$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa File: 0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa (raw, json) Hash identifier: aNobtWN9qrj8NPKJkG7QqFXLalaFkLfrRhxUK9av//8= Subject key identifier: C4:53:AB:86:58:9E:B8:50:33:59:77:66:9B:F9:B0:A8:08:81:46:39 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B76394B197675C48A319B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa Signing time: Thu 24 Apr 2025 11:08:29 +0000 ROA not before: Thu 24 Apr 2025 11:08:29 +0000 ROA not after: Wed 23 Jul 2025 11:08:29 +0000 asID: 12041 IP address blocks: 65.22.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:63:94:b1:97:67:5c:48:a3:19:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:29 2025 GMT Not After : Jul 23 11:08:29 2025 GMT Subject: CN=b1475629-777b-4a38-8d23-df2ce25d0551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:65:e1:24:45:b6:29:93:0b:a9:81:9b:d2: 14:de:e5:7b:52:cd:6f:2b:80:52:fa:3d:7a:77:c1: 8c:d5:49:8a:e2:1f:66:64:10:b7:bb:45:b0:1e:74: da:7a:43:5e:02:7e:ec:9c:86:23:de:4d:cd:35:6e: e8:ac:65:c9:b8:1f:2d:00:82:2e:29:23:10:5d:3e: ea:dd:ba:01:83:34:1a:1a:ad:c9:fe:66:96:3d:59: 5e:ec:48:be:eb:10:2e:67:2a:aa:1f:29:87:11:24: 4a:24:43:24:b7:30:65:27:7f:ee:09:a5:69:76:c3: 4b:90:b9:f7:8d:d9:41:a5:d4:9f:6f:3a:6e:40:3f: d5:6d:b1:f9:84:cf:74:c6:54:9c:84:64:5a:48:0d: c5:8e:28:54:10:25:9d:4c:e9:21:9f:08:fb:04:16: 40:52:a4:65:2a:18:2d:d0:e6:4b:62:ef:4b:e0:a3: 22:d5:ea:db:a0:f6:69:d0:d2:1b:77:fb:c3:9f:e6: 89:5b:e7:63:d7:ae:55:c8:64:8b:b2:b2:f7:ee:cb: e8:e1:72:2b:0a:ef:8e:03:e4:dd:69:c0:ff:e4:52: 14:09:fd:85:98:ad:aa:f2:0f:11:3a:bb:91:61:ed: 51:7d:6f:f0:6f:07:93:31:a8:1b:9d:32:e7:7c:90: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:53:AB:86:58:9E:B8:50:33:59:77:66:9B:F9:B0:A8:08:81:46:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0c4b352f-1c85-3f47-8fbf-1108d7d8294d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:4f:4b:c1:14:c4:62:d6:f3:24:d2:f8:5a:1f:3c:9e:f4:ea: c8:4c:be:31:60:ee:cc:2c:30:a9:01:d5:a6:4e:43:f7:71:e7: 7b:42:a8:54:93:b0:cc:b8:c0:78:53:93:a9:76:eb:25:3e:eb: 2f:f1:e9:dd:0b:d1:71:b2:16:2f:7d:d8:ca:30:fb:10:ea:95: 50:b5:05:f1:a1:f0:21:2c:34:5e:84:80:88:51:71:30:6b:9e: e4:b4:ae:8f:4b:7d:3e:4c:46:6f:51:24:ca:16:5c:03:fa:e9: f5:5d:7c:f5:35:df:27:b9:d3:06:09:73:80:1c:18:db:9e:b9: 74:d5:5c:a2:a5:d6:7f:43:11:4c:a6:e3:98:45:66:04:6e:42: 0b:b1:86:ec:d5:68:38:c8:ca:88:dc:c4:ec:83:3d:d8:76:c5: f0:80:05:3d:85:87:74:f8:cb:98:f9:dd:1e:ce:f0:9b:75:e6: ef:27:04:2e:0c:40:ae:2a:a6:b2:c2:c4:94:a0:a9:06:af:53: 6b:7c:4b:ef:65:e2:e2:3d:cb:28:09:c5:32:07:15:2f:22:d8: 97:86:54:4d:82:93:65:66:ef:aa:1a:4a:e9:aa:50:50:b1:00: 43:e2:b9:5e:35:5a:37:8f:b6:27:bd:f4:04:ba:c6:2a:0a:15: 46:cf:02:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht2OUsZdnXEijGbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgyOVoXDTI1MDcyMzExMDgyOVowLzEtMCsGA1UEAxMk YjE0NzU2MjktNzc3Yi00YTM4LThkMjMtZGYyY2UyNWQwNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPNl4SRFtimTC6mBm9IU3uV7Us1vK4BS+j16 d8GM1UmK4h9mZBC3u0WwHnTaekNeAn7snIYj3k3NNW7orGXJuB8tAIIuKSMQXT7q 3boBgzQaGq3J/maWPVle7Ei+6xAuZyqqHymHESRKJEMktzBlJ3/uCaVpdsNLkLn3 jdlBpdSfbzpuQD/VbbH5hM90xlSchGRaSA3FjihUECWdTOkhnwj7BBZAUqRlKhgt 0OZLYu9L4KMi1erboPZp0NIbd/vDn+aJW+dj165VyGSLsrL37svo4XIrCu+OA+Td acD/5FIUCf2FmK2q8g8ROruRYe1RfW/wbweTMagbnTLnfJD12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRTq4ZYnrhQM1l3Zpv5sKgIgUY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGM0YjM1MmYtMWM4NS0z ZjQ3LThmYmYtMTEwOGQ3ZDgyOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1PS8EUxGLW8yTS+FofPJ706shMvjFg7swsMKkB1aZOQ/dx53tCqFST sMy4wHhTk6l26yU+6y/x6d0L0XGyFi992Mow+xDqlVC1BfGh8CEsNF6EgIhRcTBr nuS0ro9LfT5MRm9RJMoWXAP66fVdfPU13ye50wYJc4AcGNueuXTVXKKl1n9DEUym 45hFZgRuQguxhuzVaDjIyojcxOyDPdh2xfCABT2Fh3T4y5j53R7O8Jt15u8nBC4M QK4qprLCxJSgqQavU2t8S+9l4uI9yygJxTIHFS8i2JeGVE2Ck2Vm76oaSumqUFCx AEPiuV41WjePtie99AS6xioKFUbPAnw= -----END CERTIFICATE-----Generated at Tue Apr 29 13:05:03 2025 by rpki-client