$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa File: 58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa (raw, json) Hash identifier: jsphkY4qErSwYRRfxGdbyDIkmEIrwLWtIu4YaHuue/M= Subject key identifier: 11:98:3C:13:DC:A2:49:5A:01:F0:AF:07:02:C6:AB:97:51:B4:90:A7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C22C0A1EE4967AA5F3C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 11653 IP address blocks: 65.49.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c2:2c:0a:1e:e4:96:7a:a5:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=bcd095ab-c276-4e4f-9baa-6b364024eaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:dd:ea:a8:37:e2:c0:dc:28:f4:f0:c1:1f: 71:3a:2b:e7:1a:7e:ea:ab:f9:76:0c:ea:af:60:d5: c7:c8:53:09:2b:b8:38:7c:c2:7c:02:c4:2a:ee:fe: ba:82:93:7e:46:29:98:6e:0d:e4:cf:ea:69:1a:89: 89:b5:63:2c:aa:86:23:8b:08:e7:b4:84:0e:50:98: 24:1e:98:bb:cf:b2:94:6f:42:24:4f:2a:49:a6:0d: 6f:53:04:d0:c8:e6:bb:66:d8:12:b8:07:1b:a0:a2: ac:c9:8f:35:af:cd:9f:4c:28:db:2c:4c:f2:c4:ff: f9:2a:a8:2d:06:4b:be:79:27:20:5d:50:3c:97:dc: 85:39:17:e5:8c:13:11:75:cf:9b:ec:b4:63:97:28: f2:8f:38:dc:37:64:aa:b1:1d:87:cc:e2:fa:fe:45: 5e:2a:11:fe:52:97:a1:74:7a:be:cc:b5:29:ea:84: 03:4a:8e:4f:94:cc:1a:40:08:41:1a:89:af:db:83: 0e:12:ff:62:32:44:3a:e8:e9:d1:2c:43:27:49:e0: 21:9e:11:41:72:36:59:fc:df:9f:02:7e:61:7c:57: af:32:16:b6:52:64:b6:44:0b:df:93:88:4d:b3:12: bc:17:c0:10:c4:5c:a5:35:7d:23:23:f2:0a:10:f0: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:98:3C:13:DC:A2:49:5A:01:F0:AF:07:02:C6:AB:97:51:B4:90:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c4:1d:a9:ab:39:53:e3:19:70:b0:ce:a5:c1:3b:ff:69:93: d5:12:99:b1:53:9a:a0:87:58:13:4b:20:f3:44:91:8b:6a:62: 1a:dd:12:3a:e9:23:70:84:5a:06:a7:b8:0c:37:69:20:c5:7c: 09:21:e2:a3:8c:d7:85:c6:9e:b1:48:74:e2:ae:e7:7c:e6:0d: 16:1c:f0:0f:6b:15:51:62:e8:2f:c0:de:45:f4:bd:f1:04:96: 2a:16:bc:75:ac:ff:7c:32:cb:bd:76:3e:e5:64:c2:bd:25:00: 4c:34:95:17:06:52:6f:a0:28:32:73:a3:6e:3a:f7:2f:f4:a2: 5f:5a:01:d1:da:5e:92:f1:b5:2c:c8:8a:c4:32:fc:62:f4:a9: 2f:a8:ee:85:d0:d3:ab:5d:1d:fe:43:b7:c4:99:ff:df:19:04: 0b:e2:c1:8b:5d:27:d3:e3:16:c0:7e:72:ab:58:9d:c8:00:10: 38:8f:fe:0a:f1:32:76:36:2c:33:e0:27:2b:73:c2:6f:ba:1a: bd:ec:f7:c9:86:33:35:7c:cd:55:4b:f1:e4:bb:c2:2b:bd:76: 98:5c:99:3e:c3:64:99:e9:24:16:2b:b7:85:30:2d:a3:cd:9b: c3:e5:b5:f1:f5:a1:07:18:f9:04:0f:ce:05:ce:28:e2:7d:ad: 33:86:2d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JsIsCh7klnql88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YmNkMDk1YWItYzI3Ni00ZTRmLTliYWEtNmIzNjQwMjRlYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Grd6qg34sDcKPTwwR9xOivnGn7qq/l2DOqv YNXHyFMJK7g4fMJ8AsQq7v66gpN+RimYbg3kz+ppGomJtWMsqoYjiwjntIQOUJgk Hpi7z7KUb0IkTypJpg1vUwTQyOa7ZtgSuAcboKKsyY81r82fTCjbLEzyxP/5Kqgt Bku+eScgXVA8l9yFORfljBMRdc+b7LRjlyjyjzjcN2SqsR2HzOL6/kVeKhH+Upeh dHq+zLUp6oQDSo5PlMwaQAhBGomv24MOEv9iMkQ66OnRLEMnSeAhnhFBcjZZ/N+f An5hfFevMha2UmS2RAvfk4hNsxK8F8AQxFylNX0jI/IKEPCoKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGYPBPcoklaAfCvBwLGq5dRtJCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNThlOTY3YTEtYTY5YS0z YzcxLWI4ZmUtNGM1MGNmN2ExNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPEHamrOVPjGXCwzqXBO/9pk9USmbFTmqCHWBNLIPNEkYtqYhrdEjrp I3CEWganuAw3aSDFfAkh4qOM14XGnrFIdOKu53zmDRYc8A9rFVFi6C/A3kX0vfEE lioWvHWs/3wyy712PuVkwr0lAEw0lRcGUm+gKDJzo2469y/0ol9aAdHaXpLxtSzI isQy/GL0qS+o7oXQ06tdHf5Dt8SZ/98ZBAviwYtdJ9PjFsB+cqtYncgAEDiP/grx MnY2LDPgJytzwm+6Gr3s98mGMzV8zVVL8eS7wiu9dphcmT7DZJnpJBYrt4UwLaPN m8PltfH1oQcY+QQPzgXOKOJ9rTOGLWc= -----END CERTIFICATE-----Generated at Sat Apr 26 21:42:27 2025 by rpki-client