$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/110dede2-fd8c-352e-9e3e-8c274d9b641a.roa File: 110dede2-fd8c-352e-9e3e-8c274d9b641a.roa (raw, json) Hash identifier: jrvNehhoVqABzGRFE+CAh7ojjcoHy+QNpawMFuwHG3A= Subject key identifier: 4E:92:39:C7:8B:E5:1E:66:10:EC:AE:DC:45:9E:B2:99:2D:37:F2:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2124A51747BC68B1B6700A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/110dede2-fd8c-352e-9e3e-8c274d9b641a.roa Signing time: Thu 24 Apr 2025 14:11:38 +0000 ROA not before: Thu 24 Apr 2025 14:11:38 +0000 ROA not after: Wed 23 Jul 2025 14:11:38 +0000 asID: 207266 IP address blocks: 65.22.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:4a:51:74:7b:c6:8b:1b:67:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:11:38 2025 GMT Not After : Jul 23 14:11:38 2025 GMT Subject: CN=a2e21cf1-2d53-4066-ba19-75a874a2bb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:34:69:bc:0c:26:37:42:b6:e2:2d:7e:39: 61:2f:01:77:67:fd:a0:91:2f:1b:c2:e9:94:6d:3c: 29:b8:3a:d8:b0:ef:16:1c:5e:4e:47:67:b6:3a:ab: 63:db:4a:a6:44:ee:f2:ed:8e:9d:24:27:df:31:fe: f7:24:d6:eb:e3:41:20:56:c8:7c:91:f9:2c:e7:e1: ca:f5:87:e9:8f:19:f0:c7:30:8d:42:49:ef:81:fe: b2:d8:d3:e9:c6:59:a6:8e:c5:ad:d2:0a:9f:d3:47: aa:a4:8c:67:b9:28:7e:ff:03:60:9a:88:0d:19:12: 7d:b4:c0:d1:7b:05:54:98:14:d3:f8:78:98:c2:d3: f3:4c:3d:a6:9c:ad:1e:55:f9:a9:dc:77:1b:2b:9b: 93:f3:d0:cc:b7:1f:49:f9:9c:50:2a:eb:bc:01:5d: 4f:cb:56:13:58:d3:b3:2c:d2:0f:53:10:11:8b:59: 60:0d:1d:33:38:9f:1b:a8:75:ae:d9:c7:48:65:7f: 5c:d7:39:27:d4:20:15:26:c8:0b:93:63:f3:57:29: f9:c2:70:3e:08:45:54:b3:a1:0f:fb:da:e2:19:f8: ac:a8:b1:2d:77:d5:20:8c:e0:a4:76:4a:04:b3:90: 75:63:e3:03:93:88:3e:89:09:35:b3:e6:33:7d:79: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:39:C7:8B:E5:1E:66:10:EC:AE:DC:45:9E:B2:99:2D:37:F2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/110dede2-fd8c-352e-9e3e-8c274d9b641a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:42:0c:22:c2:d1:3c:13:71:1d:e0:62:19:f3:89:25:ca:d3: f5:98:a6:c1:1b:61:ab:f9:6b:eb:ad:49:84:a7:df:e3:46:0b: 15:05:f3:97:2b:51:18:ee:9a:8d:d9:75:bf:a8:f3:30:72:e2: 2d:19:d5:56:c1:75:f7:03:1d:e4:36:ec:90:05:21:62:e0:6d: f5:74:e1:06:f0:31:f2:29:1d:33:15:ae:a2:ff:bd:82:28:ef: 44:c9:13:fa:6b:93:5d:a2:a0:a7:63:b4:96:01:80:5c:9d:b3: 9a:9d:80:44:c7:86:aa:53:cb:8d:08:77:2c:7a:2d:13:7b:c8: bc:39:2b:d0:bc:ac:cc:9a:8f:ff:48:5e:1b:1e:ed:a8:d8:d1: c3:04:aa:aa:03:cc:35:8d:8e:c1:61:88:dd:d3:28:54:04:c8: 3f:33:48:c0:b1:67:ab:fb:b0:0f:b9:2c:18:d8:dc:47:1d:e2: ca:9c:c6:ee:27:d6:1d:31:3d:80:77:82:27:dd:60:a7:10:1e: 9a:80:96:fd:23:e6:f4:2e:7d:9c:9b:88:72:08:46:03:ca:df: b2:30:cf:c9:da:a3:72:a6:40:b4:3a:df:5c:2f:91:39:9d:a2: 06:13:cf:03:ce:05:a5:db:35:0c:94:2d:8e:c3:c3:ea:86:12: 2e:ac:6f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEkpRdHvGixtnAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTEzOFoXDTI1MDcyMzE0MTEzOFowLzEtMCsGA1UEAxMk YTJlMjFjZjEtMmQ1My00MDY2LWJhMTktNzVhODc0YTJiYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwA0abwMJjdCtuItfjlhLwF3Z/2gkS8bwumU bTwpuDrYsO8WHF5OR2e2Oqtj20qmRO7y7Y6dJCffMf73JNbr40EgVsh8kfks5+HK 9YfpjxnwxzCNQknvgf6y2NPpxlmmjsWt0gqf00eqpIxnuSh+/wNgmogNGRJ9tMDR ewVUmBTT+HiYwtPzTD2mnK0eVfmp3HcbK5uT89DMtx9J+ZxQKuu8AV1Py1YTWNOz LNIPUxARi1lgDR0zOJ8bqHWu2cdIZX9c1zkn1CAVJsgLk2PzVyn5wnA+CEVUs6EP +9riGfisqLEtd9UgjOCkdkoEs5B1Y+MDk4g+iQk1s+YzfXlesQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6SOceL5R5mEOyu3EWespktN/LhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTEwZGVkZTItZmQ4Yy0z NTJlLTllM2UtOGMyNzRkOWI2NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxCDCLC0TwTcR3gYhnziSXK0/WYpsEbYav5a+utSYSn3+NGCxUF85cr URjumo3Zdb+o8zBy4i0Z1VbBdfcDHeQ27JAFIWLgbfV04QbwMfIpHTMVrqL/vYIo 70TJE/prk12ioKdjtJYBgFyds5qdgETHhqpTy40Idyx6LRN7yLw5K9C8rMyaj/9I Xhse7ajY0cMEqqoDzDWNjsFhiN3TKFQEyD8zSMCxZ6v7sA+5LBjY3Ecd4sqcxu4n 1h0xPYB3gifdYKcQHpqAlv0j5vQufZybiHIIRgPK37Iwz8nao3KmQLQ631wvkTmd ogYTzwPOBaXbNQyULY7Dw+qGEi6sb9s= -----END CERTIFICATE-----Generated at Wed Apr 30 03:39:55 2025 by rpki-client