$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa File: d822b996-b4d6-3c32-8014-b7c1910343e1.roa (raw, json) Hash identifier: J+MnVUOi97oPINWo4C9e+gIo0TWFM8Rgl7cKyM0KAOA= Subject key identifier: 34:1E:48:21:F0:58:EB:02:C9:81:07:0D:2C:A4:1F:8B:F3:EE:C2:05 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D5EE639EC8B6AE84E380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 22300 IP address blocks: 65.19.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d5:ee:63:9e:c8:b6:ae:84:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=8a7ebe5b-7acd-4479-b7ca-3fd6d450f108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:1b:2c:79:b2:35:38:20:e7:cd:1d:9c:36: 83:c2:75:72:38:68:e3:6d:7a:a5:b8:99:54:ff:4f: 21:84:d3:22:41:0e:99:88:71:66:52:eb:30:46:52: df:2e:1f:c4:67:b5:68:be:ca:4d:55:2b:28:4d:55: f4:ee:08:3d:4f:79:7f:49:c7:98:b1:05:92:1a:12: f7:5a:d9:90:9f:ac:7e:80:fb:a2:9a:0b:27:a2:22: b8:5f:fc:14:f6:84:67:cf:ee:cb:e1:b7:89:26:44: bb:f2:ff:95:e3:2d:d7:9d:7d:0d:69:03:10:2b:91: d7:6a:1e:a3:ef:e1:7a:b6:db:a6:5b:fe:bb:1d:58: 5c:51:3b:7d:59:20:8a:e8:f1:9f:6f:fe:99:d5:72: c8:26:4e:7e:3c:8b:24:62:f2:5a:c5:cf:c6:3f:77: 4e:23:fc:56:a3:1b:2b:35:bf:3f:0b:55:d0:45:1f: 7e:33:8f:63:66:68:dd:37:05:b2:71:0c:09:8f:7c: d6:b8:78:25:16:08:fe:b3:4b:a1:d9:67:dd:79:47: 99:57:8b:f1:28:83:da:af:c7:ed:28:3c:a1:23:43: c9:60:7b:49:ac:bd:c0:3b:a7:a2:7a:36:c0:be:07: 2c:40:e7:0c:87:83:bb:5d:3a:39:ae:95:1c:0b:04: 8b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:48:21:F0:58:EB:02:C9:81:07:0D:2C:A4:1F:8B:F3:EE:C2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.19.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:5b:87:3b:9b:a6:70:00:76:5d:5b:13:86:1a:28:be:6d:c9: c7:a4:4c:fd:5a:df:18:a6:d1:b2:9a:47:2a:e7:ca:46:e3:54: f0:2a:27:7a:3f:76:92:22:87:f2:b2:1d:e6:6b:7c:26:ab:d9: 72:a9:a7:7a:1a:b4:54:05:2c:e3:95:11:d5:67:2c:b2:78:0b: 2a:ab:51:bb:3f:be:81:54:43:63:a5:2c:fa:98:bb:5f:f3:c3: c4:91:36:9a:20:21:3e:7f:11:c0:c5:ad:ae:1f:b0:a4:06:85: 72:3f:aa:1d:fe:10:5c:5b:9a:a0:68:3d:66:7e:63:d2:c0:7f: 4c:7f:5d:6a:94:2f:51:80:61:ab:51:e9:57:05:04:61:0f:33: b6:fc:51:9c:a1:ca:b7:f9:2a:1e:a0:e7:bd:4d:3a:52:18:07: e1:b3:0d:3c:3c:13:93:08:d9:46:c5:b7:2c:79:ea:73:0f:28: 2c:65:cb:da:41:03:49:ee:e5:29:75:91:db:c0:55:61:6d:1c: 08:1b:af:5c:68:96:0b:f0:97:44:e9:58:5c:4a:d0:aa:4d:b5: 5c:18:cf:6b:75:dd:e1:56:12:db:86:3c:3c:47:f5:9e:7d:3c: c9:fe:b5:2b:fc:e2:fd:24:78:1f:2e:31:a8:a9:c7:d4:b5:a9: 77:b9:a2:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtXuY57Itq6E44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OGE3ZWJlNWItN2FjZC00NDc5LWI3Y2EtM2ZkNmQ0NTBmMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOcbLHmyNTgg580dnDaDwnVyOGjjbXqluJlU /08hhNMiQQ6ZiHFmUuswRlLfLh/EZ7VovspNVSsoTVX07gg9T3l/SceYsQWSGhL3 WtmQn6x+gPuimgsnoiK4X/wU9oRnz+7L4beJJkS78v+V4y3XnX0NaQMQK5HXah6j 7+F6ttumW/67HVhcUTt9WSCK6PGfb/6Z1XLIJk5+PIskYvJaxc/GP3dOI/xWoxsr Nb8/C1XQRR9+M49jZmjdNwWycQwJj3zWuHglFgj+s0uh2WfdeUeZV4vxKIPar8ft KDyhI0PJYHtJrL3AO6eiejbAvgcsQOcMh4O7XTo5rpUcCwSLRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQeSCHwWOsCyYEHDSykH4vz7sIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgyMmI5OTYtYjRkNi0z YzMyLTgwMTQtYjdjMTkxMDM0M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQROUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhbhzubpnAAdl1bE4YaKL5tycekTP1a3xim0bKaRyrnykbjVPAqJ3o/ dpIih/KyHeZrfCar2XKpp3oatFQFLOOVEdVnLLJ4CyqrUbs/voFUQ2OlLPqYu1/z w8SRNpogIT5/EcDFra4fsKQGhXI/qh3+EFxbmqBoPWZ+Y9LAf0x/XWqUL1GAYatR 6VcFBGEPM7b8UZyhyrf5Kh6g571NOlIYB+GzDTw8E5MI2UbFtyx56nMPKCxly9pB A0nu5Sl1kdvAVWFtHAgbr1xolgvwl0TpWFxK0KpNtVwYz2t13eFWEtuGPDxH9Z59 PMn+tSv84v0keB8uMaipx9S1qXe5oh4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:58 2025 by rpki-client