$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa File: 1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa (raw, json) Hash identifier: aWmq7q4E0dS0FGkgncWYQVGD0waa+4SyDHlgj3eyPD4= Subject key identifier: 7D:75:CE:E4:1D:97:66:DE:C9:13:0E:E6:97:AF:BC:59:9F:F5:E0:00 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7D69B187EFB8B4A7B9E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa Signing time: Thu 24 Apr 2025 11:09:23 +0000 ROA not before: Thu 24 Apr 2025 11:09:23 +0000 ROA not after: Wed 23 Jul 2025 11:09:23 +0000 asID: 12041 IP address blocks: 65.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:d6:9b:18:7e:fb:8b:4a:7b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:23 2025 GMT Not After : Jul 23 11:09:23 2025 GMT Subject: CN=856d54b7-9562-4981-bc74-0a8f1b566f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:bc:9e:c7:cd:f6:40:c9:d0:1f:e1:e1:4b: 31:1c:4d:dd:bf:d7:2d:34:d9:06:00:ef:fa:ee:af: d9:e4:5a:ff:2e:9d:60:41:0b:d3:63:76:d8:78:55: 13:28:ed:ef:9b:dc:98:2a:8f:48:f3:3a:b9:46:99: fb:ab:bb:a6:c6:ba:79:8b:d8:21:db:1b:b2:8d:64: 81:5e:3e:75:7e:95:1d:30:e1:39:da:18:9c:53:f1: 53:96:dd:1a:de:07:f9:6e:52:c3:6a:9e:f3:ef:77: 63:67:80:5b:b5:8e:c1:10:5d:66:74:bc:7c:2d:19: 2a:51:8d:d5:92:0c:df:61:56:f0:df:16:90:77:62: d2:d7:d7:2a:21:7f:cc:3b:7d:b3:da:c5:41:e3:6f: be:5e:d3:7d:cc:34:ff:ce:8f:35:fe:0b:e0:e6:91: f6:38:b7:6f:e3:83:4c:c1:97:91:7c:e1:8f:cc:c9: 74:91:8a:e5:27:d0:68:68:59:36:8d:60:24:81:c8: 84:2c:d0:6b:aa:3a:6e:2f:59:43:27:cf:7b:36:61: 74:83:82:71:d2:4d:ec:fc:ab:60:25:26:d0:50:0c: 74:a9:4c:5b:df:8e:5c:b5:a3:76:cc:40:30:1d:c4: 46:6c:32:54:76:a3:ed:0a:fe:b7:36:6a:c3:9d:46: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:CE:E4:1D:97:66:DE:C9:13:0E:E6:97:AF:BC:59:9F:F5:E0:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1755ef91-a9a6-3fb7-abbf-522fc2613f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:92:dd:b2:74:8a:0c:bb:55:e9:2c:a0:32:c6:dd:f3:37:f5: 7f:a7:98:f4:fd:45:f7:15:e5:5c:11:90:4d:a9:3a:b8:b6:08: 0b:ae:76:ac:ae:3a:b8:55:72:e2:b9:93:a5:41:e2:4b:7f:27: f8:39:52:58:7d:1c:4e:6c:de:f4:98:9e:ab:7f:e6:89:c9:10: 4a:2b:51:f1:1c:9c:8b:75:18:18:97:5d:b4:2c:c4:32:bd:5e: 9e:52:ff:e8:31:26:85:fd:f3:9b:b0:14:2c:ec:25:6f:75:38: d9:8e:1b:e0:a8:2f:0f:a6:26:fa:98:27:41:8b:b7:0d:10:6a: 1b:72:ac:38:3c:60:0d:a1:c9:d8:e4:40:64:8a:92:95:10:76: f0:bb:fd:6e:67:0f:48:98:13:17:a7:1a:15:a3:33:21:2f:04: a9:c0:65:17:37:67:c5:93:98:64:89:52:a5:d7:21:bd:71:16: a1:5b:07:02:60:3e:2a:9d:a2:fa:38:70:3e:36:eb:c0:3c:4f: db:d0:31:36:0a:70:60:b2:43:61:fe:29:16:07:26:39:87:a8: fb:e5:c1:31:1a:da:6e:35:ce:c5:1b:90:6f:33:e4:41:a6:aa: 9c:cc:f4:97:dc:bc:67:18:79:18:a2:5c:7e:a7:49:f9:aa:96: ce:38:4a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht9abGH77i0p7ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkyM1oXDTI1MDcyMzExMDkyM1owLzEtMCsGA1UEAxMk ODU2ZDU0YjctOTU2Mi00OTgxLWJjNzQtMGE4ZjFiNTY2ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22W8nsfN9kDJ0B/h4UsxHE3dv9ctNNkGAO/6 7q/Z5Fr/Lp1gQQvTY3bYeFUTKO3vm9yYKo9I8zq5Rpn7q7umxrp5i9gh2xuyjWSB Xj51fpUdMOE52hicU/FTlt0a3gf5blLDap7z73djZ4BbtY7BEF1mdLx8LRkqUY3V kgzfYVbw3xaQd2LS19cqIX/MO32z2sVB42++XtN9zDT/zo81/gvg5pH2OLdv44NM wZeRfOGPzMl0kYrlJ9BoaFk2jWAkgciELNBrqjpuL1lDJ897NmF0g4Jx0k3s/Ktg JSbQUAx0qUxb345ctaN2zEAwHcRGbDJUdqPtCv63NmrDnUaYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH11zuQdl2beyRMO5pevvFmf9eAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTc1NWVmOTEtYTlhNi0z ZmI3LWFiYmYtNTIyZmMyNjEzZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWS3bJ0igy7VeksoDLG3fM39X+nmPT9RfcV5VwRkE2pOri2CAuudqyu OrhVcuK5k6VB4kt/J/g5Ulh9HE5s3vSYnqt/5onJEEorUfEcnIt1GBiXXbQsxDK9 Xp5S/+gxJoX985uwFCzsJW91ONmOG+CoLw+mJvqYJ0GLtw0QahtyrDg8YA2hydjk QGSKkpUQdvC7/W5nD0iYExenGhWjMyEvBKnAZRc3Z8WTmGSJUqXXIb1xFqFbBwJg Piqdovo4cD4268A8T9vQMTYKcGCyQ2H+KRYHJjmHqPvlwTEa2m41zsUbkG8z5EGm qpzM9JfcvGcYeRiiXH6nSfmqls44Ssk= -----END CERTIFICATE-----Generated at Tue Apr 29 16:20:02 2025 by rpki-client