$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa File: 05076cad-cb47-3d06-82b6-3e54446be25f.roa (raw, json) Hash identifier: f1zf4GN5Gue7VUxej/qo6nUjzh43rp6AD/5Rva9DZ8c= Subject key identifier: 1F:82:07:A2:A1:59:A5:BA:1B:FC:66:01:45:24:B1:23:59:B8:34:55 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7B8BFFEE70E32CB7DCF60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa Signing time: Thu 24 Apr 2025 11:09:09 +0000 ROA not before: Thu 24 Apr 2025 11:09:09 +0000 ROA not after: Wed 23 Jul 2025 11:09:09 +0000 asID: 12041 IP address blocks: 65.22.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:b8:bf:fe:e7:0e:32:cb:7d:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:09 2025 GMT Not After : Jul 23 11:09:09 2025 GMT Subject: CN=ecf097ed-f62e-4d39-b014-244877939acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:1a:a0:c5:41:ac:84:0d:6d:0f:db:af:ec: cd:e1:fa:82:70:85:da:7c:9a:5b:07:01:d2:2c:84: 92:14:02:12:05:f2:e8:18:37:1a:17:b1:04:42:5e: 88:ba:99:5f:39:b0:2f:e0:bd:c7:60:6c:8c:2d:c9: e8:70:d8:26:da:80:94:5f:e7:2a:11:e9:39:be:2c: 0a:b5:79:ff:4a:4c:44:f4:30:0c:d2:44:86:54:d7: af:f3:06:2e:49:f9:92:c9:9a:df:e4:1c:f0:36:2f: e5:0a:28:d2:76:78:a4:f0:ad:cf:83:a4:76:dc:8e: 07:9d:ba:4b:17:d6:61:cc:01:b5:e9:f5:e4:0b:ea: 83:55:bf:18:c2:39:fe:f2:2c:1b:0a:5f:93:b5:8f: 8b:14:1c:3a:0b:8e:5c:a9:74:5a:04:8e:b9:08:d8: de:6d:50:d1:1b:38:f1:2e:a8:28:d6:63:f5:a6:fc: 21:70:97:9e:55:91:88:80:d5:63:28:58:03:ab:a8: 7e:ee:51:61:80:2c:95:be:ba:07:7a:c8:37:f3:da: 35:53:3e:15:c3:02:e4:7f:21:b3:2f:92:43:54:77: e8:a6:8d:58:d0:f8:52:32:73:86:3f:8e:10:00:c5: 32:51:b8:2f:d5:e1:7a:00:d2:9a:85:db:2e:40:e9: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:82:07:A2:A1:59:A5:BA:1B:FC:66:01:45:24:B1:23:59:B8:34:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/05076cad-cb47-3d06-82b6-3e54446be25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:64:0b:2f:88:04:e1:2b:ff:86:9b:88:b6:ab:fa:a2:b2:91: 2b:1a:54:f8:6f:c2:00:d6:d6:ed:28:cc:d1:50:a3:ca:bd:a4: 24:a1:91:a8:8e:d2:52:af:9e:1d:b7:e8:7a:3e:36:0d:77:8b: 79:67:c2:6c:15:58:26:73:88:85:41:3f:f2:7c:97:dc:0e:2f: d6:eb:91:97:8e:3f:7d:08:61:1b:05:6e:03:6e:13:28:16:bf: ae:7e:4d:c8:7e:0d:8a:72:23:a7:d9:d7:b4:3c:5a:bb:ad:86: 66:f4:b6:6f:4e:50:7c:30:c3:1b:3f:ac:a0:6b:91:f9:a8:35: ee:51:c8:e0:f3:07:2c:9d:89:86:62:4d:49:64:12:c2:f7:c1: 91:62:c2:3f:60:c8:02:a9:08:e8:35:69:cd:8f:14:75:39:6e: f7:40:a3:20:b4:a4:6b:82:01:fe:11:14:d8:3c:a2:10:28:03: 6d:b5:dc:81:af:46:ef:24:41:2e:b7:85:84:11:98:6b:54:fe: 72:b6:53:18:5b:57:9d:a5:8d:43:ed:2d:70:8d:15:60:f5:5f: a0:14:89:1e:e1:ab:f5:5a:ae:49:e5:26:3c:5f:b4:c8:55:c0: a0:88:5d:59:2a:d6:74:8c:e8:49:a6:f6:38:49:49:61:72:34: 37:c8:fd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht7i//ucOMst9z2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkwOVoXDTI1MDcyMzExMDkwOVowLzEtMCsGA1UEAxMk ZWNmMDk3ZWQtZjYyZS00ZDM5LWIwMTQtMjQ0ODc3OTM5YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnskaoMVBrIQNbQ/br+zN4fqCcIXafJpbBwHS LISSFAISBfLoGDcaF7EEQl6IuplfObAv4L3HYGyMLcnocNgm2oCUX+cqEek5viwK tXn/SkxE9DAM0kSGVNev8wYuSfmSyZrf5BzwNi/lCijSdnik8K3Pg6R23I4HnbpL F9ZhzAG16fXkC+qDVb8Ywjn+8iwbCl+TtY+LFBw6C45cqXRaBI65CNjebVDRGzjx Lqgo1mP1pvwhcJeeVZGIgNVjKFgDq6h+7lFhgCyVvroHesg389o1Uz4VwwLkfyGz L5JDVHfopo1Y0PhSMnOGP44QAMUyUbgv1eF6ANKahdsuQOnFmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+CB6KhWaW6G/xmAUUksSNZuDRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDUwNzZjYWQtY2I0Ny0z ZDA2LTgyYjYtM2U1NDQ0NmJlMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBkCy+IBOEr/4abiLar+qKykSsaVPhvwgDW1u0ozNFQo8q9pCShkaiO 0lKvnh236Ho+Ng13i3lnwmwVWCZziIVBP/J8l9wOL9brkZeOP30IYRsFbgNuEygW v65+Tch+DYpyI6fZ17Q8Wruthmb0tm9OUHwwwxs/rKBrkfmoNe5RyODzByydiYZi TUlkEsL3wZFiwj9gyAKpCOg1ac2PFHU5bvdAoyC0pGuCAf4RFNg8ohAoA2213IGv Ru8kQS63hYQRmGtU/nK2UxhbV52ljUPtLXCNFWD1X6AUiR7hq/VarknlJjxftMhV wKCIXVkq1nSM6Emm9jhJSWFyNDfI/R0= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:39 2025 by rpki-client