c:ac:8e:74:34: e4:17:ac:de:89:7a:cf:81:0d:32:2a:07:29:5a:c4:76:32:fa: f4:5a:0e:07:70:c7:99:8f:30:dd:3d:f4:17:89:ab:a9:cb:be: 41:d6:14:90:59:08:29:0b:fc:bf:70:b6:84:b4:a8:da:fd:06: 21:65:54:d8:0f:d9:bd:f2:de:de:83:64:c3:51:28:e3:2a:86: 1b:a4:2a:e3:1e:1c:61:ba:b0:90:39:c2:e0:f0:c5:c2:c4:1d: 89:e3:00:bd:6a:25:84:eb:b7:73:84:b5:81:62:e1:dd:8e:cf: 88:07:48:02:77:94:77:72:64:ea:d5:25:8e:47:d4:2e:60:49: a9:76:66:68:71:a4:e3:9a:1a:ca:8c:23:dd:5e:eb:bb:9d:fc: 26:80:03:ca:0b:ce:f9:51:0d:9d:d3:25:91:dd:7a:c6:ec:56: 4e:12:9b:bf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj2W9+FDO7wdiqI1TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OGFiNjc5NmYtYzE1Ny00NjRhLThjNGQtMGFiYjI2ZjlmMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw9PF2Fql7AYs0l3ja3uQdZpKXPh7TeJ6O45 R8U2wPMFIjs8gV+MF6WiXtb7I/QEY5cp8nNPQtHYjnx40awvCg51O2IhMcDB9yil 6NdAlW7Lhh9jGiky9Pg3CTPsf5VJ/G0UMACNRyDjYS62JLVr+h4vlbB4SlbSti// 7Zck0Cm9PCOY02yPPXCKcGphgZOrflK+Dl4EL2Lp8dxU9dH607AFf+Rlv8+ixZUG 6NPcgJA6xRvHUtSMYHgWxKFTfIIoa/64zBgAs65z0DxumnCO/whfecpFnND3zIxm jeU6K4yGkWf0aQHG4JL1x4QeGi8QISVOIfTswiUNsuKPo6NfswIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ5LHiZw8HoCMoIG/zr9i4OVcrSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2JhYzI0ODgtZjRiMi0z YjlhLTgwZTItMTc2ZjEzOTU1MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQUgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdocajsHuojEwZVZSKn9Dwq7EMCOy6HI7vkEVDumPUTZCxUv5qmUbD2Ts nTtzxnv3ikDqsGnCIVBTdvjTzt+1G2fGpFPyRmrcakgMZ+dYYSNs2/3Gw1ysjnQ0 5Bes3ol6z4ENMioHKVrEdjL69FoOB3DHmY8w3T30F4mrqcu+QdYUkFkIKQv8v3C2 hLSo2v0GIWVU2A/ZvfLe3oNkw1Eo4yqGG6Qq4x4cYbqwkDnC4PDFwsQdieMAvWol hOu3c4S1gWLh3Y7PiAdIAneUd3Jk6tUljkfULmBJqXZmaHGk45oayowj3V7ru538 JoADygvO+VENndMlkd16xuxWThKbvw== -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:28 2025 by rpki-client