$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b17575c-a067-39ad-8ffc-d6574961797a.roa File: 5b17575c-a067-39ad-8ffc-d6574961797a.roa (raw, json) Hash identifier: rZq7d4+ByJ225MAUkZ6idwvYPHCVCkkJGPb3/O7aaIE= Subject key identifier: 96:DD:13:8C:C8:C9:ED:7D:E3:80:69:52:6E:6A:7F:5F:77:EF:F6:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F180264EBD018D2B6E408900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b17575c-a067-39ad-8ffc-d6574961797a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 4451 IP address blocks: 65.217.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:26:4e:bd:01:8d:2b:6e:40:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=56afeec4-9bdb-4329-b8cc-f0354550024c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:de:0e:4f:59:97:81:4b:5d:98:06:9d:51:d6: 23:ea:ec:c5:70:69:97:28:45:f6:d7:27:ab:d5:62: 09:11:b1:2d:44:7d:d8:05:f0:23:8d:62:ba:7b:56: 5f:02:45:af:65:da:f5:b9:5b:9b:03:92:8d:59:3c: 09:8d:e1:a7:02:f7:91:cc:19:d7:f2:2d:bd:bb:b9: 0e:b6:2b:da:b6:c7:e1:b6:14:09:2a:b7:e5:30:69: 49:96:01:2c:5e:51:82:be:f4:fa:af:fc:e8:e2:1f: c6:61:c0:92:3f:ff:40:99:07:ba:6e:a7:ab:2d:17: 5f:52:c8:97:05:0a:b1:c5:db:ee:22:33:2a:85:c9: 86:d3:5b:eb:0c:58:49:51:58:30:8f:a1:1c:49:f3: 80:12:c3:14:48:d6:a4:b8:e4:11:63:1f:4a:8d:91: f8:25:af:b0:97:44:4c:af:ac:a1:94:30:0c:78:b0: 72:af:dd:29:20:fd:08:db:42:78:5b:90:6a:9a:08: dd:7e:de:b9:7c:cc:b9:1f:04:dd:ca:99:e6:6a:de: e8:9c:81:2c:2b:42:2d:75:58:90:c7:cb:82:5c:73: 0e:45:ff:b7:3e:c4:ef:6a:14:ff:cb:66:bf:cb:4a: 0f:fd:b5:2a:a2:29:27:70:90:c1:75:f6:76:db:f1: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:13:8C:C8:C9:ED:7D:E3:80:69:52:6E:6A:7F:5F:77:EF:F6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b17575c-a067-39ad-8ffc-d6574961797a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.217.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:67:0a:c1:4b:ba:70:a0:7d:8b:50:43:8f:8e:a1:d9:f2:c6: 9b:20:27:f7:c8:1a:3a:80:5f:40:08:52:e6:21:e8:5d:4c:ea: 71:20:46:b6:4e:f2:ec:b3:41:d1:65:84:c8:78:1f:5d:98:21: 87:ca:7b:58:f1:ae:7c:a1:bd:60:cb:06:fa:21:ce:a3:f5:d7: 6a:5e:34:87:e8:58:c9:5a:dd:a1:29:09:47:49:be:2d:f1:75: c9:7b:c4:80:1f:6b:44:f0:36:75:d3:5e:5a:07:85:a9:1d:73: 2b:18:4b:01:58:6f:65:9b:4d:93:07:c3:53:f3:c7:27:40:d7: 01:a7:ed:16:1f:ad:0c:56:a9:54:25:55:5a:41:0d:ba:38:ad: 93:df:8f:53:65:12:9a:16:d0:c0:b0:b2:a6:32:48:4f:9e:d4: 90:2d:54:c6:4e:05:4b:49:72:8f:3d:ef:97:a4:ef:c5:e3:25: 54:93:46:20:4b:8e:bd:ea:55:1d:ca:2f:48:f3:0a:91:a3:db: a7:2c:04:37:9b:88:c0:ec:06:94:08:86:35:88:bc:06:66:6f: 59:b4:c5:50:22:53:62:ef:49:7f:00:52:78:90:23:6e:d9:00: 11:ce:42:52:e2:3c:aa:52:c2:89:24:4e:f2:73:fe:33:cd:b4: b2:4e:fe:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgCZOvQGNK25AiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NTZhZmVlYzQtOWJkYi00MzI5LWI4Y2MtZjAzNTQ1NTAwMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg94OT1mXgUtdmAadUdYj6uzFcGmXKEX21yer 1WIJEbEtRH3YBfAjjWK6e1ZfAkWvZdr1uVubA5KNWTwJjeGnAveRzBnX8i29u7kO tivatsfhthQJKrflMGlJlgEsXlGCvvT6r/zo4h/GYcCSP/9AmQe6bqerLRdfUsiX BQqxxdvuIjMqhcmG01vrDFhJUVgwj6EcSfOAEsMUSNakuOQRYx9KjZH4Ja+wl0RM r6yhlDAMeLByr90pIP0I20J4W5Bqmgjdft65fMy5HwTdypnmat7onIEsK0ItdViQ x8uCXHMORf+3PsTvahT/y2a/y0oP/bUqoikncJDBdfZ22/G4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbdE4zIye1944BpUm5qf1937/YpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWIxNzU3NWMtYTA2Ny0z OWFkLThmZmMtZDY1NzQ5NjE3OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQdnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxnCsFLunCgfYtQQ4+OodnyxpsgJ/fIGjqAX0AIUuYh6F1M6nEgRrZO 8uyzQdFlhMh4H12YIYfKe1jxrnyhvWDLBvohzqP112peNIfoWMla3aEpCUdJvi3x dcl7xIAfa0TwNnXTXloHhakdcysYSwFYb2WbTZMHw1PzxydA1wGn7RYfrQxWqVQl VVpBDbo4rZPfj1NlEpoW0MCwsqYySE+e1JAtVMZOBUtJco8975ek78XjJVSTRiBL jr3qVR3KL0jzCpGj26csBDebiMDsBpQIhjWIvAZmb1m0xVAiU2LvSX8AUniQI27Z ABHOQlLiPKpSwokkTvJz/jPNtLJO/qo= -----END CERTIFICATE-----Generated at Mon Jun 30 12:29:11 2025 by rpki-client