$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa File: 043392a1-76c7-3951-b215-fe1dd38b254d.roa (raw, json) Hash identifier: oEUYn55YcCX4/5UX8O8hkx+ZnPfeBFQvMp9JDV6BT7E= Subject key identifier: 8A:D1:1E:D9:FF:3E:F4:16:DA:C3:74:6F:25:4E:61:BB:A0:F3:1D:5E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7C016F684419C618D8900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa Signing time: Thu 24 Apr 2025 11:09:12 +0000 ROA not before: Thu 24 Apr 2025 11:09:12 +0000 ROA not after: Wed 23 Jul 2025 11:09:12 +0000 asID: 12041 IP address blocks: 65.22.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:c0:16:f6:84:41:9c:61:8d:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:12 2025 GMT Not After : Jul 23 11:09:12 2025 GMT Subject: CN=4dc191fe-0a66-4e20-b752-2ceedec1ae12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:86:a9:72:76:1f:d4:88:8a:ac:09:d7:03: 6f:c7:75:b7:79:50:34:8c:ee:56:a7:b5:92:15:de: 61:b1:17:65:ee:05:15:d0:35:d5:8a:31:97:62:45: 05:21:c5:fd:68:15:63:7f:a2:ea:14:59:ec:bb:27: 10:55:60:2c:54:41:15:9c:8c:e9:9f:1c:38:c1:0e: dc:4b:d0:18:8e:c5:d0:56:ad:82:b8:3b:d0:b7:cf: 4b:06:fb:92:52:77:35:34:c7:de:04:54:c6:1a:fc: 5d:23:7a:a2:f7:08:34:b3:41:42:a3:ad:51:57:fd: 51:ce:c2:fe:ff:27:1c:72:1e:0e:2d:41:9c:f5:41: 58:94:50:44:6f:77:6c:60:ee:31:39:4b:41:3d:4c: 7e:8b:dd:bb:c9:27:ba:8b:6e:71:85:d0:76:8b:fd: 16:fe:ce:ce:90:2e:08:de:3c:73:14:91:48:67:2b: 7c:08:84:52:33:50:dd:1d:aa:ef:07:34:23:1b:12: 22:53:ba:d9:89:be:4f:45:17:b4:9e:8d:7d:56:ca: 0f:95:55:5a:80:5f:8a:50:c8:68:d5:bd:5c:8c:f6: 5a:74:e5:92:52:8e:29:35:34:ce:ef:18:78:88:21: 33:32:c1:43:e4:e5:69:b0:9f:05:45:a9:4c:4c:ae: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D1:1E:D9:FF:3E:F4:16:DA:C3:74:6F:25:4E:61:BB:A0:F3:1D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/043392a1-76c7-3951-b215-fe1dd38b254d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1f:d1:42:a2:ad:43:43:0f:42:50:a9:1c:61:7c:f4:be:31: f5:39:78:9c:79:8e:93:8d:24:f4:3d:98:01:f4:4a:cb:fd:15: 24:1c:5e:d3:87:03:49:64:f5:45:f6:52:a1:c9:3f:4e:42:ca: 8b:8f:36:a6:1a:4c:0e:ef:45:f8:30:49:33:9f:6e:b4:1e:6b: 1a:db:c4:22:f7:af:a9:8e:5f:74:16:31:00:0e:07:e6:f1:5a: 56:55:bb:bb:9e:a7:96:04:5e:06:b7:f7:3b:c2:81:d6:67:cc: 33:5c:63:c6:01:d7:e5:34:00:a9:a8:56:06:46:31:5d:25:7e: 53:45:78:0d:12:df:b9:38:80:7c:7e:31:f2:e3:fc:8e:dc:40: f8:6b:9a:f4:49:2e:9c:24:00:cc:4f:06:85:8a:b7:8c:be:60: 54:07:ff:d8:9d:b3:2d:01:f4:bc:f4:b3:3b:72:da:a9:1b:25: 2c:e2:c8:cc:3b:64:78:8e:fd:84:57:4e:8b:a5:2f:2b:32:41: 5c:ab:a7:b6:34:ec:db:08:df:6c:a8:e4:81:b7:49:f0:82:c3: 65:82:79:b0:6f:5f:b9:0d:ff:41:c6:c7:96:f5:0d:48:12:21: 0f:9e:1f:c6:a4:a4:87:76:40:ed:32:13:13:f8:1d:bf:89:6c: d7:8f:84:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht8AW9oRBnGGNiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkxMloXDTI1MDcyMzExMDkxMlowLzEtMCsGA1UEAxMk NGRjMTkxZmUtMGE2Ni00ZTIwLWI3NTItMmNlZWRlYzFhZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeGGqXJ2H9SIiqwJ1wNvx3W3eVA0jO5Wp7WS Fd5hsRdl7gUV0DXVijGXYkUFIcX9aBVjf6LqFFnsuycQVWAsVEEVnIzpnxw4wQ7c S9AYjsXQVq2CuDvQt89LBvuSUnc1NMfeBFTGGvxdI3qi9wg0s0FCo61RV/1RzsL+ /yccch4OLUGc9UFYlFBEb3dsYO4xOUtBPUx+i927ySe6i25xhdB2i/0W/s7OkC4I 3jxzFJFIZyt8CIRSM1DdHarvBzQjGxIiU7rZib5PRRe0no19VsoPlVVagF+KUMho 1b1cjPZadOWSUo4pNTTO7xh4iCEzMsFD5OVpsJ8FRalMTK4OEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrRHtn/PvQW2sN0byVOYbug8x1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDQzMzkyYTEtNzZjNy0z OTUxLWIyMTUtZmUxZGQzOGIyNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQf0UKirUNDD0JQqRxhfPS+MfU5eJx5jpONJPQ9mAH0Ssv9FSQcXtOH A0lk9UX2UqHJP05CyouPNqYaTA7vRfgwSTOfbrQeaxrbxCL3r6mOX3QWMQAOB+bx WlZVu7uep5YEXga39zvCgdZnzDNcY8YB1+U0AKmoVgZGMV0lflNFeA0S37k4gHx+ MfLj/I7cQPhrmvRJLpwkAMxPBoWKt4y+YFQH/9idsy0B9Lz0szty2qkbJSziyMw7 ZHiO/YRXToulLysyQVyrp7Y07NsI32yo5IG3SfCCw2WCebBvX7kN/0HGx5b1DUgS IQ+eH8akpId2QO0yExP4Hb+JbNePhG0= -----END CERTIFICATE-----Generated at Tue Apr 29 10:06:30 2025 by rpki-client