$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa File: 0d612a76-6a6e-3cb1-8404-866fdaa11230.roa (raw, json) Hash identifier: 4YvFOU003JaJeRqGL1iEqhWd5102Ngb+utpCQfPIPYk= Subject key identifier: 77:83:72:DD:40:CB:00:3C:E9:B5:F5:88:90:C4:A3:4C:C1:5D:97:C7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A211E1926C7DF41B92F57240 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa Signing time: Thu 24 Apr 2025 14:10:48 +0000 ROA not before: Thu 24 Apr 2025 14:10:48 +0000 ROA not after: Wed 23 Jul 2025 14:10:48 +0000 asID: 207266 IP address blocks: 65.22.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:11:e1:92:6c:7d:f4:1b:92:f5:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:10:48 2025 GMT Not After : Jul 23 14:10:48 2025 GMT Subject: CN=d90a57d5-ef91-48b9-a0d3-36f5538bf1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:08:a9:b0:1a:ce:0f:f0:37:b2:61:f9:0d: d4:27:59:46:12:48:9c:00:ae:bc:8d:59:e2:36:58: ff:3e:ed:f4:02:13:10:26:bf:27:b9:ba:f6:d3:f3: 18:a4:cd:5f:c5:5d:74:82:57:d8:a4:31:a0:a2:f5: 7a:8e:a3:f3:1a:fc:2c:77:3d:f8:ed:22:85:c9:f7: f5:b1:64:60:19:5f:67:57:b4:43:01:fa:04:7e:30: 19:09:40:02:55:a2:2a:eb:7f:26:8e:b6:e8:c5:f1: f7:58:c3:9c:29:63:b0:9f:c6:a6:5f:c0:f0:22:5f: af:ec:50:49:c5:19:51:cc:27:37:16:7d:30:4d:10: 6e:12:8e:a0:9a:5d:1a:6d:00:dc:5f:55:9f:f0:d5: 77:06:2e:1a:cd:df:c8:8e:77:00:3f:ff:5e:03:51: 26:5b:44:5e:7e:c3:82:6c:42:53:2a:a5:04:ff:5d: c6:4b:23:86:ce:20:95:c7:e4:a5:ae:0a:23:8d:78: 35:ef:6d:ba:da:a4:65:89:df:8f:e3:70:71:08:8a: 7a:72:0d:82:2a:09:09:49:b0:81:cf:cc:81:d4:e2: a6:b4:36:5d:45:c2:4d:c3:23:16:3f:1b:8e:f8:c4: 6e:7e:bf:b6:a7:0b:ca:af:f5:5a:3b:06:34:b0:2f: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:72:DD:40:CB:00:3C:E9:B5:F5:88:90:C4:A3:4C:C1:5D:97:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d612a76-6a6e-3cb1-8404-866fdaa11230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1c:6c:76:af:d0:d3:78:a0:2f:f5:83:bd:8a:16:42:68:72: eb:2e:8a:69:5f:4f:4d:ba:f6:df:4e:fd:d5:6b:db:20:75:06: 9b:08:2a:46:2c:4a:3c:7f:7f:0d:16:0d:32:69:59:7b:e8:3b: 1b:d5:f7:65:3a:68:e0:e5:83:bf:82:77:5a:ff:3c:b0:53:59: a9:e2:e9:e0:53:76:5e:40:2a:73:98:de:10:35:84:89:2a:1c: ab:da:d6:c7:06:89:09:2e:67:88:fd:50:b3:46:70:fb:a2:7a: e3:07:38:2c:f3:28:30:ae:cb:f4:37:bf:0f:66:37:f7:d9:52: 9a:91:a5:5d:88:ac:d3:26:92:20:da:37:7c:4c:f1:b0:ca:e4: 76:a2:48:e5:49:e8:7f:f4:ac:cf:bc:aa:95:4f:cf:0a:71:3f: ed:d3:99:6f:87:3c:81:04:b3:6d:8e:8a:0a:11:87:72:39:b5: 6f:ce:82:3f:94:c2:60:c7:99:80:49:5c:e1:5a:08:4a:60:95: 56:22:c0:19:f5:b0:97:1c:b5:43:8e:02:e6:f4:11:dc:88:1c: 09:69:a6:02:9c:3f:d4:8d:a6:54:3c:88:14:61:31:c9:3b:4b: 2c:f2:ef:48:b6:05:3a:c5:d5:d7:2d:f1:2c:c2:6c:09:0b:ad: ed:84:bf:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEeGSbH30G5L1ckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTA0OFoXDTI1MDcyMzE0MTA0OFowLzEtMCsGA1UEAxMk ZDkwYTU3ZDUtZWY5MS00OGI5LWEwZDMtMzZmNTUzOGJmMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7EIqbAazg/wN7Jh+Q3UJ1lGEkicAK68jVni Nlj/Pu30AhMQJr8nubr20/MYpM1fxV10glfYpDGgovV6jqPzGvwsdz347SKFyff1 sWRgGV9nV7RDAfoEfjAZCUACVaIq638mjrboxfH3WMOcKWOwn8amX8DwIl+v7FBJ xRlRzCc3Fn0wTRBuEo6gml0abQDcX1Wf8NV3Bi4azd/IjncAP/9eA1EmW0RefsOC bEJTKqUE/13GSyOGziCVx+SlrgojjXg172262qRlid+P43BxCIp6cg2CKgkJSbCB z8yB1OKmtDZdRcJNwyMWPxuO+MRufr+2pwvKr/VaOwY0sC+vZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeDct1AywA86bX1iJDEo0zBXZfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGQ2MTJhNzYtNmE2ZS0z Y2IxLTg0MDQtODY2ZmRhYTExMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKscbHav0NN4oC/1g72KFkJocusuimlfT0269t9O/dVr2yB1BpsIKkYs Sjx/fw0WDTJpWXvoOxvV92U6aODlg7+Cd1r/PLBTWani6eBTdl5AKnOY3hA1hIkq HKva1scGiQkuZ4j9ULNGcPuieuMHOCzzKDCuy/Q3vw9mN/fZUpqRpV2IrNMmkiDa N3xM8bDK5HaiSOVJ6H/0rM+8qpVPzwpxP+3TmW+HPIEEs22OigoRh3I5tW/Ogj+U wmDHmYBJXOFaCEpglVYiwBn1sJcctUOOAub0EdyIHAlppgKcP9SNplQ8iBRhMck7 Syzy70i2BTrF1dct8SzCbAkLre2Ev7s= -----END CERTIFICATE-----Generated at Tue Apr 29 21:07:10 2025 by rpki-client