$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1152f4fe-01d2-3afd-b1cd-1463439efcdb.roa File: 1152f4fe-01d2-3afd-b1cd-1463439efcdb.roa (raw, json) Hash identifier: Eky6MvWaIOthz3tv1UpcrZnbrBiVNjfzVnT5oWJQpPg= Subject key identifier: C7:C5:B3:BF:1C:74:0A:9B:C9:60:44:52:90:61:42:A9:D2:D8:CE:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B831BCF7A4B75B17D6BFC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1152f4fe-01d2-3afd-b1cd-1463439efcdb.roa Signing time: Thu 24 Apr 2025 11:10:06 +0000 ROA not before: Thu 24 Apr 2025 11:10:06 +0000 ROA not after: Wed 23 Jul 2025 11:10:06 +0000 asID: 12041 IP address blocks: 65.22.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b8:31:bc:f7:a4:b7:5b:17:d6:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:10:06 2025 GMT Not After : Jul 23 11:10:06 2025 GMT Subject: CN=87d2846e-bc4c-4c46-928e-0a3f35b7c22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:73:86:4c:a0:29:eb:44:f7:67:1c:7c:fb: cd:aa:d5:32:d8:34:b6:32:aa:9d:51:9b:64:7d:40: 42:6f:88:2f:1e:5b:4f:0a:71:06:12:18:5a:02:17: d6:f0:f1:01:a8:ed:25:d5:b0:78:30:8b:ea:17:53: 81:ce:70:e0:54:1b:b7:f0:5e:09:7c:be:80:9b:01: 1e:c8:0c:53:e0:28:e7:79:c1:5a:b1:16:19:8c:ce: 00:78:61:80:ff:64:18:0d:50:5f:ea:bc:43:0f:ad: 6d:f7:50:d0:99:c8:c0:dd:f8:52:d2:d2:e1:e6:6e: a7:bb:cb:ee:b8:e2:83:3a:1b:20:76:68:35:02:f2: 21:b8:96:37:43:8f:97:40:84:12:f4:c4:ef:79:2f: f2:c5:1f:e5:2b:21:a6:b4:10:b5:76:1c:ba:7b:4d: ff:6b:cd:6e:c6:2f:34:26:1f:0a:ea:52:cf:d9:04: 5b:40:b9:7d:db:69:e5:3e:f2:5e:e3:7d:0b:ae:33: c0:cb:5c:16:10:db:6e:9e:9d:41:f7:47:ba:4a:05: a4:8b:3d:6c:70:8c:e0:ae:c6:6e:ce:f2:55:70:cb: 89:98:b1:6d:11:82:30:a0:a8:36:8a:e4:88:96:94: 4e:51:fa:ab:4e:a5:17:ba:c8:73:37:57:cd:ac:82: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C5:B3:BF:1C:74:0A:9B:C9:60:44:52:90:61:42:A9:D2:D8:CE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1152f4fe-01d2-3afd-b1cd-1463439efcdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:7d:87:50:3d:0f:b8:f9:84:be:0d:1d:79:29:22:51:5f:27: 52:e4:e1:19:e7:06:21:46:8e:7d:37:06:cd:0d:0d:82:79:51: ba:4a:06:93:7e:d3:bb:f4:e3:77:d6:14:37:59:80:a9:0b:4d: 57:d4:a5:57:e6:82:ae:75:63:99:40:54:87:b1:86:2a:af:9f: f7:5b:dc:dd:8e:bc:60:1b:94:ce:65:da:2e:c2:6a:48:f2:0f: 0c:9f:ab:93:69:59:80:d7:10:d9:60:32:19:8a:a5:b2:68:66: 18:a2:7c:91:42:ac:59:1e:fe:8a:58:2d:eb:ce:df:8f:e2:b9: 87:6d:62:76:c4:9a:b4:83:ae:c9:ad:c3:b5:d9:3f:1a:22:fa: 87:24:1f:a3:2e:6c:fa:ec:52:0f:43:4e:15:98:62:c6:ae:77: f1:5b:d5:ac:84:d0:e7:23:91:3b:2e:c9:f9:40:9e:8d:88:d6: 30:93:ea:2c:ea:f5:3d:e9:5b:93:ab:20:3b:4c:f4:db:e4:48: 00:6c:75:08:ae:38:0a:cf:1e:ad:bd:4b:aa:0c:10:49:c5:a5: be:74:83:ff:d9:a0:82:72:6a:21:2d:a6:2f:d9:28:03:1a:6d: c0:1e:01:dd:ff:3b:79:d4:f2:32:42:6b:5f:25:ce:c3:1c:eb: 48:31:55:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuDG896S3WxfWv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTAwNloXDTI1MDcyMzExMTAwNlowLzEtMCsGA1UEAxMk ODdkMjg0NmUtYmM0Yy00YzQ2LTkyOGUtMGEzZjM1YjdjMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIVzhkygKetE92ccfPvNqtUy2DS2MqqdUZtk fUBCb4gvHltPCnEGEhhaAhfW8PEBqO0l1bB4MIvqF1OBznDgVBu38F4JfL6AmwEe yAxT4CjnecFasRYZjM4AeGGA/2QYDVBf6rxDD61t91DQmcjA3fhS0tLh5m6nu8vu uOKDOhsgdmg1AvIhuJY3Q4+XQIQS9MTveS/yxR/lKyGmtBC1dhy6e03/a81uxi80 Jh8K6lLP2QRbQLl922nlPvJe430LrjPAy1wWENtunp1B90e6SgWkiz1scIzgrsZu zvJVcMuJmLFtEYIwoKg2iuSIlpROUfqrTqUXushzN1fNrIJyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfFs78cdAqbyWBEUpBhQqnS2M4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTE1MmY0ZmUtMDFkMi0z YWZkLWIxY2QtMTQ2MzQzOWVmY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRbaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMF9h1A9D7j5hL4NHXkpIlFfJ1Lk4RnnBiFGjn03Bs0NDYJ5UbpKBpN+ 07v043fWFDdZgKkLTVfUpVfmgq51Y5lAVIexhiqvn/db3N2OvGAblM5l2i7Cakjy Dwyfq5NpWYDXENlgMhmKpbJoZhiifJFCrFke/opYLevO34/iuYdtYnbEmrSDrsmt w7XZPxoi+ockH6MubPrsUg9DThWYYsaud/Fb1ayE0OcjkTsuyflAno2I1jCT6izq 9T3pW5OrIDtM9NvkSABsdQiuOArPHq29S6oMEEnFpb50g//ZoIJyaiEtpi/ZKAMa bcAeAd3/O3nU8jJCa18lzsMc60gxVTQ= -----END CERTIFICATE-----Generated at Tue Apr 29 22:30:26 2025 by rpki-client